diff --git a/src/validations/constraints/CONTRIBUTING.md b/src/validations/constraints/CONTRIBUTING.md index 81fcef6f1..ba80b2f95 100644 --- a/src/validations/constraints/CONTRIBUTING.md +++ b/src/validations/constraints/CONTRIBUTING.md @@ -187,3 +187,140 @@ To add or modify constraints and their tests, it is important to understand Meta - [Metapath expression language](https://pages.nist.gov/metaschema/specification/syntax/metapath/) - [Metaschema tutorials for modeling and constraints](https://pages.nist.gov/metaschema/tutorials/) - [Metaschema complete syntax reference](https://pages.nist.gov/metaschema/specification/syntax/) + +## Troubleshooting + +### Enabling stack traces with `--show-stack-trace` + +See [this information](./README.md#debugging-details-of-unexpected-failures-with---show-stack-trace) on how to use `--show-stack-trace` for debugging info to troubleshoot unexpected failures. + +### Common causes and resolutions for unexpected failures + +Below is a list of common cases of unexpected failures. If an unexpected failure is in this list below, it is expected behavior unless otherwise noted. Each entry should have guidance on how to resolve the underlying issue so constraints and tools can successfully complete validation. + +#### org.xml.sax.SAXParseException + +This unexpected failure or similar ones indicate a case where you used the `oscal-cli` tool and constraints to validate an otherwise valid OSCAL XML document, but did not properly escape special syntax characters in XML as required (i.e. `&`; `<`; `>`). Below is an example. + +```sh +docker run --rm -it -v \ + $(PWD):/data ghcr.io/gsa/fedramp-automation/validation-tools \ + validate \ + '/data/AwesomeCloudSSP1.xml' \ + --show-stack-trace +Validating 'file:/data/AwesomeCloudSSP1.xml' as XML. +Unexpected failure during validation of 'file:/data/AwesomeCloudSSP1.xml' +java.io.IOException: Unexpected failure during validation of 'file:/data/AwesomeCloudSSP1.xml' + at gov.nist.secauto.metaschema.core.model.validation.XmlSchemaContentValidator.validate(XmlSchemaContentValidator.java:92) ~[dev.metaschema.java.metaschema-core-1.0.2.jar:?] + at gov.nist.secauto.metaschema.core.model.validation.AbstractContentValidator.validate(AbstractContentValidator.java:27) ~[dev.metaschema.java.metaschema-core-1.0.2.jar:?] + at gov.nist.secauto.metaschema.databind.IBindingContext$ISchemaValidationProvider.validateWithSchema(IBindingContext.java:473) ~[dev.metaschema.java.metaschema-databind-1.0.2.jar:?] + at gov.nist.secauto.metaschema.cli.commands.AbstractValidateContentCommand$AbstractValidationCommandExecutor.execute(AbstractValidateContentCommand.java:250) ~[dev.metaschema.java.metaschema-cli-1.0.2.jar:?] + at gov.nist.secauto.metaschema.cli.processor.CLIProcessor$CallingContext.invokeCommand(CLIProcessor.java:405) ~[dev.metaschema.java.cli-processor-1.0.2.jar:?] + at gov.nist.secauto.metaschema.cli.processor.CLIProcessor$CallingContext.processCommand(CLIProcessor.java:376) [dev.metaschema.java.cli-processor-1.0.2.jar:?] + at gov.nist.secauto.metaschema.cli.processor.CLIProcessor.parseCommand(CLIProcessor.java:175) [dev.metaschema.java.cli-processor-1.0.2.jar:?] + at gov.nist.secauto.metaschema.cli.processor.CLIProcessor.process(CLIProcessor.java:158) [dev.metaschema.java.cli-processor-1.0.2.jar:?] + at gov.nist.secauto.oscal.tools.cli.core.CLI.runCli(CLI.java:67) [dev.metaschema.oscal.oscal-cli-enhanced-2.0.2.jar:?] + at gov.nist.secauto.oscal.tools.cli.core.CLI.main(CLI.java:38) [dev.metaschema.oscal.oscal-cli-enhanced-2.0.2.jar:?] +Caused by: org.xml.sax.SAXParseException: The entity name must immediately follow the '&' in the entity reference. + at java.xml/com.sun.org.apache.xerces.internal.jaxp.validation.Util.toSAXParseException(Util.java:75) ~[?:?] + at java.xml/com.sun.org.apache.xerces.internal.jaxp.validation.StreamValidatorHelper.validate(StreamValidatorHelper.java:178) ~[?:?] + at java.xml/com.sun.org.apache.xerces.internal.jaxp.validation.ValidatorImpl.validate(ValidatorImpl.java:115) ~[?:?] + at java.xml/javax.xml.validation.Validator.validate(Validator.java:124) ~[?:?] + at gov.nist.secauto.metaschema.core.model.validation.XmlSchemaContentValidator.validate(XmlSchemaContentValidator.java:90) ~[dev.metaschema.java.metaschema-core-1.0.2.jar:?] + ... 9 more +``` + +To resolve this issue, you must find special characters (e.g. `&`) and properly escape them (e.g. `&`) more details can be found in [this post maintained by the StackOverflow community](https://stackoverflow.com/a/46637835). + +#### org.json.JSONException + +This unexpected failure, or similar ones, indicate a case where you used the `oscal-cli` tool and constraints to validate data that is not a valid OSCAL JSON document. + +```sh +docker run --rm -it \ + -v $(PWD):/data ghcr.io/gsa/fedramp-automation/validation-tools \ + validate --as=json \ + '/data/AwesomeCloudSSP1.xml' \ + --show-stack-trace +Validating 'file:/data/AwesomeCloudSSP1.xml' as JSON. +An uncaught runtime error occurred. A JSONObject text must begin with '{' at 1 [character 2 line 1] +org.json.JSONException: A JSONObject text must begin with '{' at 1 [character 2 line 1] + at org.json.JSONTokener.syntaxError(JSONTokener.java:503) ~[org.json.json-20240303.jar:?] + at org.json.JSONObject.(JSONObject.java:213) ~[org.json.json-20240303.jar:?] + at gov.nist.secauto.metaschema.databind.IBindingContext$ISchemaValidationProvider.validateWithSchema(IBindingContext.java:465) ~[dev.metaschema.java.metaschema-databind-1.0.2.jar:?] + at gov.nist.secauto.metaschema.cli.commands.AbstractValidateContentCommand$AbstractValidationCommandExecutor.execute(AbstractValidateContentCommand.java:250) ~[dev.metaschema.java.metaschema-cli-1.0.2.jar:?] + at gov.nist.secauto.metaschema.cli.processor.CLIProcessor$CallingContext.invokeCommand(CLIProcessor.java:405) ~[dev.metaschema.java.cli-processor-1.0.2.jar:?] + at gov.nist.secauto.metaschema.cli.processor.CLIProcessor$CallingContext.processCommand(CLIProcessor.java:376) [dev.metaschema.java.cli-processor-1.0.2.jar:?] + at gov.nist.secauto.metaschema.cli.processor.CLIProcessor.parseCommand(CLIProcessor.java:175) [dev.metaschema.java.cli-processor-1.0.2.jar:?] + at gov.nist.secauto.metaschema.cli.processor.CLIProcessor.process(CLIProcessor.java:158) [dev.metaschema.java.cli-processor-1.0.2.jar:?] + at gov.nist.secauto.oscal.tools.cli.core.CLI.runCli(CLI.java:67) [dev.metaschema.oscal.oscal-cli-enhanced-2.0.2.jar:?] + at gov.nist.secauto.oscal.tools.cli.core.CLI.main(CLI.java:38) [dev.metaschema.oscal.oscal-cli-enhanced-2.0.2.jar:?] +``` + +To resolve the issue, check the path, content, and schema validity of a file to confirm it is valid OSCAL JSON data. + +#### java.net.UnknownHostException + +This unexpected failure or similar ones indicate a DNS resolution error when using the `oscal-cli` tool to validate a remote OSCAL document on a HTTP server. Below is an example. + +```sh +docker run --rm -it -v \ + $(PWD):/data ghcr.io/gsa/fedramp-automation/validation-tools \ + validate \ + 'http://doesnotexist.tld/AwesomeCloudSSP1.xml' \ + --show-stack-trace +doesnotexist.tld +java.net.UnknownHostException: doesnotexist.tld + at java.base/sun.nio.ch.NioSocketImpl.connect(NioSocketImpl.java:567) ~[?:?] + at java.base/java.net.Socket.connect(Socket.java:752) ~[?:?] + at java.base/java.net.Socket.connect(Socket.java:687) ~[?:?] + at java.base/sun.net.NetworkClient.doConnect(NetworkClient.java:183) ~[?:?] + at java.base/sun.net.www.http.HttpClient.openServer(HttpClient.java:531) ~[?:?] + at java.base/sun.net.www.http.HttpClient.openServer(HttpClient.java:636) ~[?:?] + at java.base/sun.net.www.http.HttpClient.