Information Gathering -> Monitoring: Advanced availability and stability metrics
Risk and Opportunity
Risk: Trends and advanced attacks are not detected.
Opportunity: Advanced metrics are gathered in relation to availability and stability. For example unplanned downtime's per year.
Dependencies: Simple application metrics, Visualized metrics
Usefulness and Requirements of this Activity
Required knowledge: Medium (two disciplines)
Required time: Medium
Required resources (systems): Low
OWASP SAMM VERSION 2