metrics: update rego and metric yaml

metrics/IncidentManagement/Ownership/IncidentManagementOwnership.yaml

@@ -1,8 +1,15 @@
 # ====== Metadata ======
 id: IncidentManagementOwnership
-description: TODO (Is this a security feature or just add it as resource?)
+description: This rule assesses whether a [Resource] that has the property [SecurityIncident] set to Java, also has the property [p1:Team] correctly configured.
 implementationGuidelines:
-  AMOE: "Which team is in charge of handling security incidents? Keywords are ['Incident Management', 'CERT']"
+  AMOE: 
+    question: "Which team is in charge of handling security incidents?"
+    keywords:
+      [
+        "Incident Management",
+        "CERT",
+      ]  
+
 category: IncidentManagement
 version: "1.0"
 comments: "<Enter further description of the metric here.>"

metrics/IncidentManagement/Ownership/metric.rego

@@ -1 +1,23 @@
-# TODO
+package cch.metrics.incident_management_policy01
+
+import data.cch.compare
+import rego.v1
+import input as document
+
+default applicable := false
+
+default compliant := false
+
+applicable if {
+  document
+}
+
+compliant if {
+  compare(data.operator, data.target_value, document:SecurityIncident.Team)
+}
+
+message := "The document has set the incident management team." if {
+	compliant
+} else := "The document has not set a valid incident management team." if {
+	not compliant
+}