Skip to content

Enum: CheckSeverityIdEnum

The normalized severity identifier that maps severity levels to standard

severity levels. For example CIS Benchmark: Level 2 maps to

4 (High), Level 1 maps to 3 (Medium).

For DISA STIG: CAT I maps to 5 (Critical), CAT

II maps to 4 (High), and CAT III maps to

3 (Medium).

URI: ocsf:CheckSeverityIdEnum

Permissible Values

Value Meaning Description
UNKNOWN None The severity is unknown
INFORMATIONAL None Informational message
LOW None The user decides if action is needed
MEDIUM None Maps to CIS Benchmark Level 1 - Essential security settings
HIGH None Maps to CIS Benchmark Level 2 - More restrictive and
CRITICAL None Maps to DISA STIG CAT I - Action is required immediately and the
FATAL None An error occurred but it is too late to take remedial action
OTHER None The severity is not mapped

Slots

Name Description
severity_id The normalized severity identifier that maps severity levels to standard

Identifier and Mapping Information

Schema Source

LinkML Source

name: CheckSeverityIdEnum
description: 'The normalized severity identifier that maps severity levels to standard

  severity levels. For example CIS Benchmark: <code>Level 2</code> maps to

  <code>4</code> (High), <code>Level 1</code> maps to <code>3</code> (Medium).

  For DISA STIG: <code>CAT I</code> maps to <code>5</code> (Critical), <code>CAT

  II</code> maps to <code>4</code> (High), and <code>CAT III</code> maps to

  <code>3</code> (Medium).'
from_schema: https://w3id.org/lmodel/ocsf
rank: 1000
permissible_values:
  UNKNOWN:
    text: UNKNOWN
    description: The severity is unknown.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '0'
      caption:
        tag: caption
        value: Unknown
  INFORMATIONAL:
    text: INFORMATIONAL
    description: Informational message. No action required.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '1'
      caption:
        tag: caption
        value: Informational
  LOW:
    text: LOW
    description: The user decides if action is needed.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '2'
      caption:
        tag: caption
        value: Low
  MEDIUM:
    text: MEDIUM
    description: 'Maps to CIS Benchmark <code>Level 1</code> - Essential security
      settings

      recommended for all systems, or DISA STIG <code>CAT III</code> - Action is

      required but the situation is not serious at this time.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '3'
      caption:
        tag: caption
        value: Medium
  HIGH:
    text: HIGH
    description: 'Maps to CIS Benchmark <code>Level 2</code> - More restrictive and

      security-focused settings for sensitive environments, or DISA STIG <code>CAT

      II</code> - Action is required immediately.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '4'
      caption:
        tag: caption
        value: High
  CRITICAL:
    text: CRITICAL
    description: 'Maps to DISA STIG <code>CAT I</code> - Action is required immediately
      and the

      scope is broad.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '5'
      caption:
        tag: caption
        value: Critical
  FATAL:
    text: FATAL
    description: An error occurred but it is too late to take remedial action.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '6'
      caption:
        tag: caption
        value: Fatal
  OTHER:
    text: OTHER
    description: 'The severity is not mapped. See the <code>severity</code> attribute,
      which

      contains a data source specific value.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '99'
      caption:
        tag: caption
        value: Other