Abstract

The present document provides a comprehensive security event classification model and the associated taxonomy (based on already existing results and hands-on user experience), covering both security incidents and vulnerabilities. These 2 latter ones become nonconformities when they violate organization's security policy. The present document (GS ISI 002) is meant mainly to support operational security staff in their effort to qualify and categorize the detected security events, and more generally to all stakeholders (especially CISOs and IT security managers) in their needs to establish a common language.

Links

• https://www.etsi.org/deliver/etsi_gs/isi/001_099/002/01.01.01_60/gs_isi002v010101p.pdf

Citation

ETSI, 2013. DGS/ISI-002: Information Security Indicators (ISI); Event Model - A Security Event Classification Model and Taxonomy - V1.1.1 (Standard No. DGS/ISI-002). ETSI.