| OscalCommon |
Mixin providing props, links, and remarks slots common to most OSCAL objects |
no |
| Property |
An attribute, characteristic, or quality of the containing object expressed a... |
no |
| Resource |
A resource associated with content in the containing document instance |
no |
| ConstraintTest |
A test expression which is expected to be evaluated by a tool |
no |
| ControlMatching |
Selecting a set of controls by matching their IDs with a wildcard pattern |
no |
| Removal |
Specifies objects to be removed from a control based on aspects of the object... |
no |
| ImportSSP |
Used by the assessment plan and POA&M to import information about the system |
no |
| LocalDefinitions |
Used to define data objects that are used in the assessment plan, that do not... |
no |
| SelectObjectiveById |
Used to select a control objective for inclusion/exclusion |
no |
| AssessmentSubjectSource |
Assessment subjects will be identified while conducting the referenced activi... |
no |
| OnDateCondition |
The task is intended to occur on the specified date |
no |
| WithinDateRange |
The task is intended to occur within the specified date range |
no |
| AtFrequency |
The task is intended to occur at the specified frequency |
no |
| TaskDependency |
Used to indicate that a task is dependent on another task |
no |
| SetParameter |
Identifies the parameter that will be set by the enclosed value |
no |
| ComponentStatus |
Describes the operational status of the system component |
no |
| PortRange |
Where applicable, the transport layer protocol port range |
no |
| ImplementationStatus |
Indicates the degree to which a given control is implemented |
no |
| ObjectiveStatus |
A determination of if the objective is satisfied or not within a given system |
no |
| RelatedObservation |
Relates the identified element to a set of referenced observations |
no |
| AssociatedRisk |
Relates the finding to a set of referenced risks |
no |
| LoggedBy |
Used to indicate who created a log entry in what role |
no |
| ImportProfile |
Used to import the OSCAL profile representing the system's control baseline |
no |
| SystemCharacteristics |
Contains the characteristics of the system, such as its name, purpose, and se... |
no |
| SystemStatus |
Describes the operational status of the system |
no |
| AuthorizationBoundary |
A description of this system's authorization boundary, optionally supplemente... |
no |
| Diagram |
A graphic that provides a visual representation the system, or some aspect of... |
no |
| NetworkArchitecture |
A description of the system's network architecture, optionally supplemented w... |
no |
| DataFlow |
A description of the logical flow of information within the system and across... |
no |
| SystemImplementation |
Provides information as to how the system is implemented |
no |
| LeveragedAuthorization |
A description of another authorized system from which this system inherits ca... |
no |
| SspImplementedRequirement |
Describes how the system satisfies an individual control |
no |
| SspStatement |
Identifies which statements within a control are addressed |
no |
| ByComponent |
Defines how the referenced component implements a set of controls |
no |
| ProvidedControlImplementation |
Describes a capability which may be inherited by a leveraging system |
no |
| ControlResponsibility |
Describes a control implementation responsibility imposed on a leveraging sys... |
no |
| InheritedControlImplementation |
Describes a control implementation inherited by a leveraging system |
no |
| SatisfiedControlImplementation |
Describes how this system satisfies a responsibility imposed by a leveraged s... |
no |
| ImportAssessmentPlan |
Used by assessment-results to import information about the original plan for ... |
no |
| AssessmentResultsLocalDefinitions |
Used to define data objects that are referenced by the assessment results but... |
no |
| ImportComponentDefinition |
Loads a component definition from another resource |
no |
| ImplementedRequirement |
Describes how the containing component or capability implements an individual... |
no |
| ImplementedControlStatement |
Identifies which statements within a control are addressed |
no |
| QualifierItem |
A qualifier describing requirements or incompatibilities |
no |
| PoamLocalDefinitions |
Allows components and inventory items to be defined within the POA&M for case... |
no |
| RelatedFinding |
Relates a POA&M item to a referenced finding |
no |
| Metadata |
Provides information about the containing document, and defines concepts shar... |
no |
| Revision |
An entry in a sequential list of revisions to the containing document |
no |
| Role |
Defines a function, which might be assigned to a party in a specific situatio... |
no |
| Location |
A physical point of presence, which may be associated with people, organizati... |
no |
| Party |
An organization or person, which may be associated with roles or other concep... |
no |
| ResponsibleParty |
A reference to a set of persons and/or organizations that have responsibility... |
no |
| ResponsibleRole |
A reference to a role with responsibility for performing a function relative ... |
no |
| Action |
An action applied by a role within a given party to the content |
no |
| MetadataProperty |
Metadata-scoped OSCAL property |
no |
| RevisionProperty |
