All â
Please be aware that the changes proposed to the Course of Action object as part of the STIX 2.1 release are being removed. This removal is in accordance with the rules adopted by the CTI TC via a ballot entitled
âChoosing a path forward for STIX 2.1â on April 17th, 2018. The net result is that the definition for Course of Action in STIX 2.1 will be unchanged from the STIX 2.0 specification.
This removal was necessary as the Course of Action object failed to achieve the definition of âdoneâ as defined at the Salt Lake City face-to-face meeting in 2018 and as codified in the ballot referenced above.
Specifically, COA did not have the required two sponsoring organizations who could attest to successful implementation of the object as of the deadline of January 26th. The rule change was instituted in 2018 as a result of experiences with prior
releases where implementors sometime struggled to implement features that looked good on paper. The TC ultimately decided to impose the discipline of requiring sponsors and implementations to avoid this problem in the future. Fortunately, all of the other
objects and features proposed for addition to STIX 2.1 have satisfied the requirements and will be included in the STIX 2.1 Committee Specification.
Please let us know if you have any questions or concerns.
Regards,
Rich
Co-chair, CTI TC
Richard J. Struse
Director, The Center for Threat-Informed Defense
+1-703-983-7049 (office)
+1-703-342-8368 (mobile)