InformationGathering -> Monitoring: Advanced availability and stability metrics
Risk and Opportunity
Risk: Trends and advanced attacks are not detected.
Opportunity: Advanced metrics are gathered in relation to availability and stability. For example unplanned downtime's per year.
Usefulness and Requirements of this Activitiy
Required knowledge: Medium (two disciplines)
Required time: Medium
Required resources (systems): Low
Dependencies: Simple application metrics, Visualized metrics
OWASP SAMM VERSION 2