Hi folks,
Whilst there was a somewhat ambiguous statement in the release notes and FAQs for this SNTC upgrade relating to ‘improved accuracy’, I was not expecting to see such significant changes in PSIRT numbers. To give an example, for a subset of my inventories the following numbers were the list of unique PSIRTS applicable and also flagged as ‘vulnerable’.
Pre-upgrade
|
Critical
|
High
|
Medium
|
Low
|
Total
|
|
8
|
24
|
7
|
6
|
45
|
Post-upgrade
|
Critical
|
High
|
Medium
|
Low
|
Total
|
|
4
|
6
|
2
|
2
|
14
|
The fundamental questions being.
- What level of confidence should we have in the post 4.0 analysis?
- If the answer to Q1 is ‘high’, then was it known and understood that the pre-SNTC 4.0 analysis was so inaccurate? If so why wasn’t this communicated?
Regards, Graham
