| Field | Meaning | Sample Content |
| Type | Action process | “type”: “course-of-action” |
| Name | The name of the action process | “name”: “close port 445” |
| Description | Describe the details of the action process | “description”: “This is a detailed description of how to close the port...” |
| Action | Reserved fields—capture structured and automated action plans | None |