Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Why are mitigation practices included in the Top 25 document instead of just pointing to them on the CWE site?

April 26, 2017CWE DOCUMENT included mitigation pointing practices site

0

Posted

Why are mitigation practices included in the Top 25 document instead of just pointing to them on the CWE site?

1 Answer

0

Posted

Since developers are one of the primary audiences, it was believed that much of their focus would be on mitigations, and many developers might want to print out the Top 25 for consultation during programming. So, it’s a matter of convenience for them. In addition, the mitigations in the CWE entries may change over time. In future Top 25 lists, we will be certain that the mitigations will be consistent with their CWE entries at the time of release.