Information Gathering -> Monitoring: Advanced availablity and stability metrics
Risk and Opportunity
Risk: Trends and advanced attacks are not detected.
Opportunity: Advanced metrics are gathered in relation to availability and stability. For example unplanned downtimes per year.
Required knowledge: Medium (two disciplines)
Required time: Medium
Required resources (systems): Low
Dependencies: Simple application metrics, Visualized metrics
OWASP SAMM 2 Mapping: o-incident-management|A|2