center-for-threat-informed-defense / mappings-explorer

Mappings Explorer enables cyber defenders to understand how security controls and capabilities map onto the adversary behaviors catalogued in the MITRE ATT&CK® knowledge base. These mappings form a bridge between the threat-informed approach to cybersecurity and the traditional security controls perspective.
https://ctid.io/mappings-explorer
Apache License 2.0
38 stars 10 forks source link

MAPEX-80 Starting to fill in methodology docs and boilerplate text #33

Closed mehaase closed 8 months ago

mehaase commented 9 months ago
github-actions[bot] commented 9 months ago

This PR has been published to https://mappingsexplorer.z13.web.core.windows.net/MAPEX-80-methodology/

github-actions[bot] commented 9 months ago

This PR has been published to https://mappingsexplorer.z13.web.core.windows.net/MAPEX-80-methodology/

github-actions[bot] commented 9 months ago

This PR has been published to https://mappingsexplorer.z13.web.core.windows.net/MAPEX-80-methodology/

github-actions[bot] commented 9 months ago

This PR has been published to https://mappingsexplorer.z13.web.core.windows.net/MAPEX-80-methodology/

rossj-en commented 9 months ago

Allison makes a number of good points above. Concur enthusiastically with matching the visual elements from other areas of the site, and adding links to the header and footer for user ease of access.

Due to the amount of text it is helpful having the methodology on a separate page. As far as page formatting, it would be helpful to have a document tree or table of contents that lists and links the section headers. Overall the font is a little small for the amount of text displayed. The content could benefit from some graphics and diagrams as well.

For the main About page I like the "left text" "right links" design on the Framework landing pages (example VERIS). We could have the Build a Threat-Informed Defense Mindset title and content on the left, with links for each "section" and the separate Methodology page on the right.

Having the use cases on a separate page buries that information. I would eliminate the Use Cases page, folding the Use Cases > Target Audience section into About > Who Should Use Mappings Explorer and also folding the Use Cases > Usage into About > What is Mappings Explorer For. Finally, would move the Use Cases > User Stories to the bottom of the main About page. This would preserve/integrate all of the Use Cases content to one page, aligned with the overall website style and design, without making the About page too lengthy.

mehaase commented 9 months ago

@allisonrobbins I rebased and made the changes that we discussed. I opened up another jira ticket to finalize the language, and as we discussed we'll add a ticket for you to do a final pass on the layout. So barring any major issues, let's close out this issue.

github-actions[bot] commented 9 months ago

This PR has been published to https://mappingsexplorer.z13.web.core.windows.net/MAPEX-80-methodology/

allisonrobbins commented 9 months ago

@mehaase This looks good to me!