(HttpClient.java:280) ~[?:?] + at java.base/sun.net.www.http.HttpClient.New(HttpClient.java:386) ~[?:?] + at java.base/sun.net.www.http.HttpClient.New(HttpClient.java:408) ~[?:?] + at java.base/sun.net.www.protocol.http.HttpURLConnection.getNewHttpClient(HttpURLConnection.java:1310) ~[?:?] + at java.base/sun.net.www.protocol.http.HttpURLConnection.plainConnect0(HttpURLConnection.java:1243) ~[?:?] + at java.base/sun.net.www.protocol.http.HttpURLConnection.plainConnect(HttpURLConnection.java:1129) ~[?:?] + at java.base/sun.net.www.protocol.http.HttpURLConnection.connect(HttpURLConnection.java:1058) ~[?:?] + at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1691) ~[?:?] + at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1615) ~[?:?] + at java.base/java.net.URL.openStream(URL.java:1325) ~[?:?] + at gov.nist.secauto.metaschema.databind.io.DefaultBoundLoader.detectFormat(DefaultBoundLoader.java:110) ~[dev.metaschema.java.metaschema-databind-1.0.2.jar:?] + at gov.nist.secauto.metaschema.cli.commands.AbstractValidateContentCommand$AbstractValidationCommandExecutor.execute(AbstractValidateContentCommand.java:223) ~[dev.metaschema.java.metaschema-cli-1.0.2.jar:?] + at gov.nist.secauto.metaschema.cli.processor.CLIProcessor$CallingContext.invokeCommand(CLIProcessor.java:405) ~[dev.metaschema.java.cli-processor-1.0.2.jar:?] + at gov.nist.secauto.metaschema.cli.processor.CLIProcessor$CallingContext.processCommand(CLIProcessor.java:376) [dev.metaschema.java.cli-processor-1.0.2.jar:?] + at gov.nist.secauto.metaschema.cli.processor.CLIProcessor.parseCommand(CLIProcessor.java:175) [dev.metaschema.java.cli-processor-1.0.2.jar:?] + at gov.nist.secauto.metaschema.cli.processor.CLIProcessor.process(CLIProcessor.java:158) [dev.metaschema.java.cli-processor-1.0.2.jar:?] + at gov.nist.secauto.oscal.tools.cli.core.CLI.runCli(CLI.java:67) [dev.metaschema.oscal.oscal-cli-enhanced-2.0.2.jar:?] + at gov.nist.secauto.oscal.tools.cli.core.CLI.main(CLI.java:38) [dev.metaschema.oscal.oscal-cli-enhanced-2.0.2.jar:?] +``` + +Check network and DNS settings to ensure the system where you deployed `oscal-cli` and constraints can resolve the hostname to access the target HTTP server. + +#### java.io.IOException: Server returned HTTP response code + +This unexpected failure, or similar ones, indicate a HTTP error when using the `oscal-cli` tool to validate a remote OSCAL document on a HTTP server. Below is an example. + +```sh +docker run --rm -it -v \ + $(PWD):/data ghcr.io/gsa/fedramp-automation/validation-tools \ + validate \ + 'http://example.net/AwesomeCloudSSP1.xml' \ + --show-stack-trace +java.io.IOException: Server returned HTTP response code: 500 for URL: http://example.net/AwesomeCloudSSP1.xml + at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:2014) ~[?:?] + at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1615) ~[?:?] + at java.base/java.net.URL.openStream(URL.java:1325) ~[?:?] + at gov.nist.secauto.metaschema.databind.io.DefaultBoundLoader.detectFormat(DefaultBoundLoader.java:110) ~[dev.metaschema.java.metaschema-databind-1.0.2.jar:?] + at gov.nist.secauto.metaschema.cli.commands.AbstractValidateContentCommand$AbstractValidationCommandExecutor.execute(AbstractValidateContentCommand.java:223) ~[dev.metaschema.java.metaschema-cli-1.0.2.jar:?] + at gov.nist.secauto.metaschema.cli.processor.CLIProcessor$CallingContext.invokeCommand(CLIProcessor.java:405) ~[dev.metaschema.java.cli-processor-1.0.2.jar:?] + at gov.nist.secauto.metaschema.cli.processor.CLIProcessor$CallingContext.processCommand(CLIProcessor.java:376) [dev.metaschema.java.cli-processor-1.0.2.jar:?] + at gov.nist.secauto.metaschema.cli.processor.CLIProcessor.parseCommand(CLIProcessor.java:175) [dev.metaschema.java.cli-processor-1.0.2.jar:?] + at gov.nist.secauto.metaschema.cli.processor.CLIProcessor.process(CLIProcessor.java:158) [dev.metaschema.java.cli-processor-1.0.2.jar:?] + at gov.nist.secauto.oscal.tools.cli.core.CLI.runCli(CLI.java:67) [dev.metaschema.oscal.oscal-cli-enhanced-2.0.2.jar:?] + at gov.nist.secauto.oscal.tools.cli.core.CLI.main(CLI.java:38) [dev.metaschema.oscal.oscal-cli-enhanced-2.0.2.jar:?] +``` + +Check network settings to ensure the system where you deployed `oscal-cli` and constraints can access this HTTP server as intended. Ensure the protocol, host, and full path are valid. diff --git a/src/validations/constraints/README.md b/src/validations/constraints/README.md index b43796695..33bb453b2 100644 --- a/src/validations/constraints/README.md +++ b/src/validations/constraints/README.md @@ -252,6 +252,145 @@ After validating your FedRAMP OSCAL file, to fix validation errors 7. Fix the error. 8. Re-run the validation. +# Troubleshooting + +## Errors versus unexpected failures + +When using the `oscal-cli`, you may encounter errors or unexpected failures. + +## Debugging details of errors + +When the `oscal-cli` has an error condition, it will continue processing, but also return output to recommend how a user of the tool must change the runtime arguments or edit the OSCAL content to resolve the underlying issue. An example is below. + +```sh +% docker run --rm -it \ + -v $(PWD):/data ghcr.io/gsa/fedramp-automation/validation-tools \ + validate '/data/AwesomeCloudSSP1.xml' +Validating 'file:/data/AwesomeCloudSSP1.xml' as XML. +Validation identified the following issues: +[ERROR] # ... Truncated for brevity +``` + +In this example, the tool finished processing an OSCAL document and validated it. Despite the tool completing successfully, it did find issues in the content the user should know and possibly correct. These issues are only errors; this output does not state a more serious unexpected failure occurred. Errors are different from unexpected failures, which require more information to get more help. + +## Debugging details of unexpected failures with `--show-stack-trace` + +When the `oscal-cli` has an unexpected error condition, the tool must stop processing because it cannot recover. An unexpected error, or an exception, can return detailed technical output for tool maintainers to guide users on how to change runtime arguments or content to resolve the issue. By default, the `oscal-cli` does not show all of the information from an expected error. It will instead show a summary, such as the example below. + +```sh +docker run --rm -it \ + -v $(PWD):/data ghcr.io/gsa/fedramp-automation/validation-tools \ + validate '/data/AwesomeCloudSSP1.xml' +Validating 'file:/data/AwesomeCloudSSP1.xml' as XML. +Unexpected failure during validation of 'file:/data/AwesomeCloudSSP1.xml' +``` + +When the tool reports an unexpected failure, you can rerun the `oscal-cli` tool with a new command to see full details using the stack trace command. An example is below. + +```sh +docker run --rm -it \ + -v $(PWD):/data ghcr.io/gsa/fedramp-automation/validation-tools \ + validate '/data/AwesomeCloudSSP1.xml' \ + --show-stack-trace +Validating 'file:/data/AwesomeCloudSSP1.xml' as XML. +Unexpected failure during validation of 'file:/data/AwesomeCloudSSP1.xml' +java.io.IOException: Unexpected failure during validation of 'file:/data/AwesomeCloudSSP1.xml' + at gov.nist.secauto.metaschema.core.model.validation.XmlSchemaContentValidator.validate(XmlSchemaContentValidator.java:92) ~[dev.metaschema.java.metaschema-core-1.0.2.jar:?] + at gov.nist.secauto.metaschema.core.model.validation.AbstractContentValidator.validate(AbstractContentValidator.java:27) ~[dev.metaschema.java.metaschema-core-1.0.2.jar:?] + at