Common Weakness Enumeration

CWRAF Vignette Details - Domain telecom

CWRAF version: 0.8.3

Date: April 3, 2013

Project Coordinator:

Document Editor:

Within the Common Weakness Risk Analysis Framework (CWRAF), a vignette provides a shareable, formalized way to define a particular environment, the role that software plays within that environment, and an organization's priorities with respect to software security. It identifies essential resources and capabilities, as well as their importance relative to security principles such as confidentiality, integrity, and availability. For example, in an e-commerce context, 99.999% uptime may be a strong business requirement that drives the interpretation of the severity of discovered weaknesses.

Vignettes allow CWSS to support diverse audiences who may have different requirements for how to prioritize weaknesses. CWSS scoring can occur within the context of a vignette.

This page currently contains details for 2 vignettes within the "telecom" domain. These are illustrative only; the CWRAF community will help to refine these and develop others. Feedback is welcome.