BCR-08-M1 and -M2 does not have sampling period or SLO recommendation

CloudSecurityAlliance / continuous-audit-metrics

Continuous Audit Metrics

Other

23 stars 12 forks source link

BCR-08-M1 and -M2 does not have sampling period or SLO recommendation #86

Open pritikin opened 5 months ago

pritikin commented 5 months ago

team discussion 3/13

BCR-08-m1 1st Proposal: sampling of 1day w/ measure monthly. 2nd Proposal: measure daily over a 30day sample. Need an way of deciding. Next step: step back and define these terms as per industry best practices and examples. Then choose.

BCR-08-m2 1st proposal: sample at a much longer period. 365?