%% You should probably cite rfc7632 instead of this I-D. @techreport{ietf-sacm-use-cases-10, number = {draft-ietf-sacm-use-cases-10}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-sacm-use-cases/10/}, author = {David Waltermire and David Harrington}, title = {{Endpoint Security Posture Assessment: Enterprise Use Cases}}, pagetotal = 23, year = 2015, month = jul, day = 1, abstract = {This memo documents a sampling of use cases for securely aggregating configuration and operational data and evaluating that data to determine an organization's security posture. From these operational use cases, we can derive common functional capabilities and requirements to guide development of vendor-neutral, interoperable standards for aggregating and evaluating data relevant to security posture.}, }