TC-NAC Impact qualification definition with CTA

[Asai08]

Hi,

I would like to clarify the ISE Impact Qualification/Cource_of_Action and the CTA Incident Risk mapping.

In ISE there are 5 types of Impact Qualifications such as ...

• 1 - Insignificant

• 2 - Distracting

• 3 - Painful

• 4 - Damaging

• 5 - Catastrophic

On the Other hand, in the CTA, it has 10 levels of incident risk.  Also, there are only 4 types of Course_Of_Action.

I assume that the mapping goes like follows. But I'm not sure. In CTA, it seems that there are only 4 types of incident risks, red, orange, amber, and sky blue.  

CTA Incident risk 10 -> ISE Impact Qualification: 5 - Catastrophic -> Cource_Of_Action Internal: Blocking

CTA Incident risk 9 (or 9 and 8?) -> ISE Impact Qualification: 4 - Damaging -> Cource_Of_Action: Eradication

...??

Are there any guides?

[jeppich · Accepted solution]

Hi,

Email me directly, this is determined by the CTA development engineers.

Thanks,

John

jeppich@cisco.com