Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Assessment Plan, Result, and POA&M Models #681

Merged
merged 39 commits into from
Jun 1, 2020
Merged

Assessment Plan, Result, and POA&M Models #681

merged 39 commits into from
Jun 1, 2020

Conversation

brian-ruf
Copy link
Contributor

Committer Notes

This includes updated Assessment Plan, Assessment Result and POA&M Models, as well as updates to the FedRAMP profiles and resolved profile catalogs.

All Submissions:

  • Have you followed the guidelines in our Contributing document?
  • Have you checked to ensure there aren't other open Pull Requests for the same update/change?
  • Have you squashed any non-relevant commits and commit messages? [instructions]
  • Do all automated CI/CD checks pass?

Changes to Core Features:

  • Have you added an explanation of what your changes do and why you'd like us to include them?
  • Have you written new tests for your core changes, as applicable?
  • Have you included examples of how to use your new feature(s)?
  • Have you updated all OSCAL website and readme documentation affected by the changes you made? Changes to the OSCAL website can be made in the docs/content directory of your branch.

david-waltermire and others added 20 commits May 29, 2020 18:32
@david-waltermire
Renamed group-as names to make them more consistent.
60e2a42
@david-waltermire
Moved levergaed-authorizations to system-implementation. Made system-…
cb699d9 
…implementation and control-implementation required.
@david-waltermire
Initial commit of a partial set of leveraged authorization examples
21d2f56
@david-waltermire
Added metadata and fixed other front matter
8592158
@brian-ruf @david-waltermire
Updated examples with AU-5 mock-up data
042010c
@brian-ruf @david-waltermire
Filled in missing titles and descriptions. Added role/user.
eafaa3c
@brian-ruf @david-waltermire
Updates to examples. Tweak to SSP Metaschema
9221394
@david-waltermire
removed leveraged authorization examples, which are now in a differen…
6e85f64 
…t branch
@david-waltermire
Adding metaschema support for UUIDs
5857ecf
@david-waltermire
Fixed broken schema and schematron paths.
d99125c 
Implemented uuids addressing issue #676.
@david-waltermire
applying metaschema build fix
88453ed
@david-waltermire
Fixed content to use new uuid-based flags.
26c4b92
@wendellpiez
Profile resolution test set update to M3 models
705c36d
@wendellpiez
Updating profile resolver; renaming uuid support XSLT (#42)
b91b9f3
@david-waltermire
Removed SSL certificate check for wget
66a686e
@david-waltermire
Updated OSCAL version in metaschema files.
bd9f9f7 
Migrated definition of a system interconnection and service into components. The "service" and "interconnection" component types are now used to define these. (#498)
Flattened party -> org/person to be just party. Party now has a type which identifies if the party is a person or organization.
Added SHA-3 algorithms to the hash algorithm list. (#632)
@david-waltermire
Fixed Docker container to run scripts that require in-place editing.
0b5aaa3 
Fixed SSP elements that reference a component UUID, but lacked the correct type.
@david-waltermire
Added a location title.
282bcee
@david-waltermire
Updating metaschema support to fix bug (usnistgov/metaschema#56).
424f97e 
Added "homepage" link relation.
@david-waltermire
Fixed message error in round-trip validation which indicated the wron…
9f41a8e 
…g type of conversion as compared to what was actually happening.

Fixed remaining round-trip issues.
This was linked to issues Jun 1, 2020
SAP, SAR and POA&M Sample Files #639
Closed
Flatten Evidence Inventory #651
Closed
Adding 'uuid' flag to objects in addition to 'id' flag? #676
Closed
This was linked to issues Jun 1, 2020
OSCAL SSP schema review against an actual SSP Template #498
Closed
Enhance schemas to support more digest methods #632
Closed
david-waltermire
david-waltermire approved these changes Jun 1, 2020
View reviewed changes
Copy link
Contributor

@david-waltermire david-waltermire left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. The is a big step forward.

@david-waltermire david-waltermire merged commit 0c79f10 into usnistgov:master Jun 1, 2020
david-waltermire pushed a commit that referenced this pull request Jun 1, 2020
publish: Assessment Plan, Result, and POA&M Models (#681)
7b01fcc 
generated from commit 0c79f10
This was referenced Jun 1, 2020
Closed
Closed
@david-waltermire david-waltermire mentioned this pull request Jun 18, 2020
Closed
aj-stein-nist pushed a commit to aj-stein-nist/OSCAL-forked that referenced this pull request Jan 25, 2023
@brian-ruf @david-waltermire @wendellpiez
Assessment Plan, Result, and POA&M Models (usnistgov#681)
d620cf1 
* Renamed group-as names to make them more consistent.
* Moved levergaed-authorizations to system-implementation. Made system-implementation and control-implementation required.
* Added metadata and fixed other front matter in content
* Updated examples with AU-5 mock-up data
* Filled in missing titles and descriptions. Added role/user.
* Updates to examples. Tweak to SSP Metaschema
* Adding metaschema support for UUIDs. Implemented uuids addressing issue usnistgov#676.
* Fixed broken schema and schematron paths.
* Fixed content to use new uuid-based flags.
* Profile resolution test set update to M3 models
* Updating profile resolver; renaming uuid support XSLT (#42)
* Removed SSL certificate check for wget to deal with broken SSL cert on apache archive site.
* Updated OSCAL version in metaschema files.
* Migrated definition of a system interconnection and service into components. The "service" and "interconnection" component types are now used to define these. (usnistgov#498)
* Flattened party -> org/person to be just party. Party now has a type which identifies if the party is a person or organization.
* Added SHA-3 algorithms to the hash algorithm list. (usnistgov#632)
* Fixed Docker container to run scripts that require in-place editing.
* Fixed SSP elements that reference a component UUID, but lacked the correct type.
* Added a location title.
* Updating metaschema support to fix bug (usnistgov/metaschema#56).
* Added "homepage" link relation.

* Fixed message error in round-trip validation which indicated the wrong type of conversion as compared to what was actually happening.
Fixed remaining round-trip issues.

* Updated Assessment Metaschemas

* Updated FedRAMP Profiles

* WIP - UUID transition prep

* WIP assessment

* Finished UUID Transition

* Significant assessment metaschema updates

* Assessment metaschema changes

* Assessment metaschema changes

* party assembly tweaks

* Assessment Metaschema Updates

* Updated FedRAMP Profiles

* additional assessment model tweaks

* SAR and POA&M Model Adjustments

* Metaschema gymnastics

* Fixed invalid content.

* SSP Example - Remove Schema Line

* Baselines with relative path to catalog

* Baseline path tweaks

Co-authored-by: David Waltermire <david.waltermire@nist.gov>
Co-authored-by: Wendell Piez <wendell.piez@nist.gov>
Co-authored-by: Wendell Piez <wapiez@wendellpiez.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@david-waltermire david-waltermire david-waltermire approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
OSCAL 1.0.0 (Full Release)
3 participants
@brian-ruf @david-waltermire @wendellpiez