Skip to content
oscal

Class: Finding

Describes an individual finding.

URI: oscal:Finding

 classDiagram
    class Finding
    click Finding href "../Finding/"
      OscalCommon <|-- Finding
        click OscalCommon href "../OscalCommon/"
      
      Finding : description
        
      Finding : implementation_statement_uuid
        
      Finding : links
        
          
    
        
        
        Finding --> "*" Link : links
        click Link href "../Link/"
    

        
      Finding : origins
        
          
    
        
        
        Finding --> "*" Origin : origins
        click Origin href "../Origin/"
    

        
      Finding : props
        
          
    
        
        
        Finding --> "*" Property : props
        click Property href "../Property/"
    

        
      Finding : related_observations
        
          
    
        
        
        Finding --> "*" RelatedObservation : related_observations
        click RelatedObservation href "../RelatedObservation/"
    

        
      Finding : related_risks
        
          
    
        
        
        Finding --> "*" AssociatedRisk : related_risks
        click AssociatedRisk href "../AssociatedRisk/"
    

        
      Finding : remarks
        
      Finding : target
        
          
    
        
        
        Finding --> "1" FindingTarget : target
        click FindingTarget href "../FindingTarget/"
    

        
      Finding : title
        
      Finding : uuid

Inheritance

Section titled “Inheritance”

Slots

Section titled “Slots”
Name Cardinality and Range Description Inheritance
uuid 1
UUIDType		 A machine-oriented, globally unique identifier with a cross-instance scope direct
title 1
MarkupLineType		 A human-readable name or title direct
description 1
MarkupMultilineType		 A human-readable description direct
target 1
FindingTarget		 Identifies the target of a finding direct
implementation_statement_uuid 0..1
UUIDType		 A reference to the implementation statement in the SSP to which this finding … direct
origins *
Origin		 Identifies the source of observations, findings, or risks direct
related_observations *
RelatedObservation		 Relates the containing object to a set of referenced observations direct
related_risks *
AssociatedRisk		 Relates the finding to a set of referenced risks direct
remarks 0..1
MarkupMultilineType		 Additional commentary about the containing object OscalCommon
props *
Property		 A list of properties HasPropsAndLinks
links *
Link		 A list of links HasPropsAndLinks

Usages

Section titled “Usages”
used by used in type used
Result findings range Finding
PlanOfActionAndMilestones findings range Finding

In Subsets

Section titled “In Subsets”

Identifier and Mapping Information

Section titled “Identifier and Mapping Information”

Schema Source

Section titled “Schema Source”

Mappings

Section titled “Mappings”
Mapping Type Mapped Value
self oscal:Finding
native oscal:Finding

LinkML Source

Section titled “LinkML Source”

Direct

Section titled “Direct”
name: Finding
description: Describes an individual finding.
in_subset:
- assessment_common
from_schema: https://w3id.org/lmodel/oscal
mixins:
- OscalCommon
slots:
- uuid
- title
- description
- target
- implementation-statement-uuid
- origins
- related-observations
- related-risks
slot_usage:
  uuid:
    name: uuid
    required: true
  title:
    name: title
    required: true
  description:
    name: description
    required: true
  target:
    name: target
    required: true