Revision-scoped OSCAL property |
no |
| LocationProperty |
Location-scoped OSCAL property |
no |
| PartyProperty |
Party-scoped OSCAL property |
no |
| ResourceProperty |
Back-matter resource-scoped OSCAL property |
no |
| PartProperty |
Control-common part-scoped OSCAL property |
no |
| ParameterProperty |
Control-common parameter-scoped OSCAL property |
no |
| Parameter |
Parameters provide a mechanism for the dynamic assignment of value(s) in a co... |
no |
| ProfileGroup |
A group of (selected) controls or of groups of controls within a profile cust... |
no |
| ProfileAlterationProperty |
OSCAL property entries allowed in profile modify additions |
no |
| ReviewedControls |
Identifies the controls being assessed and their control objectives |
no |
| ControlSelection |
Identifies the controls being assessed |
no |
| ControlObjectiveSelection |
Identifies the control objectives of the assessment |
no |
| AssessmentSubject |
Identifies system elements being assessed, such as components, inventory item... |
no |
| SelectSubjectById |
Identifies a set of assessment subjects to include/exclude by UUID |
no |
| SubjectReference |
A human-oriented identifier reference to a resource |
no |
| AssessmentSubjectPlaceholder |
Used when the assessment subjects will be determined as part of one or more o... |
no |
| AssessmentPlatform |
Used to represent the toolset used to perform aspects of the assessment |
no |
| UsesComponent |
The set of components that are used by the assessment platform |
no |
| LocalObjective |
A local definition of a control objective for this assessment |
no |
| AssessmentMethod |
A local definition of a control objective |
no |
| Activity |
Identifies an assessment or related process that can be performed |
no |
| Step |
Identifies an individual step in a series of steps related to an activity, su... |
no |
| Task |
Represents a scheduled event or milestone, which may be associated with a ser... |
no |
| AssociatedActivity |
Identifies an individual activity to be performed as part of a task |
no |
| SystemComponent |
A defined component that can be part of an implemented system |
no |
| SystemUser |
A type of user that interacts with the system based on an associated role |
no |
| InventoryItem |
A single managed inventory item within the system |
no |
| ImplementedComponent |
The set of components that are implemented in a given system inventory item |
no |
| ImplementationCommonProperty |
Implementation-common scoped OSCAL property |
no |
| ImplementationResponsibleRole |
Implementation-common scoped responsible role |
no |
| ImplementationResponsibleParty |
Implementation-common scoped responsible party |
no |
| RelatedTask |
Identifies an individual task for which the containing object is a consequenc... |
no |
| Observation |
Describes an individual observation |
no |
| RelevantEvidence |
Links this observation to relevant evidence |
no |
| Finding |
Describes an individual finding |
no |
| FindingTarget |
Captures an assessor's conclusions regarding the degree to which an objective... |
no |
| Facet |
An individual characteristic that is part of a larger set produced by the sam... |
no |
| Response |
Describes either recommended or an actual plan for addressing the risk |
no |
| RequiredAsset |
Identifies an asset required to achieve remediation |
no |
| RiskLogEntry |
Identifies an individual risk response that occurred as part of managing an i... |
no |
| RiskResponseReference |
Identifies an individual risk response that this log entry is for |
no |
| SspSystemCharacteristicsProp |
SSP-scoped property used in system characteristics |
no |
| SspSystemInformationProp |
SSP-scoped property used in system information |
no |
| SspControlOriginationProp |
SSP-scoped property used in implemented requirement and by-component contexts |
no |
| SspAllowsAuthenticatedScanProp |
SSP-scoped property used for component and inventory allows-authenticated-sca... |
no |
| SspSystemCharacteristicsResponsibleParty |
SSP-scoped responsible party for system characteristics |
no |
| SspImplementedRequirementResponsibleRole |
SSP-scoped responsible role used by implemented requirement and statement con... |
no |
| SspByComponentResponsibleRole |
SSP-scoped responsible role used by by-component contexts |
no |
| SspSystemComponent |
SSP-scoped system component with allows-authenticated-scan property typing |
no |
| SspInventoryItem |
SSP-scoped inventory item with allows-authenticated-scan property typing |
no |
| Result |
Identifies all of the assessment observations and findings, initial and resid... |
no |
| AssessmentLogEntry |
Identifies the result of an action and/or task that occurred as part of execu... |
no |
| DefinedComponent |
A defined component that can be part of an implemented system |
no |
| Capability |
A grouping of other components and/or capabilities |
no |
| MappingProvenance |
Mapping-level provenance details and mapping defaults |
no |
| Mapping |
A mapping between two mapped resources |
no |
| Map |
A relationship-based mapping entry between source and target sets |
no |
| MappingItem |
A source or target item participating in a mapping entry |
no |
| MappingResourceReference |
A reference to the source or target resource for a mapping |
no |
| PoamItem |
Describes an individual POA&M item |
no |