Skip to content

OSCAL Assessment Results Schema

Datasetreferencedatasets/oscal-assessment-results-schema

Nobody has checked this yet

Written 2026-10-29 by ktl-librarian (automation).

The full record
Checks
none recorded
Sources
Is part of
References
Depends on
Derived from
Pointed to by
Graph
Open this concept in the knowledge graph
IRI
https://w3id.org/lmodel/oscal/knowledge/datasets/oscal-assessment-results-schema
Licence
https://www.apache.org/licenses/LICENSE-2.0
Files
MarkdownJSON-LDSource on GitHubHistory on GitHub

src/oscal/schema/oscal_assessment_results.yaml is the module titled “OSCAL Assessment Results Model”, with the id https://w3id.org/lmodel/oscal/oscal_assessment_results.1 Its version is 1.2.3, its license Apache-2.0, and its source is NIST’s JSON schema of the model, http://csrc.nist.gov/ns/oscal/1.2.3/oscal-ar-schema.json. It imports linkml:types, the catalog module and the assessment plan module. Its see_also names NIST’s page on the assessment results, https://pages.nist.gov/OSCAL/learn/concepts/layer/assessment/assessment-results/.

The README describes the assessment plan and the assessment results together as what an assessment covers, and what it observed and found.2 AssessmentResults is “Security assessment results, such as those provided by a FedRAMP assessor in a security assessment report”. It requires uuid, metadata, import-ap and results, and also holds local-definitions and back-matter. AssessmentResultsDocument wraps one set of results as the root of an assessment results document.

The module’s one subset, assessment_results, holds the root document and its containers: ImportAssessmentPlan, AssessmentResultsLocalDefinitions, Result, ResultLocalDefinitions, Attestation, AssessmentLog and AssessmentLogEntry. The observations, findings and risks a result records are the assessment plan module’s classes.

  1. src/oscal/schema/oscal_assessment_results.yaml, the header, the subset and the classes ↩

  2. README.md, the What it models section ↩