-
Notifications
You must be signed in to change notification settings - Fork 96
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
add additional sample content (#1081)
- Loading branch information
Showing
5 changed files
with
196 additions
and
9 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
33 changes: 33 additions & 0 deletions
33
src/validations/constraints/content/resolved-example-profile.xml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,33 @@ | ||
| <?xml version="1.0" encoding="UTF-8"?> | ||
| <catalog xmlns="http://csrc.nist.gov/ns/oscal/1.0" uuid="2a1553a7-2ae5-4669-a260-7c6fe6215170"> | ||
| <metadata> | ||
| <title>Sample</title> | ||
| <last-modified>2025-01-08T00:00:00Z</last-modified> | ||
| <version>1.0</version> | ||
| <oscal-version>1.1.3</oscal-version> | ||
| </metadata> | ||
| <control id="sample-1"> | ||
| <title>Sample 1</title> | ||
| <part name="statement" id="sample-1_smt"> | ||
| <part name="item" id="sample-1_smt.a"> | ||
| <prop ns="https://fedramp.gov/ns/oscal" name="response-point" value="You must fill in this response point." /> | ||
| <p>Should be INCLUDED (sample-1_smt.a)</p> | ||
| <part name="item" id="sample-1_smt.a.1"> | ||
| <prop ns="https://fedramp.gov/ns/oscal" name="response-point" value="You must fill in this response point." /> | ||
| <p>Should be INCLUDED (sample-1_smt.a.1)</p> | ||
| </part> | ||
| </part> | ||
| </part> | ||
|
|
||
| <part id="sample-1_obj" name="assessment-objective"> | ||
| <part id="sample-1_obj.a" name="assessment-objective"> | ||
| <prop ns="https://fedramp.gov/ns/oscal" name="response-point" value="You must fill in this response point."/> | ||
| <p>this should be EXCLUDED (sample-1_obj.a)</p> | ||
| <part id="sample-1_obj.a-1" name="assessment-objective"> | ||
| <prop ns="https://fedramp.gov/ns/oscal" name="response-point" value="You must fill in this response point."/> | ||
| <p>this should be EXCLUDED (sample-1_obj.a-1)</p> | ||
| </part> | ||
| </part> | ||
| </part> | ||
| </control> | ||
| </catalog> |
118 changes: 118 additions & 0 deletions
118
src/validations/constraints/content/ssp-has-required-response-points-VALID.xml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,118 @@ | ||
| <?xml version="1.0" encoding="UTF-8"?> | ||
| <?xml-model href="https://raw.githubusercontent.com/usnistgov/OSCAL/v1.0.4/xml/schema/oscal_complete_schema.xsd" schematypens="http://www.w3.org/2001/XMLSchema" title="OSCAL complete schema"?> | ||
| <system-security-plan xmlns="http://csrc.nist.gov/ns/oscal/1.0" uuid="11111111-2222-4000-8000-000000000000"> | ||
| <metadata></metadata> | ||
| <import-profile href="resolved-example-profile.xml"/> | ||
| <control-implementation> | ||
| <description></description> | ||
| <implemented-requirement uuid="11111111-2222-4000-8000-012000000001" control-id="unsupported-id"> | ||
| <prop name="control-origination" ns="http://fedramp.gov/ns/oscal" value="sp-system"/> | ||
| <link href="#11111111-2222-4000-8000-001000000005" rel="policy"/> | ||
| <link href="#11111111-2222-4000-8000-001000000023" rel="procedure"/> | ||
| <set-parameter param-id="ac-1_prm_1"> | ||
| <value>organization-defined personnel or roles</value> | ||
| </set-parameter> | ||
| <set-parameter param-id="mp-2_prm_2"> | ||
| <value>Chief Information Security Officer, Information System Security Officers, and System Administrators</value> | ||
| </set-parameter> | ||
| <statement statement-id="sample-1_smt" uuid="11111111-2222-4000-8000-013000000008"> | ||
| <by-component component-uuid="11111111-2222-4000-8000-009000000000" uuid="11111111-2222-4000-8000-014000000003"> | ||
| <description> | ||
| <p>There</p> | ||
| </description> | ||
| <prop name="planned-completion-date" ns="http://fedramp.gov/ns/oscal" value="2024-01-31Z"/> | ||
| <implementation-status state="partial"> | ||
| <remarks> | ||
| <p>Describe the plan to complete the implementation.</p> | ||
| </remarks> | ||
| </implementation-status> | ||
| </by-component> | ||
| <by-component component-uuid="11111111-2222-4000-8000-009000000013" uuid="11111111-2222-4000-8000-014000000004"> | ||
| <description> | ||
| <p>Describe how this policy currently satisfies part a.</p> | ||
| </description> | ||
| <prop name="planned-completion-date" ns="http://fedramp.gov/ns/oscal" value="2024-01-31Z"> | ||
