search

vz-risk / veris

Vocabulary for Event Recording and Incident Sharing (VERIS)
http://verisframework.org
Other
570 stars 161 forks source link

When should franchises be coded as small vs large? #197

Closed gdbassett closed 5 years ago

gdbassett commented 6 years ago

In what cases should franchises be considered by the size of the franchise and in what points should it be the parent company?

Is it related to what was compromised (a common payment system vs an insider or skimmer)?

This should be a discussion during veris review in fall 2018

gdbassett commented 6 years ago

wade rational: if it's individiually owned, it should be considered small... but does anyone consider 'mcdonalds' a small business?

was vector at the franchise or the corporate systems?

Resolution: add description of orgsize - Only use 'small business' if the vector was explicitly something unique to this individual franchisee.