[Sec Assess WG] Naming and Scope of assessments

[lumjjb]

This issue was created from results of the Security Assessment Improvement Working Group (#167 (comment)).

Naming and Scope of assessments

Premise

• Assessment is an overloaded term, and can lead to confusion

Ideas

• Have a better articulation of what is a sec assess.
• Include scope to include additional aspect of code audit related checks/certification
• Add mapping aspects of assessments to compliance frameworks
• Additional suggestion of scope to include related to security testing
  • Implement hands-on security testing [Suggestion] Perform hands-on security testing during security assessments #394
  • Define requirements for hands-on security testing / best practices
  • Must be a process for onboarding and approving new "hands-on" testers

Logistics

• Contributors (For multiple contributors, 1 lead to coordinate)
• Placeholder_1
• Placeholder_2
• SIG-Representative

[stale]

This issue has been automatically marked as inactive because it has not had recent activity.

[TheFoxAtWork]

@lumjjb is this considered complete?

[stale]

This issue has been automatically marked as inactive because it has not had recent activity.

[anvega]

With the publication of the assessments book, we've ratified the use of assessment.