gov.nist.secauto.metaschema.databind.IBindingContext$ISchemaValidationProvider.validateWithSchema(IBindingContext.java:473) ~[dev.metaschema.java.metaschema-databind-1.0.2.jar:?] + at gov.nist.secauto.metaschema.cli.commands.AbstractValidateContentCommand$AbstractValidationCommandExecutor.execute(AbstractValidateContentCommand.java:250) ~[dev.metaschema.java.metaschema-cli-1.0.2.jar:?] + at gov.nist.secauto.metaschema.cli.processor.CLIProcessor$CallingContext.invokeCommand(CLIProcessor.java:405) ~[dev.metaschema.java.cli-processor-1.0.2.jar:?] + at gov.nist.secauto.metaschema.cli.processor.CLIProcessor$CallingContext.processCommand(CLIProcessor.java:376) [dev.metaschema.java.cli-processor-1.0.2.jar:?] + at gov.nist.secauto.metaschema.cli.processor.CLIProcessor.parseCommand(CLIProcessor.java:175) [dev.metaschema.java.cli-processor-1.0.2.jar:?] + at gov.nist.secauto.metaschema.cli.processor.CLIProcessor.process(CLIProcessor.java:158) [dev.metaschema.java.cli-processor-1.0.2.jar:?] + at gov.nist.secauto.oscal.tools.cli.core.CLI.runCli(CLI.java:67) [dev.metaschema.oscal.oscal-cli-enhanced-2.0.2.jar:?] + at gov.nist.secauto.oscal.tools.cli.core.CLI.main(CLI.java:38) [dev.metaschema.oscal.oscal-cli-enhanced-2.0.2.jar:?] +Caused by: org.xml.sax.SAXParseException: The entity name must immediately follow the '&' in the entity reference. + at java.xml/com.sun.org.apache.xerces.internal.jaxp.validation.Util.toSAXParseException(Util.java:75) ~[?:?] + at java.xml/com.sun.org.apache.xerces.internal.jaxp.validation.StreamValidatorHelper.validate(StreamValidatorHelper.java:178) ~[?:?] + at java.xml/com.sun.org.apache.xerces.internal.jaxp.validation.ValidatorImpl.validate(ValidatorImpl.java:115) ~[?:?] + at java.xml/javax.xml.validation.Validator.validate(Validator.java:124) ~[?:?] + at gov.nist.secauto.metaschema.core.model.validation.XmlSchemaContentValidator.validate(XmlSchemaContentValidator.java:90) ~[dev.metaschema.java.metaschema-core-1.0.2.jar:?] + ... 9 more +``` + +This stack trace identifies a problem with the lower-level processing of OSCAL XML content. + +## Analyzing and understanding stack traces + +Developers use stack traces in their software to identify the order of execution and the error condition. The information helps confirm intended functionality or verify bugs that they must fix. Developer or not, you too can use this information to resolve your own issues with the `oscal-cli`, the FedRAMP constraints, and your content. With the information in a stack trace, you can do the following. + +1. Search [the developer documentation on unexpected failures](./CONTRIBUTING.md#common-causes-and-resolutions-for-unexpected-failures) and how to resolve them. +1. Copy paste part or whole of the exception output into a search engine to identify and resolve common causes of the error. +1. Use a chatbot or tooling with Large Language Models (LLM) functionality to explain, identify, and resolve common causes of the error. + +If 1, 2, or 3 do not help you identify and resolve your issue yourself, we strongly encourage you to engage the FedRAMP Automation Team and [provide feedback](#providing-feedback). + +**NOTE:** If you are a member of an organization, please consult your organization's staff and their policies for approved tools when attempting 2 or 3. + +## Asking good questions + +If you need help after trying to debug, you should [ask for help or report your issue](#providing-feedback). When you do that, it is really helpful to include debugging information so the FedRAMP Automation Team can reproduce your issue and give you the exact help you need. You should include the following. + +1. Version information about the constraints and tools you used. +1. If acceptable, any sample OSCAL data you used when the error or unexpected failure occurred. +1. What you have tried, what did not work, and how you wanted it to work. + +For 1, see below for more information about the versions of constraints and tools you use. + +**NOTE:** The FedRAMP Automation Team always welcomes when contributors provide sample data to reproduce an error or unexpected failure, but do not provide any production for a system. In addition, GSA does not authorize FedRAMP staff or community members to store any sensitive data in GitHub. Please coordinate with the team to build an equivalent minimally viable example if requested to do so. + +### Container version information + +If you are using the container-based tooling, you only need to include the container version information. You can find that information by running the following command and copy-pasting the output. + +```sh +docker image ls ghcr.io/gsa/fedramp-automation/validation-tools +``` + +You should see output like the example below, you can copy-paste this into the other details box of the issue template. + +```sh +REPOSITORY TAG IMAGE ID CREATED SIZE +ghcr.io/gsa/fedramp-automation/validation-tools latest d6f1a0a22474 3 days ago 561 MB +``` + +### Manual install version information + +If you are using the manually installed tooling, you only need to include a few items of information. You can find that information by running the following commands and copy-pasting the output. + +1. Provide the commit ID for the git repository. + +```sh +cd path/to/fedramp-automation +git branch --show-current +develop +git rev-parse HEAD +35b66c9da08ee125a3366000f9c36a0e74808c9c +``` + +2. Provide the version information for oscal-js. + +```sh +cd path/to/fedramp-automation/src/validations/constraints +make init +npx oscal --version +1.4.7 +``` + +3. Provide the version information for oscal-cli. + +```sh +$(npm config get prefix)/bin/oscal-cli --version +oscal-cli 2.1.0 built at 2024-09-16 15:20 from branch 3bf0b77e0dbfbe61988d2635439f691334840e35 (3bf0b77) at https://github.com/metaschema-framework/oscal-cli +liboscal-java built at 2024-09-15 17:40 from branch b509fb2c5d933894cef5cd308603784d4494826f (b509fb2) at https://github.com/metaschema-framework/liboscal-java +oscal v1.1.2 built at 2024-09-15 17:40 from branch 4f02dac6f698efda387cc5f55bc99581eaf494b6 (4f02dac) at https://github.com/usnistgov/OSCAL.git +metaschema-java 1.1.0 built at 2024-09-14T12:53:54+0000 from branch 874ad2d8d561f9c481208bdf389788313bda343a (874ad2d) at https://github.com/metaschema-framework/metaschema-java +metaschema built at 2024-09-14T12:53:54+0000 from branch 894b2238764c8732623a3894f0c236625ca5a686 (894b223) at https://github.com/metaschema-framework/metaschema.git +``` + # Providing feedback If you encounter a bug or have a feature to request, submit an issue at [https://github.com/GSA/fedramp-automation/issues/new/choose](https://github.com/GSA/fedramp-automation/issues/new/choose). + +If you encounter a problem specific to the constraints and tooling described above, you should add information about the constraints and tool versions you used to ask for help, report bugs, or request new features in the other details section of the issue template. diff --git a/src/validations/constraints/content/ssp-address-type-INVALID.xml b/src/validations/constraints/content/ssp-address-type-INVALID.xml index 762b59e93..51771a8cb 100644 --- a/src/validations/constraints/content/ssp-address-type-INVALID.xml +++ b/src/validations/constraints/content/ssp-address-type-INVALID.xml @@ -4,213 +4,8 @@ xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- Example Organization - ExOrg -
- - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
-
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - -

