Severity for cnspec controls - what is the best approach when no severity exists? #138
Unanswered
scottford-io
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
I am adding
severity
to a number of controls incnspec-policies
and while some controls line up with Benchmarks like CIS, others do not. Anyone have suggestions on how to create a sane default for severity on security controls?Beta Was this translation helpful? Give feedback.
All reactions