Skip to content

SSVC v2.0 (v2021.5)

Compare
Choose a tag to compare
@ahouseholder ahouseholder released this 12 Apr 13:44
· 289 commits to main since this release
7844a53

The Stakeholder-specific Vulnerability Categorization (SSVC) is a system for prioritizing actions during vulnerability management. SSVC aims to avoid one-size-fits-all solutions in favor of a modular decision-making system with clearly defined and tested parts that vulnerability managers can select and use as appropriate to their context.

Version 2 improves on Version 1.1 with the addition of the coordinator stakeholder perspective, improvements to terminology, integration of feedback on decision point definitions, and tools to support practical use.