OWASP / Software-Component-Verification-Standard

Software Component Verification Standard (SCVS)
https://owasp.org/scvs
Creative Commons Attribution Share Alike 4.0 International
135 stars 39 forks source link

Possible word change #19

Closed garretfick closed 4 years ago

garretfick commented 4 years ago

I'm actually not sure what was meant by the sentence. I think you satisfy the requirements of a control, but you don't attain then.

When it talks about higher-level controls, is that referring to SCVS levels or about controls that an organization might have that are above SCVS?