{"action":"closed","issue":{"url":"https://api.github.com/repos/MISP/MISP/issues/1848","repository_url":"https://api.github.com/repos/MISP/MISP","labels_url":"https://api.github.com/repos/MISP/MISP/issues/1848/labels{/name}","comments_url":"https://api.github.com/repos/MISP/MISP/issues/1848/comments","events_url":"https://api.github.com/repos/MISP/MISP/issues/1848/events","html_url":"https://github.com/MISP/MISP/issues/1848","id":201015973,"number":1848,"title":"Open feedback on Information Sharing Maturity Level (ISML)","user":{"login":"adulau","id":3309,"avatar_url":"https://avatars2.githubusercontent.com/u/3309?v=4","gravatar_id":"","url":"https://api.github.com/users/adulau","html_url":"https://github.com/adulau","followers_url":"https://api.github.com/users/adulau/followers","following_url":"https://api.github.com/users/adulau/following{/other_user}","gists_url":"https://api.github.com/users/adulau/gists{/gist_id}","starred_url":"https://api.github.com/users/adulau/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/adulau/subscriptions","organizations_url":"https://api.github.com/users/adulau/orgs","repos_url":"https://api.github.com/users/adulau/repos","events_url":"https://api.github.com/users/adulau/events{/privacy}","received_events_url":"https://api.github.com/users/adulau/received_events","type":"User","site_admin":false},"labels":[{"id":27676211,"url":"https://api.github.com/repos/MISP/MISP/labels/enhancement","name":"enhancement","color":"84b6eb","default":true}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-01-16T13:12:53Z","updated_at":"2018-05-03T09:27:03Z","closed_at":"2018-05-03T09:27:03Z","author_association":"OWNER","body":"# Information Sharing Maturity Level (ISML)\r\n\r\nThe Information Sharing Maturity Level (ISML) is calculated from the sum of values which can be extracted automatically from the MISP instance holding the access to a sharing community. Each value is independent from each others meaning that depending of the information sharing practices of an organisation, a maturity level can be calculated. The maturity level can be represented by a simple vector to show the gap or the current practices and capabilities of an organisation (e.g. an organisation only consuming information via the API has a specific capability which can be rated). As previously stated, this information can be kept privately in a specific sharing community or shared globally.\r\n\r\n- L1 Have access to a MISP instance accessing a community, have at least one user with an encryption key and receive encrypted notification. (M)\r\n- C1 (L1) Contributing via proposals or discussions at least once a year. (M)\r\n- C2 (L1) Actively contributing proposals to recent events. (M)\r\n- C3 (L1) Adding events at least once a year. (M)\r\n- C4 (L1) Adding events at least once a month. (M)\r\n- C5 (L1) Regularly (at least one per week) posting events with adequate classification. (M)\r\n- C6 (L1) Using the API. (M)\r\n- C7 (L1) Complex API usage. (M)\r\n- C8 (L1) Having their own MISP instance. (M)\r\n- C9 (L1) Having own and connected MISP instance. (M)\r\n- C10 (L1) Running their own connected sharing communities.\r\n- C11 (L1) Ensuring best security practices when sharing information.\r\n\r\nThe aim behind this scores is to help organisations contributing **to know where they are, what they can still do to improve their practices and to fully benefit from information sharing**.\r\n\r\nThis issue is open to get feedback on the proposed value and scoring scheme before doing an implementation in the MISP core platform. Feel free to comment with updates or proposal regarding this model.\r\n"}}
{"actor":{"display_login":"adulau"}}