The property specifies if increased Increased_Operating_Costs operating costs occured in the Incident. The impact could include: cost of additional audits, new hires or training, mandatory action, higher insurance, etc. Examples of potential statuses are yes, no and suspected (these specific values are only provided to help explain the property: they are neither recommended values nor necessarily part stixCommon: 0..1 of any existing vocabulary). The content creator may choose any Increased_Operating_Costs VocabularyStringType arbitrary value or may constrain the set of possible values by referencing an externally-defined vocabulary or leveraging a formally defined vocabulary extending from the class. The stixCommon:ControlledVocabularyStringType STIX default vocabulary class for use in this property is ‘SecurityCompromiseVocab-1.0’. The property specifies if legal and Legal_And_Regulatory_Costs regulatory costs occured in the Incident. This includes legal fees, lawsuits, customer damages, contract violations, etc. Examples of potential statuses are yes, no and suspected (these specific values are only provided to help explain the property: they are neither recommended values nor necessarily part of any existing stixCommon: 0..1 vocabulary). The content creator may choose any arbitrary value or Legal_And_Regulatory_Costs VocabularyStringType may constrain the set of possible values by referencing an vocabulary or leveraging a formally defined vocabulary extending from the class. The stixCommon:ControlledVocabularyStringType STIX default vocabulary class for use in this property is ‘SecurityCompromiseVocab-1.0’. TotalLossEstimationType Class The class characterizes both the initial reported and actual estimated financial losses for this Incident. TotalLossEstimationType Table . Properties of the class TotalLossEstimationType Name Type Multiplicity Description The property Initial_Reported_Total_Loss_Estimation Initial_Reported_Total_Loss_Estimation 0..1 LossEstimationType specifies the initially reported level of total estimated financial loss for the Incident.
Increased_Operating_Costs stixCommon: VocabularyStringType 0..1 The Increased_Operating_Costs property specifies if increased operating costs occured in the Incident. The impact could include: cost of additional audits, new hires or training, mandatory action, higher insurance, etc. Examples of potential statuses are yes, no and suspected (these specific values are only provided to help explain the property: they are neither recommended values nor necessarily part of any existing vocabulary). The content creator may choose any arbitrary value or may constrain the set of possible values by referencing an externally-defined vocabulary or leveraging a formally defined vocabulary extending from the stixCommon:ControlledVocabularyStringType class. The STIX default vocabulary class for use in this property is ‘SecurityCompromiseVocab-1.0’. Legal_And_Regulatory_Costs stixCommon: VocabularyStringType 0..1 The Legal_And_Regulatory_Costs property specifies if legal and regulatory costs occured in the Incident. This includes legal fees, lawsuits, customer damages, contract violations, etc. Examples of potential statuses are yes, no and suspected (these specific values are only provided to help explain the property: they are neither recommended values nor necessarily part of any existing vocabulary). The content creator may choose any arbitrary value or may constrain the set of possible values by referencing an vocabulary or leveraging a formally defined vocabulary extending from the stixCommon:ControlledVocabularyStringType class. The STIX default vocabulary class for use in this property is ‘SecurityCompromiseVocab-1.0’. TotalLossEstimationType Class The TotalLossEstimationType class characterizes both the initial reported and actual estimated financial losses for this Incident. Table . Properties of the TotalLossEstimationType class Name Type Multiplicity Description Initial_Reported_Total_Loss_Estimation LossEstimationType 0..1 The Initial_Reported_Total_Loss_Estimation property specifies the initially reported level of total estimated financial loss for the Incident.
stix-v1.2.1-csd01-part6-incident.docx