In my opinion, the Board list is appropriate, until it’s time to move the discussion to a working group list.
In this case, I don’t think it was clear that you were addressing a broader problem space than just a specific weakness submission. Your question regarding the overall process is a valid one. For me, whether a parent exists or not, perhaps requires more information to arrive at a reasonable determination. In the example provided, I just don’t know, but perhaps others do. C Chris Levendis The MITRE Corporation cleven...@mitre.org (703) 298-8593 Get Outlook for iOS<https://aka.ms/o0ukef> ________________________________ From: Kurt Seifried <k...@seifried.org> Sent: Tuesday, August 9, 2022 1:59 PM To: Alec J Summers <asumm...@mitre.org> Cc: Common Weakness Enumeration (CWE) <c...@mitre.org>; CWE CAPEC Board <cwe-capec-board-list@mitre.org> Subject: Re: FW: are parent relationships required for new entries? Where do we discuss the process of how CWEs are made and how it can be improved? E.g. this parent process thing. On Tue, Aug 9, 2022 at 9:19 AM Alec J Summers <asumm...@mitre.org<mailto:asumm...@mitre.org>> wrote: Kurt, Please direct emails regarding submissions to c...@mitre.org<mailto:c...@mitre.org>, not the Board email list. Thank you. Cheers, Alec -- Alec J. Summers Center for Securing the Homeland (CSH) Cyber Security Engineer, Principal Group Lead, Cybersecurity Operations and Integration –––––––––––––––––––––––––––––––––––– MITRE - Solving Problems for a Safer World™ From: Kurt Seifried <k...@seifried.org<mailto:k...@seifried.org>> Date: Tuesday, August 9, 2022 at 11:18 AM To: CWE CAPEC Board <cwe-capec-board-list@mitre.org<mailto:cwe-capec-board-list@mitre.org>> Subject: are parent relationships required for new entries? Got feedback on one of my entries that includes: SUB.RELS - "Unclear relationships". Submission suggests some relationships, but the name/description is not explained in a way in which the relationship is relevant, or the weakness is apparent, but it is not clear what the best parent/child relationship(s) would be. Resolution: the submission cannot progress to publication stage until more clear relationships and direct parents are identified, but it can progress to other earlier stages if the CWE Team agrees that the potential relationships may require closer investigation. Is a parent relationship required for a new entry? What happens if something completely new is submitted that has no parent? -- Kurt Seifried (He/Him) k...@seifried.org<mailto:k...@seifried.org> -- Kurt Seifried (He/Him) k...@seifried.org<mailto:k...@seifried.org>