Detailed access control policy document

-
- -
-
- + \ No newline at end of file diff --git a/src/validations/constraints/content/ssp-attachment-type-INVALID.xml b/src/validations/constraints/content/ssp-attachment-type-INVALID.xml index 762b59e93..d06c671c3 100644 --- a/src/validations/constraints/content/ssp-attachment-type-INVALID.xml +++ b/src/validations/constraints/content/ssp-attachment-type-INVALID.xml @@ -3,213 +3,8 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
-
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - -

Detailed access control policy document

-
diff --git a/src/validations/constraints/content/ssp-authorization-type-INVALID.xml b/src/validations/constraints/content/ssp-authorization-type-INVALID.xml index 762b59e93..dd2fab6b5 100644 --- a/src/validations/constraints/content/ssp-authorization-type-INVALID.xml +++ b/src/validations/constraints/content/ssp-authorization-type-INVALID.xml @@ -3,214 +3,7 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - -

Detailed access control policy document

-
- -
-
diff --git a/src/validations/constraints/content/ssp-categorization-has-correct-system-attribute-INVALID.xml b/src/validations/constraints/content/ssp-categorization-has-correct-system-attribute-INVALID.xml index 762b59e93..237c20ea1 100644 --- a/src/validations/constraints/content/ssp-categorization-has-correct-system-attribute-INVALID.xml +++ b/src/validations/constraints/content/ssp-categorization-has-correct-system-attribute-INVALID.xml @@ -3,214 +3,12 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - high - - - moderate - - - low -
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - -

