data protection

Open Threat Taxonomy

"The goal of this project is simple, to maintain a free, community driven, open source taxonomy of potential threats to information systems. Our hope is that this taxonomy will serve as a resource for organizations attempting to prioritize their defenses and choose controls most appropriate for defending their information systems. We believe that the nature of a common internet and homogeneous systems leads to common threats to information systems.

Vocabulary for Event Recording and Incident Sharing

"The Vocabulary for Event Recording and Incident Sharing (VERIS) is a set of metrics designed to provide a common language for describing security incidents in a structured and repeatable manner. VERIS is a response to one of the most critical and persistent challenges in the security industry - a lack of quality information. VERIS targets this problem by helping organizations to collect useful incident-related information and to share that information - anonymously and responsibly - with others.