From d6147823bcd1eeea619bab3f3d38aafda79df31d Mon Sep 17 00:00:00 2001 From: Rich Piazza Date: Wed, 14 Feb 2024 11:44:16 -0500 Subject: [PATCH] dez edits 5 --- .../incident-ef7/Incident Extension Suite.adoc | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/extension-definition-specifications/incident-ef7/Incident Extension Suite.adoc b/extension-definition-specifications/incident-ef7/Incident Extension Suite.adoc index b7b6adb11e0..6ba88490553 100644 --- a/extension-definition-specifications/incident-ef7/Incident Extension Suite.adoc +++ b/extension-definition-specifications/incident-ef7/Incident Extension Suite.adoc @@ -663,7 +663,7 @@ include::examples/example_2.3.2.1.1.json[] |*loss_type* (required) |[stixtype]#<># -|The type of loss that occurred to the relevant information +|The type of loss that occurred with respect to the relevant information. The values of this property *MUST* come from the [stixtype]#<># enumeration. @@ -733,7 +733,7 @@ include::examples/example_2.3.2.3.1.json[] |*alteration* (required) |[stixtype]#<># -|The type of alteration performed against the information that was compromised. +|The type of alteration affecting integrity of the information. The value of this property *MUST* come from the [stixtype]#<># enumeration. @@ -745,7 +745,7 @@ This can include control systems and other processes that can result in virtual The value of this property *SHOULD* come from the [stixtype]#<># open vocabulary. This value *MUST* be included if the alternation is not none. -Including an entry that with an alteration of none and no information_type indicates that no information had its integrity impacted by this incident. +Including an entry that with an alteration of [stixliteral]#none# and no information_type provided indicates that no information had its integrity impacted by this incident. |*record_count* (optional) |[stixtype]#{int_url}[integer]# @@ -789,6 +789,7 @@ The value of this property *SHOULD* come from the [stixtype]#<># open vocabulary. -This value *MUST* be included if the *impact_type* is not none. +This value *MUST* be included if the *impact_type* is not [stixliteral]#none# . Including an entry with an *impact_type* of none and no asset_type indicates that no physical damage was caused by this incident. |===