Detailed access control policy document

-
- -
-
diff --git a/src/validations/constraints/content/ssp-categorization-has-information-type-id-INVALID.xml b/src/validations/constraints/content/ssp-categorization-has-information-type-id-INVALID.xml index 762b59e93..237c20ea1 100644 --- a/src/validations/constraints/content/ssp-categorization-has-information-type-id-INVALID.xml +++ b/src/validations/constraints/content/ssp-categorization-has-information-type-id-INVALID.xml @@ -3,214 +3,12 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - high - - - moderate - - - low -
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - -

Detailed access control policy document

-
- -
-
diff --git a/src/validations/constraints/content/ssp-cloud-service-model-INVALID.xml b/src/validations/constraints/content/ssp-cloud-service-model-INVALID.xml index 762b59e93..c44fa26ed 100644 --- a/src/validations/constraints/content/ssp-cloud-service-model-INVALID.xml +++ b/src/validations/constraints/content/ssp-cloud-service-model-INVALID.xml @@ -3,214 +3,7 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - -

Detailed access control policy document

-
- -
-
diff --git a/src/validations/constraints/content/ssp-component-type-INVALID.xml b/src/validations/constraints/content/ssp-component-type-INVALID.xml index 0aaa31e5b..ed513b4c3 100644 --- a/src/validations/constraints/content/ssp-component-type-INVALID.xml +++ b/src/validations/constraints/content/ssp-component-type-INVALID.xml @@ -3,192 +3,8 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - - - Example Organization - ExOrg - - - - Jane Doe - jane.doe@example.com - - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
-
- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - C.2.8.12 - - - high - - - moderate - - - low - -
-
- - moderate - moderate - moderate - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
-
-
- - - System Administrator - - system-admin - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - Access Control Policy - -

Detailed access control policy document

-
- - -
-
diff --git a/src/validations/constraints/content/ssp-control-implementation-status-INVALID.xml b/src/validations/constraints/content/ssp-control-implementation-status-INVALID.xml index 762b59e93..01aea8746 100644 --- a/src/validations/constraints/content/ssp-control-implementation-status-INVALID.xml +++ b/src/validations/constraints/content/ssp-control-implementation-status-INVALID.xml @@ -3,214 +3,11 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
-
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - -

Implementation of controls for the Enhanced Example System

-
- - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 -
- - - - -

Detailed access control policy document

-
- -
-
diff --git a/src/validations/constraints/content/ssp-data-center-US-INVALID.xml b/src/validations/constraints/content/ssp-data-center-US-INVALID.xml index 762b59e93..aaa6e2b84 100644 --- a/src/validations/constraints/content/ssp-data-center-US-INVALID.xml +++ b/src/validations/constraints/content/ssp-data-center-US-INVALID.xml @@ -4,213 +4,11 @@ xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner -
WRONG
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
-
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - -

Detailed access control policy document

-
- -
-
diff --git a/src/validations/constraints/content/ssp-data-center-alternate-INVALID.xml b/src/validations/constraints/content/ssp-data-center-alternate-INVALID.xml index 762b59e93..aaa6e2b84 100644 --- a/src/validations/constraints/content/ssp-data-center-alternate-INVALID.xml +++ b/src/validations/constraints/content/ssp-data-center-alternate-INVALID.xml @@ -4,213 +4,11 @@ xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner -
WRONG
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
-
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - -

Detailed access control policy document

-
- -
-
diff --git a/src/validations/constraints/content/ssp-data-center-count-INVALID.xml b/src/validations/constraints/content/ssp-data-center-count-INVALID.xml index 762b59e93..aaa6e2b84 100644 --- a/src/validations/constraints/content/ssp-data-center-count-INVALID.xml +++ b/src/validations/constraints/content/ssp-data-center-count-INVALID.xml @@ -4,213 +4,11 @@ xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner -
WRONG
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
-
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - -

Detailed access control policy document

-
- -
-
diff --git a/src/validations/constraints/content/ssp-data-center-country-code-INVALID.xml b/src/validations/constraints/content/ssp-data-center-country-code-INVALID.xml index e0b33fc12..e35b0f489 100644 --- a/src/validations/constraints/content/ssp-data-center-country-code-INVALID.xml +++ b/src/validations/constraints/content/ssp-data-center-country-code-INVALID.xml @@ -4,204 +4,10 @@ xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - C.2.8.12 - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
-
-
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - Access Control Policy - -

Detailed access control policy document

-
- - -
-
diff --git a/src/validations/constraints/content/ssp-data-center-primary-INVALID.xml b/src/validations/constraints/content/ssp-data-center-primary-INVALID.xml index 762b59e93..aaa6e2b84 100644 --- a/src/validations/constraints/content/ssp-data-center-primary-INVALID.xml +++ b/src/validations/constraints/content/ssp-data-center-primary-INVALID.xml @@ -4,213 +4,11 @@ xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner -
WRONG
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
-
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - -

Detailed access control policy document

-
- -
-
diff --git a/src/validations/constraints/content/ssp-deployment-model-INVALID.xml b/src/validations/constraints/content/ssp-deployment-model-INVALID.xml index 762b59e93..03c17a486 100644 --- a/src/validations/constraints/content/ssp-deployment-model-INVALID.xml +++ b/src/validations/constraints/content/ssp-deployment-model-INVALID.xml @@ -3,214 +3,7 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - -

Detailed access control policy document

-
- -
-
diff --git a/src/validations/constraints/content/ssp-has-authenticator-assurance-level-INVALID.xml b/src/validations/constraints/content/ssp-has-authenticator-assurance-level-INVALID.xml index 762b59e93..c44fa26ed 100644 --- a/src/validations/constraints/content/ssp-has-authenticator-assurance-level-INVALID.xml +++ b/src/validations/constraints/content/ssp-has-authenticator-assurance-level-INVALID.xml @@ -3,214 +3,7 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - -

Detailed access control policy document

-
- -
-
diff --git a/src/validations/constraints/content/ssp-has-authorization-boundary-diagram-INVALID.xml b/src/validations/constraints/content/ssp-has-authorization-boundary-diagram-INVALID.xml index 060f59606..d4300feee 100644 --- a/src/validations/constraints/content/ssp-has-authorization-boundary-diagram-INVALID.xml +++ b/src/validations/constraints/content/ssp-has-authorization-boundary-diagram-INVALID.xml @@ -3,214 +3,8 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - - -

Detailed access control policy document

-
- - -
-
diff --git a/src/validations/constraints/content/ssp-has-authorization-boundary-diagram-caption-INVALID.xml b/src/validations/constraints/content/ssp-has-authorization-boundary-diagram-caption-INVALID.xml index 762b59e93..99fc57dba 100644 --- a/src/validations/constraints/content/ssp-has-authorization-boundary-diagram-caption-INVALID.xml +++ b/src/validations/constraints/content/ssp-has-authorization-boundary-diagram-caption-INVALID.xml @@ -3,214 +3,11 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - -

