Issue #20 HAS comment 9

1. Collection endpoint in the system

1. Aggregation and normalization of the incoming data

1. Correlation with multiple input sources and internal data models

1. Visualization, Automated alert trickering, Statistical analysis, Reporting

1. Visualization, Triggering automated alerts, Statistical analysis, Reporting

1. Support for thread and vulnerability management process

Components may include:

- Device specific software that actively collects information from the managed device and makes available to the collection API endpoint

- Mediator software that analyses, compresses, filters, and/or deletes collected information as it arrives

- Data warehousing component that stores collected information for long term access based on the design requirements

- Workflow management and event trickering mechanism that generates events or alerts from the collected information

- Workflow management and event triggering mechanism that generates events or alerts from the collected information

Any component other than the software that collects data on the local device can be provided either as software provided to the user to run on its own devices, or as a remote data processing solution (RDPS). The imlementation of the collecting infrastructure depends often on the availability of existing components.