OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help

cti message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]

Subject: Course of Action object in STIX 2.1

All â


Please be aware that the changes proposed to the Course of Action object as part of the STIX 2.1 release are being removed. This removal is in accordance with the rules adopted by the CTI TC via a ballot entitled âChoosing a path forward for STIX 2.1â on April 17th, 2018. The net result is that the definition for Course of Action in STIX 2.1 will be unchanged from the STIX 2.0 specification.


This removal was necessary as the Course of Action object failed to achieve the definition of âdoneâ as defined at the Salt Lake City face-to-face meeting in 2018 and as codified in the ballot referenced above. Specifically, COA did not have the required two sponsoring organizations who could attest to successful implementation of the object as of the deadline of January 26th.  The rule change was instituted in 2018 as a result of experiences with prior releases where implementors sometime struggled to implement features that looked good on paper. The TC ultimately decided to impose the discipline of requiring sponsors and implementations to avoid this problem in the future.  Fortunately, all of the other objects and features proposed for addition to STIX 2.1 have satisfied the requirements and will be included in the STIX 2.1 Committee Specification.


Please let us know if you have any questions or concerns.





Co-chair, CTI TC


Richard J. Struse

Director, The Center for Threat-Informed Defense


A close up of a sign

Description automatically generated


+1-703-983-7049 (office)

+1-703-342-8368 (mobile)

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]