Detailed access control policy document

-
- -
-
diff --git a/src/validations/constraints/content/ssp-has-authorization-boundary-diagram-description-INVALID.xml b/src/validations/constraints/content/ssp-has-authorization-boundary-diagram-description-INVALID.xml index 762b59e93..99fc57dba 100644 --- a/src/validations/constraints/content/ssp-has-authorization-boundary-diagram-description-INVALID.xml +++ b/src/validations/constraints/content/ssp-has-authorization-boundary-diagram-description-INVALID.xml @@ -3,214 +3,11 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - -

Detailed access control policy document

-
- -
-
diff --git a/src/validations/constraints/content/ssp-has-authorization-boundary-diagram-link-INVALID.xml b/src/validations/constraints/content/ssp-has-authorization-boundary-diagram-link-INVALID.xml index 6ccbfa7bc..265d709ff 100644 --- a/src/validations/constraints/content/ssp-has-authorization-boundary-diagram-link-INVALID.xml +++ b/src/validations/constraints/content/ssp-has-authorization-boundary-diagram-link-INVALID.xml @@ -3,216 +3,10 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - - -

Detailed access control policy document

-
- - -
-
diff --git a/src/validations/constraints/content/ssp-has-authorization-boundary-diagram-link-rel-INVALID.xml b/src/validations/constraints/content/ssp-has-authorization-boundary-diagram-link-rel-INVALID.xml index 762b59e93..6481cafad 100644 --- a/src/validations/constraints/content/ssp-has-authorization-boundary-diagram-link-rel-INVALID.xml +++ b/src/validations/constraints/content/ssp-has-authorization-boundary-diagram-link-rel-INVALID.xml @@ -3,214 +3,11 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - -

Detailed access control policy document

-
- -
-
- + \ No newline at end of file diff --git a/src/validations/constraints/content/ssp-has-authorization-boundary-diagram-link-rel-allowed-value-INVALID.xml b/src/validations/constraints/content/ssp-has-authorization-boundary-diagram-link-rel-allowed-value-INVALID.xml index 434d043d7..375cc0d4c 100644 --- a/src/validations/constraints/content/ssp-has-authorization-boundary-diagram-link-rel-allowed-value-INVALID.xml +++ b/src/validations/constraints/content/ssp-has-authorization-boundary-diagram-link-rel-allowed-value-INVALID.xml @@ -3,217 +3,11 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - - -

Detailed access control policy document

-
- - -
-
diff --git a/src/validations/constraints/content/ssp-has-configuration-management-plan-INVALID.xml b/src/validations/constraints/content/ssp-has-configuration-management-plan-INVALID.xml index 762b59e93..d134e7119 100644 --- a/src/validations/constraints/content/ssp-has-configuration-management-plan-INVALID.xml +++ b/src/validations/constraints/content/ssp-has-configuration-management-plan-INVALID.xml @@ -3,208 +3,6 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
-
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- diff --git a/src/validations/constraints/content/ssp-has-federation-assurance-level-INVALID.xml b/src/validations/constraints/content/ssp-has-federation-assurance-level-INVALID.xml index 762b59e93..72e6dfad0 100644 --- a/src/validations/constraints/content/ssp-has-federation-assurance-level-INVALID.xml +++ b/src/validations/constraints/content/ssp-has-federation-assurance-level-INVALID.xml @@ -3,214 +3,7 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - -

Detailed access control policy document

-
- -
-
- + \ No newline at end of file diff --git a/src/validations/constraints/content/ssp-has-identity-assurance-level-INVALID.xml b/src/validations/constraints/content/ssp-has-identity-assurance-level-INVALID.xml index 762b59e93..72e6dfad0 100644 --- a/src/validations/constraints/content/ssp-has-identity-assurance-level-INVALID.xml +++ b/src/validations/constraints/content/ssp-has-identity-assurance-level-INVALID.xml @@ -3,214 +3,7 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - -

Detailed access control policy document

-
- -
-
- + \ No newline at end of file diff --git a/src/validations/constraints/content/ssp-has-incident-response-plan-INVALID.xml b/src/validations/constraints/content/ssp-has-incident-response-plan-INVALID.xml index 762b59e93..d134e7119 100644 --- a/src/validations/constraints/content/ssp-has-incident-response-plan-INVALID.xml +++ b/src/validations/constraints/content/ssp-has-incident-response-plan-INVALID.xml @@ -3,208 +3,6 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
-
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- diff --git a/src/validations/constraints/content/ssp-has-information-system-contingency-plan-INVALID.xml b/src/validations/constraints/content/ssp-has-information-system-contingency-plan-INVALID.xml index 762b59e93..d134e7119 100644 --- a/src/validations/constraints/content/ssp-has-information-system-contingency-plan-INVALID.xml +++ b/src/validations/constraints/content/ssp-has-information-system-contingency-plan-INVALID.xml @@ -3,208 +3,6 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
-
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- diff --git a/src/validations/constraints/content/ssp-has-network-architecture-INVALID.xml b/src/validations/constraints/content/ssp-has-network-architecture-INVALID.xml index fc86cdeca..25cbe3dbe 100644 --- a/src/validations/constraints/content/ssp-has-network-architecture-INVALID.xml +++ b/src/validations/constraints/content/ssp-has-network-architecture-INVALID.xml @@ -3,200 +3,6 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - - high - - - moderate - - - low - -
-
- - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
-
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - - -

Detailed access control policy document

-
- - -
-
diff --git a/src/validations/constraints/content/ssp-has-network-architecture-diagram-INVALID.xml b/src/validations/constraints/content/ssp-has-network-architecture-diagram-INVALID.xml index 88c10660e..5a44dfd10 100644 --- a/src/validations/constraints/content/ssp-has-network-architecture-diagram-INVALID.xml +++ b/src/validations/constraints/content/ssp-has-network-architecture-diagram-INVALID.xml @@ -3,211 +3,8 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
-
- -

A holistic, top-level explanation of the network architecture.

-
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - - -

Detailed access control policy document

-
- - -
-
diff --git a/src/validations/constraints/content/ssp-has-network-architecture-diagram-caption-INVALID.xml b/src/validations/constraints/content/ssp-has-network-architecture-diagram-caption-INVALID.xml index 762b59e93..3277935c9 100644 --- a/src/validations/constraints/content/ssp-has-network-architecture-diagram-caption-INVALID.xml +++ b/src/validations/constraints/content/ssp-has-network-architecture-diagram-caption-INVALID.xml @@ -3,214 +3,10 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- -

A holistic, top-level explanation of the network architecture.

