DavidRies
commented
4 years ago Here is a draft. I suspect we all have our individual styles. Don't feel any pressure to use this verbatim (or at all)! I just thought it would be useful to have a sample email to start from.
SUBJECT: SCAPv2: simplified authoring
Hello NAME,
I’m reaching out on behalf of the Content Authoring Working Group of the SCAPv2 initiative.
We need some input from whomever owns the OVAL/XCCDF authoring capability at ORG_NAME. Is that you?
You see, after years of struggling with the complexity (and tedium) of OVAL/XCCDF authoring, we are tackling the problem and working to drastically simplify the creation of security automation content. The project is in its formative stages and moving quickly. After multiple in-person meetings and teleconferences, we’ve identified a set of incremental changes to OVAL/XCCDF and a tooling strategy designed to:
- Enable content authors with little-to-no OVAL/SCAP experience to write checks to address common operational requirements
- Enable content authors with OVAL/SCAP expertise to solve complex authoring problems efficiently
- Enable organizations to create and maintain non-trivial bodies of SCAP content more easily
Before we commit to a solution and start building, we want to sanity-check that we’re solving the right problems in a useful way.
Do you have 30 minutes to answer a few specific questions about the kinds of OVAL/XCCDF authoring your organization does, challenges you face and capabilities you’d like to see in a new, improved authoring solution?
Let me know a time or two that work for you in the next couple weeks.
Thank you!
Create an email that can be used to reach out to the SCAP content authors we want to interview.