adammontville / cis-controls-71-measures

0 stars 0 forks source link

Ensure non-compliant lists are included in each set of measures #187

Closed adammontville closed 5 years ago

adammontville commented 5 years ago

We ultimately want measures to be not only useful for calculating metrics, but also informative/useful for post-assessment actions (i.e. remediation/improvement). Therefore, where we report something like "number of non-compliant endpoints", then we should include a measure that is a "list of non-compliant endpoints".