-
-
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - -

Detailed access control policy document

-
- -
-
diff --git a/src/validations/constraints/content/ssp-has-network-architecture-diagram-description-INVALID.xml b/src/validations/constraints/content/ssp-has-network-architecture-diagram-description-INVALID.xml index 762b59e93..3277935c9 100644 --- a/src/validations/constraints/content/ssp-has-network-architecture-diagram-description-INVALID.xml +++ b/src/validations/constraints/content/ssp-has-network-architecture-diagram-description-INVALID.xml @@ -3,214 +3,10 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- -

A holistic, top-level explanation of the network architecture.

-
-
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - -

Detailed access control policy document

-
- -
-
diff --git a/src/validations/constraints/content/ssp-has-network-architecture-diagram-link-INVALID.xml b/src/validations/constraints/content/ssp-has-network-architecture-diagram-link-INVALID.xml index 8d90f8e22..3277935c9 100644 --- a/src/validations/constraints/content/ssp-has-network-architecture-diagram-link-INVALID.xml +++ b/src/validations/constraints/content/ssp-has-network-architecture-diagram-link-INVALID.xml @@ -3,213 +3,10 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
-
- -

A holistic, top-level explanation of the network architecture.

-
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - - -

Detailed access control policy document

-
- - -
-
diff --git a/src/validations/constraints/content/ssp-has-network-architecture-diagram-link-rel-INVALID.xml b/src/validations/constraints/content/ssp-has-network-architecture-diagram-link-rel-INVALID.xml index 9733ce9a4..c42b4e606 100644 --- a/src/validations/constraints/content/ssp-has-network-architecture-diagram-link-rel-INVALID.xml +++ b/src/validations/constraints/content/ssp-has-network-architecture-diagram-link-rel-INVALID.xml @@ -3,215 +3,11 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
-
- -

A holistic, top-level explanation of the network architecture.

-
- Network Diagram
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - - -

Detailed access control policy document

-
- - -
-
diff --git a/src/validations/constraints/content/ssp-has-network-architecture-diagram-link-rel-allowed-value-INVALID.xml b/src/validations/constraints/content/ssp-has-network-architecture-diagram-link-rel-allowed-value-INVALID.xml index 762b59e93..957a5f279 100644 --- a/src/validations/constraints/content/ssp-has-network-architecture-diagram-link-rel-allowed-value-INVALID.xml +++ b/src/validations/constraints/content/ssp-has-network-architecture-diagram-link-rel-allowed-value-INVALID.xml @@ -3,214 +3,11 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- -

A holistic, top-level explanation of the network architecture.

-
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - -

Detailed access control policy document

-
- -
-
diff --git a/src/validations/constraints/content/ssp-has-rules-of-behavior-INVALID.xml b/src/validations/constraints/content/ssp-has-rules-of-behavior-INVALID.xml index 762b59e93..d134e7119 100644 --- a/src/validations/constraints/content/ssp-has-rules-of-behavior-INVALID.xml +++ b/src/validations/constraints/content/ssp-has-rules-of-behavior-INVALID.xml @@ -3,208 +3,6 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
-
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- diff --git a/src/validations/constraints/content/ssp-has-separation-of-duties-matrix-INVALID.xml b/src/validations/constraints/content/ssp-has-separation-of-duties-matrix-INVALID.xml index 762b59e93..d134e7119 100644 --- a/src/validations/constraints/content/ssp-has-separation-of-duties-matrix-INVALID.xml +++ b/src/validations/constraints/content/ssp-has-separation-of-duties-matrix-INVALID.xml @@ -3,208 +3,6 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
-
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- diff --git a/src/validations/constraints/content/ssp-has-user-guide-INVALID.xml b/src/validations/constraints/content/ssp-has-user-guide-INVALID.xml index 762b59e93..d134e7119 100644 --- a/src/validations/constraints/content/ssp-has-user-guide-INVALID.xml +++ b/src/validations/constraints/content/ssp-has-user-guide-INVALID.xml @@ -3,208 +3,6 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
-
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- diff --git a/src/validations/constraints/content/ssp-information-type-system-INVALID.xml b/src/validations/constraints/content/ssp-information-type-system-INVALID.xml index 762b59e93..237c20ea1 100644 --- a/src/validations/constraints/content/ssp-information-type-system-INVALID.xml +++ b/src/validations/constraints/content/ssp-information-type-system-INVALID.xml @@ -3,214 +3,12 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - high - - - moderate - - - low -
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - -

Detailed access control policy document

-
- -
-
diff --git a/src/validations/constraints/content/ssp-interconnection-direction-INVALID.xml b/src/validations/constraints/content/ssp-interconnection-direction-INVALID.xml index 0d4703ec6..1a9a7bc8c 100644 --- a/src/validations/constraints/content/ssp-interconnection-direction-INVALID.xml +++ b/src/validations/constraints/content/ssp-interconnection-direction-INVALID.xml @@ -3,113 +3,7 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - - - Example Organization - ExOrg - - - - Jane Doe - jane.doe@example.com - - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
-
- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - C.2.8.12 - - - high - - - moderate - - - low - -
-
- - moderate - moderate - moderate - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
-
-
- - - System Administrator - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- External API Connection @@ -125,70 +19,5 @@

This connection is used for secure data exchange with external systems.

- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - Access Control Policy - -

Detailed access control policy document

-
- - -
-
\ No newline at end of file diff --git a/src/validations/constraints/content/ssp-interconnection-security-INVALID.xml b/src/validations/constraints/content/ssp-interconnection-security-INVALID.xml index 0d4703ec6..1a9a7bc8c 100644 --- a/src/validations/constraints/content/ssp-interconnection-security-INVALID.xml +++ b/src/validations/constraints/content/ssp-interconnection-security-INVALID.xml @@ -3,113 +3,7 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - - - Example Organization - ExOrg - - - - Jane Doe - jane.doe@example.com - - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
-
- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - C.2.8.12 - - - high - - - moderate - - - low - -
-
- - moderate - moderate - moderate - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
-
-
- - - System Administrator - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- External API Connection @@ -125,70 +19,5 @@

This connection is used for secure data exchange with external systems.

- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - Access Control Policy - -

Detailed access control policy document

-
- - -
-
\ No newline at end of file diff --git a/src/validations/constraints/content/ssp-missing-response-components-INVALID.xml b/src/validations/constraints/content/ssp-missing-response-components-INVALID.xml index ceeee823a..9af07aea0 100644 --- a/src/validations/constraints/content/ssp-missing-response-components-INVALID.xml +++ b/src/validations/constraints/content/ssp-missing-response-components-INVALID.xml @@ -3,162 +3,6 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - C.2.8.12 - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
-
-
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
-

Implementation of controls for the Enhanced Example System

@@ -176,15 +20,4 @@
- - - - - -

Detailed access control policy document

-
- - -
-
diff --git a/src/validations/constraints/content/ssp-privilege-level-INVALID.xml b/src/validations/constraints/content/ssp-privilege-level-INVALID.xml index 762b59e93..8413ce1bc 100644 --- a/src/validations/constraints/content/ssp-privilege-level-INVALID.xml +++ b/src/validations/constraints/content/ssp-privilege-level-INVALID.xml @@ -3,214 +3,9 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
-
- - System Administrator - - system-admin - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - -

Detailed access control policy document

-
- -
-
- + \ No newline at end of file diff --git a/src/validations/constraints/content/ssp-resource-has-base64-or-rlink-INVALID.xml b/src/validations/constraints/content/ssp-resource-has-base64-or-rlink-INVALID.xml index 762b59e93..d134e7119 100644 --- a/src/validations/constraints/content/ssp-resource-has-base64-or-rlink-INVALID.xml +++ b/src/validations/constraints/content/ssp-resource-has-base64-or-rlink-INVALID.xml @@ -3,208 +3,6 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
-
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- diff --git a/src/validations/constraints/content/ssp-resource-has-title-INVALID.xml b/src/validations/constraints/content/ssp-resource-has-title-INVALID.xml index 1b69c94ac..d134e7119 100644 --- a/src/validations/constraints/content/ssp-resource-has-title-INVALID.xml +++ b/src/validations/constraints/content/ssp-resource-has-title-INVALID.xml @@ -3,217 +3,12 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
-
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- -

Detailed access control policy document

-
diff --git a/src/validations/constraints/content/ssp-role-defined-authorizing-official-poc-INVALID.xml b/src/validations/constraints/content/ssp-role-defined-authorizing-official-poc-INVALID.xml index 762b59e93..97c9f68a5 100644 --- a/src/validations/constraints/content/ssp-role-defined-authorizing-official-poc-INVALID.xml +++ b/src/validations/constraints/content/ssp-role-defined-authorizing-official-poc-INVALID.xml @@ -52,165 +52,4 @@

This SSP is an example for demonstration purposes.

- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
-
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - -

Detailed access control policy document

-
- -
-
diff --git a/src/validations/constraints/content/ssp-role-defined-information-system-security-officer-INVALID.xml b/src/validations/constraints/content/ssp-role-defined-information-system-security-officer-INVALID.xml index 762b59e93..97c9f68a5 100644 --- a/src/validations/constraints/content/ssp-role-defined-information-system-security-officer-INVALID.xml +++ b/src/validations/constraints/content/ssp-role-defined-information-system-security-officer-INVALID.xml @@ -52,165 +52,4 @@

This SSP is an example for demonstration purposes.

- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
-
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - -

Detailed access control policy document

-
- -
-
diff --git a/src/validations/constraints/content/ssp-role-defined-system-owner-INVALID.xml b/src/validations/constraints/content/ssp-role-defined-system-owner-INVALID.xml index 762b59e93..97c9f68a5 100644 --- a/src/validations/constraints/content/ssp-role-defined-system-owner-INVALID.xml +++ b/src/validations/constraints/content/ssp-role-defined-system-owner-INVALID.xml @@ -52,165 +52,4 @@

This SSP is an example for demonstration purposes.

- - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
-
- - - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
-
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - -

Detailed access control policy document

-
- -
-
diff --git a/src/validations/constraints/content/ssp-scan-type-INVALID.xml b/src/validations/constraints/content/ssp-scan-type-INVALID.xml index 762b59e93..4e64d0cbf 100644 --- a/src/validations/constraints/content/ssp-scan-type-INVALID.xml +++ b/src/validations/constraints/content/ssp-scan-type-INVALID.xml @@ -3,214 +3,9 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
-
- - - System Administrator - - - system-admin - - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - -

Primary database server

-
- - - - - - - 11111111-0000-4000-9000-000000000001 - - - -
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - -

Detailed access control policy document

-
- -
-
diff --git a/src/validations/constraints/content/ssp-user-type-INVALID.xml b/src/validations/constraints/content/ssp-user-type-INVALID.xml index 762b59e93..c18c69815 100644 --- a/src/validations/constraints/content/ssp-user-type-INVALID.xml +++ b/src/validations/constraints/content/ssp-user-type-INVALID.xml @@ -3,214 +3,9 @@ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://csrc.nist.gov/ns/oscal/1.0 https://github.com/usnistgov/OSCAL/releases/download/v1.1.2/oscal_ssp_schema.xsd" uuid="12345678-1234-4321-8765-123456789012"> - - Enhanced Example System Security Plan - 2024-08-01T14:30:00Z - 2024-08-01T14:30:00Z - 1.1 - 1.0.0 - SSP-2024-002 - - - Document Creator - - - Content Approver - - - System Administrator - - - Asset Owner - - -
- WRONG -
- -
- - Example Organization - ExOrg - -
- - - Jane Doe - jane.doe@example.com -
- - - - 11111111-0000-4000-9000-000000000001 - - - 22222222-0000-4000-9000-000000000002 - - - -

This SSP is an example for demonstration purposes.

-
- - - - - - F00000001 - Enhanced Example System - -

This is an enhanced example system for demonstration purposes, incorporating more FedRAMP-specific elements.

-
- - - - moderate - - - Financial Information - -

Contains sensitive financial data related to organizational operations.

-
- - - - high - - - moderate - - - low - -
-
- - - moderate - moderate - moderate - - - - - - -

The authorization boundary includes all components within the main data center and the disaster recovery site.

-
- - - -
- - -

A holistic, top-level explanation of the network architecture.

-
- - - -
-
- - System Administrator - - system-admin - - - Primary Application Server - -

Main application server hosting the core system functionality.

-
- main line - - - 11111111-0000-4000-9000-000000000001 - - -

This is the primary application server for the system.

-
-
- - - External API Connection - -

Secure connection to an external API for data enrichment.

-
- - - - - 11111111-0000-4000-9000-000000000001 - - -

This connection is used for secure data exchange with external systems.

-
-
- - - -

Primary database server

-
- - - - - - - - 11111111-0000-4000-9000-000000000001 - - - - -
- - - -

Implementation of controls for the Enhanced Example System

-
- - - - - - - -

Access Control Policy and Procedures (AC-1) is fully implemented in our system.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
- - - - - - - -

Information System Component Inventory (CM-8) is partially implemented.

-
- - - 11111111-0000-4000-9000-000000000001 - -
-
-
- - - - -

Detailed access control policy document

-
- -
-