| <remarks> | ||
| <p>Describe the plan for addressing the missing policy elements.</p> | ||
| </remarks> | ||
| </prop> | ||
| <implementation-status state="partial"> | ||
| <remarks> | ||
| <p>Identify what is currently missing from this policy.</p> | ||
| </remarks> | ||
| </implementation-status> | ||
| </by-component> | ||
| </statement> | ||
| <statement statement-id="ac-1_smt.a.1" uuid="11111111-2222-4000-8000-013000000001"> | ||
| <by-component component-uuid="11111111-2222-4000-8000-009000000000" uuid="11111111-2222-4000-8000-014000000001"> | ||
| <description> | ||
| <p>Describe how Part a is satisfied within the system.</p> | ||
| <p>Legacy approach. If no policy component is defined, describe here how the policy satisfies part a.</p> | ||
| <p>In this case, a link must be provided to the policy.</p> | ||
| <p>FedRAMP prefers all policies and procedures be attached as a resource in the back-matter. The link points to a resource.</p> | ||
| </description> | ||
| <link href="#11111111-2222-4000-8000-001000000005" rel="policy"/> | ||
| <link href="#11111111-2222-4000-8000-001000000023" rel="procedure"/> | ||
| <implementation-status state="operational"/> | ||
| <remarks> | ||
| <p>The specified component is the system itself.</p> | ||
| <p>Any control implementation response that can not be associated with another component is associated with the component representing the system.</p> | ||
| </remarks> | ||
| </by-component> | ||
| <by-component component-uuid="11111111-2222-4000-8000-009000000012" uuid="11111111-2222-4000-8000-014000000002"> | ||
| <description> | ||
| <p>Describe how this policy component satisfies part a.</p> | ||
| <p>Component approach. This links to a component representing the Identity Management and Access Control Policy.</p> | ||
| <p>That component contains a link to the policy, so it does not have to be linked here too.</p> | ||
| </description> | ||
| <implementation-status state="operational"/> | ||
| </by-component> | ||
| </statement> | ||
| <statement statement-id="sample-1_smt.a" uuid="11111111-2222-4000-8000-013000000002"> | ||
| <by-component component-uuid="11111111-2222-4000-8000-009000000000" uuid="11111111-2222-4000-8000-014000000003"> | ||
| <description> | ||
| <p>There</p> | ||
| </description> | ||
| <prop name="planned-completion-date" ns="http://fedramp.gov/ns/oscal" value="2024-01-31Z"/> | ||
| <implementation-status state="partial"> | ||
| <remarks> | ||
| <p>Describe the plan to complete the implementation.</p> | ||
| </remarks> | ||
| </implementation-status> | ||
| </by-component> | ||
| <by-component component-uuid="11111111-2222-4000-8000-009000000013" uuid="11111111-2222-4000-8000-014000000004"> | ||
| <description> | ||
| <p>Describe how this policy currently satisfies part a.</p> | ||
| </description> | ||
| <prop name="planned-completion-date" ns="http://fedramp.gov/ns/oscal" value="2024-01-31Z"> | ||
| <remarks> | ||
| <p>Describe the plan for addressing the missing policy elements.</p> | ||
| </remarks> | ||
| </prop> | ||
| <implementation-status state="partial"> | ||
| <remarks> | ||
| <p>Identify what is currently missing from this policy.</p> | ||
| </remarks> | ||
| </implementation-status> | ||
| </by-component> | ||
| </statement> | ||
|
|
||
| <statement statement-id="sample-1_smt.a.1" uuid="11111111-2222-4000-8000-013000000003"> | ||
| <by-component component-uuid="11111111-2222-4000-8000-009000000000" uuid="11111111-2222-4000-8000-014000000005"> | ||
| <description> | ||
| <p>Describe how Part b-1 is satisfied.</p> | ||
| </description> | ||
| <implementation-status state="operational"/> | ||
| </by-component> | ||
| </statement> | ||
| <statement statement-id="ac-1_smt.b.2" uuid="11111111-2222-4000-8000-013000000004"> | ||
| <by-component component-uuid="11111111-2222-4000-8000-009000000000" uuid="11111111-2222-4000-8000-014000000006"> | ||
| <description> | ||
| <p>Describe how Part b-2 is satisfied.</p> | ||
| </description> | ||
| <implementation-status state="operational"/> | ||
| </by-component> | ||
| </statement> | ||
| </implemented-requirement> | ||
| </control-implementation> | ||
| </system-security-plan> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters