Abstract Asset to top-level construct rather than embedded within Incident

[sbarnum]

Consider creating a top-level construct for Asset and abstracting its use within Incident, Exploit_Target, etc.

This would allow for assets to be specified consistently across all usages in STIX.

[johnwunder]

Should consider making this an extensible type with extensions to existing asset / asset ID specifications

[athiasjerome]

Thanks God! Yes

[sbarnum]

This would also allow cleaner association with particular applicable ExploitTargets and COAs.

[athiasjerome]

I would like to recommend reuse of this
http://scap.nist.gov/specifications/ai/

I should also come back with elements coming from IETF SACM