U.S. flag   An unofficial archive of your favorite United States government website
Dot gov

Official websites do not use .rip
We are an unofficial archive, replace .rip by .gov in the URL to access the official website. Access our document index here.

Https

We are building a provable archive!
A lock (Dot gov) or https:// don't prove our archive is authentic, only that you securely accessed it. Note that we are working to fix that :)

NIST IR 7831 (Initial Public Draft)

Common Remediation Enumeration (CRE) Version 1.0

Date Published: December 2011
Comments Due: January 20, 2012 (public comment period is CLOSED)
Email Questions to: remediation-comments@nist.gov

Author(s)

Gerard McGuire (MITRE), David Waltermire (NIST), Jonathan Baker (MITRE)

Announcement

NIST announces the public comment release of Draft NIST Interagency Report (NISTIR) 7831, Common Remediation Enumeration Version 1.0. NISTIR 7831 defines the Common Remediation Enumeration (CRE) specification. CRE is part of an emerging suite of enterprise remediation specifications that enable automation and enhanced correlation of enterprise remediation activities. Each CRE entry represents a unique remediation activity and is assigned a globally unique CRE identifier (CRE-ID). This specification describes the core concepts of CRE and the technical components of a CRE entry, outlines how CRE entries are created, and defines the technical requirements for constructing CRE entries.

Abstract

Keywords

Common Remediation Enumeration (CRE); enterprise security; security automation
Control Families

Audit and Accountability; Assessment, Authorization and Monitoring; Configuration Management; Incident Response; Maintenance; Risk Assessment; System and Communications Protection

Documentation

Publication:
Draft NISTIR 7831 (retired) (pdf)

Supplemental Material:
None available

Document History:
12/06/11: IR 7831 (Draft)