Merge remote-tracking branch 'origin/feat/vuln' into feat/vuln

# Conflicts:
#	src/assets/YAML/default/InformationGathering/TestKPI.yaml
#	src/assets/YAML/default/TestAndVerification/Consolidation.yaml
#	src/assets/YAML/default/TestAndVerification/StaticDepthForInfrastructure.yaml
#	src/assets/YAML/generated/generated.yaml

Author: wurstbrot

src/assets/YAML/default/InformationGathering/TestKPI.yaml

@@ -104,6 +104,39 @@ Information Gathering:
         - patching
         - metrics
         - vmm-measurements
+    SLA per criticality: # is this the definition of SLAs or the measurement?
+      uuid: 123e4567-e89b-12d3-a456-426614174000
+      risk: |-
+        Not communicating how many applications are adhering to SLAs based on the criticality of vulnerabilities can lead to delayed remediation of 
+        critical security issues, increasing the risk of exploitation and potential damage to the organization.
+      measure: |-
+        Measurement and communication of how many of the vulnerabilities handling per severity for components like applications are aligned to SLAs. 
+        This is performed for the hole organization and doesn't need to be broken down (yet) on team/product/application. 
+        At least quarterly.
+      difficultyOfImplementation:
+        knowledge: 2
+        time: 2
+        resources: 2
+      usefulness: 3
+      level: 3
+      dependsOn: []
+      implementation:
+        - $ref: src/assets/YAML/default/implementations.yaml#/implementations/owasp-defectdojo
+        - $ref: src/assets/YAML/default/implementations.yaml#/implementations/purify
+        - $ref: src/assets/YAML/default/implementations.yaml#/implementations/business-friendly-vulnerability-metrics
+        - $ref: src/assets/YAML/default/implementations.yaml#/implementations/defectdojo-client
+      references:
+        samm2:
+          - I-DM-3-B
+        iso27001-2022:
+          - 5.25
+          - 5.12
+          - 5.13
+          - 5.10
+      tags:
+        - vulnerability-mgmt
+        - metrics
+        - vmm-measurements
     Patching mean time to resolution via production:
       uuid: 77ffc53e-9f3d-41f4-92d3-02f04f9b6b0f
       risk: |-