The Vocabulary for Event Recording and Incident Sharing (VERIS) provides a common language for describing security incidents. The metrics allow for a structured and repeatable approach to describing and categorizing incidents. 

210-255 exam requirement 5.5 is to apply the VERIS schema to a given incident. In this section, we will look at some of the key terms. We will then practice these and give further analysis in the questions and worked answers:

The VERIS schema is divided into four elements (the four As), which help to segment categorization of an incident. A classification in each of the four elements is considered the minimum adequate description of an incident. Each of the four elements should therefore be considered independently.