Re: [cti-stix] STIX 2.0 Specification Questions

[Allan Thomson <athomson@lookingglasscyber.com>]

Hi John –

 

Re: “Should we add “remediate” in as a distinct option from “mitigate”? Is the difference between those two terms well-understood, clean, and relevant for cyber threat intelligence sharing?”

 

I would say that remediate and mitigate are different terms and often are confused as the same thing when they are *not* the same thing.

 

Therefore, we should not use mitigate to mean both.

 

If the COA proposal has capability to do both then we should make it clear by using both terms. And therefore avoid ambiguity around these terms.

 

allan