Induced

Section titled “Induced”
name: Finding
description: Describes an individual finding.
in_subset:
- assessment_common
from_schema: https://w3id.org/lmodel/oscal
mixins:
- OscalCommon
slot_usage:
  uuid:
    name: uuid
    required: true
  title:
    name: title
    required: true
  description:
    name: description
    required: true
  target:
    name: target
    required: true
attributes:
  uuid:
    name: uuid
    description: A machine-oriented, globally unique identifier with a cross-instance
      scope.
    from_schema: https://w3id.org/lmodel/oscal
    rank: 1000
    owner: Finding
    domain_of:
    - Catalog
    - Location
    - Party
    - Action
    - Property
    - Resource
    - Profile
    - AssessmentPlan
    - AssessmentSubjectPlaceholder
    - AssessmentPlatform
    - AssessmentMethod
    - Activity
    - Step
    - Task
    - AssessmentPart
    - SystemComponent
    - Protocol
    - SystemUser
    - InventoryItem
    - Observation
    - Finding
    - Risk
    - MitigatingFactor
    - Response
    - RequiredAsset
    - RiskLogEntry
    - SystemSecurityPlan
    - InformationType
    - Diagram
    - LeveragedAuthorization
    - SspImplementedRequirement
    - SspStatement
    - ByComponent
    - ProvidedControlImplementation
    - ControlResponsibility
    - InheritedControlImplementation
    - SatisfiedControlImplementation
    - AssessmentResults
    - Result
    - AssessmentLogEntry
    - ComponentDefinition
    - DefinedComponent
    - Capability
    - ControlImplementationSet
    - ImplementedRequirement
    - ImplementedControlStatement
    - MappingCollection
    - Mapping
    - Map
    - GapSummary
    - PlanOfActionAndMilestones
    - PoamItem
    range: UUIDType
    required: true
  title:
    name: title
    description: A human-readable name or title.
    from_schema: https://w3id.org/lmodel/oscal
    rank: 1000
    owner: Finding
    domain_of:
    - Group
    - Control
    - Metadata
    - Revision
    - Role
    - Location
    - Resource
    - Part
    - ProfileGroup
    - Addition
    - SubjectReference
    - AssessmentPlatform
    - Activity
    - Step
    - Task
    - AssessmentPart
    - ControlPart
    - SystemComponent
    - Protocol
    - SystemUser
    - AuthorizedPrivilege
    - Observation
    - Finding
    - FindingTarget
    - Risk
    - Response
    - RequiredAsset
    - RiskLogEntry
    - InformationType
    - LeveragedAuthorization
    - Result
    - AssessmentLogEntry
    - DefinedComponent
    - PoamItem
    range: MarkupLineType
    required: true
  description:
    name: description
    description: A human-readable description.
    from_schema: https://w3id.org/lmodel/oscal
    rank: 1000
    owner: Finding
    domain_of:
    - Role
    - Resource
    - ParameterConstraint
    - ReviewedControls
    - ControlSelection
    - ControlObjectiveSelection
    - AssessmentSubject
    - AssessmentSubjectPlaceholder
    - LocalObjective
    - AssessmentMethod
    - Activity
    - Step
    - Task
    - SystemComponent
    - SystemUser
    - AuthorizedPrivilege
    - InventoryItem
    - Observation
    - RelevantEvidence
    - Finding
    - FindingTarget
    - Risk
    - MitigatingFactor
    - Response
    - RequiredAsset
    - RiskLogEntry
    - SystemCharacteristics
    - InformationType
    - AuthorizationBoundary
    - Diagram
    - NetworkArchitecture
    - DataFlow
    - SspControlImplementation
    - ByComponent
    - Export
    - ProvidedControlImplementation
    - ControlResponsibility
    - InheritedControlImplementation
    - SatisfiedControlImplementation
    - Result
    - AssessmentLogEntry
    - DefinedComponent
    - Capability
    - IncorporatesComponent
    - ControlImplementationSet
    - ImplementedRequirement
    - ImplementedControlStatement
    - QualifierItem
    - PoamItem
    range: MarkupMultilineType
    required: true
  target:
    name: target
    description: Identifies the target of a finding.
    from_schema: https://w3id.org/lmodel/oscal
    rank: 1000
    owner: Finding
    domain_of:
    - Finding
    range: FindingTarget
    required: true
    inlined: true
  implementation-statement-uuid:
    name: implementation-statement-uuid
    description: A reference to the implementation statement in the SSP to which this
      finding is related.
    from_schema: https://w3id.org/lmodel/oscal
    rank: 1000
    alias: implementation_statement_uuid
    owner: Finding
    domain_of:
    - Finding
    range: UUIDType
  origins:
    name: origins
    description: Identifies the source of observations, findings, or risks.
    from_schema: https://w3id.org/lmodel/oscal
    rank: 1000
    owner: Finding
    domain_of:
    - Observation
    - Finding
    - Risk
    - Response
    - PoamItem
    range: Origin
    multivalued: true
    inlined: true
    inlined_as_list: true
  related-observations:
    name: related-observations
    description: Relates the containing object to a set of referenced observations.
    from_schema: https://w3id.org/lmodel/oscal
    rank: 1000
    alias: related_observations
    owner: Finding
    domain_of:
    - Finding
    - Risk
    - PoamItem
    range: RelatedObservation
    multivalued: true
    inlined: true
    inlined_as_list: true
  related-risks:
    name: related-risks
    description: Relates the finding to a set of referenced risks.
    from_schema: https://w3id.org/lmodel/oscal
    rank: 1000
    alias: related_risks
    owner: Finding
    domain_of:
    - Finding
    - PoamItem
    range: AssociatedRisk
    multivalued: true
    inlined: true
    inlined_as_list: true
  remarks:
    name: remarks
    description: Additional commentary about the containing object.
    from_schema: https://w3id.org/lmodel/oscal
    rank: 1000
    owner: Finding
    domain_of:
    - OscalCommon
    - Property
    - Resource
    - ConstraintTest
    - ControlMatching
    - Removal
    - ImportSSP
    - LocalDefinitions
    - SelectObjectiveById
    - AssessmentSubjectSource
    - OnDateCondition
    - WithinDateRange
    - AtFrequency
    - TaskDependency
    - SetParameter
    - ComponentStatus
    - PortRange
    - ImplementationStatus
    - ObjectiveStatus
    - RelatedObservation
    - AssociatedRisk
    - LoggedBy
    - ImportProfile
    - SystemCharacteristics
    - SystemStatus
    - AuthorizationBoundary
    - Diagram
    - NetworkArchitecture
    - DataFlow
    - SystemImplementation
    - LeveragedAuthorization
    - SspImplementedRequirement
    - SspStatement
    - ByComponent
    - ProvidedControlImplementation
    - ControlResponsibility
    - InheritedControlImplementation
    - SatisfiedControlImplementation
    - ImportAssessmentPlan
    - AssessmentResultsLocalDefinitions
    - ImportComponentDefinition
    - ImplementedRequirement
    - ImplementedControlStatement
    - QualifierItem
    - PoamLocalDefinitions
    - RelatedFinding
    range: MarkupMultilineType
  props:
    name: props
    description: A list of properties.
    from_schema: https://w3id.org/lmodel/oscal
    rank: 1000
    owner: Finding
    domain_of:
    - HasPropsAndLinks
    - Resource
    - Addition
    - SystemCharacteristics
    - SystemInformation
    - InformationType
    - ImpactLevel
    - AuthorizationBoundary
    - Diagram
    - NetworkArchitecture
    - DataFlow
    - SystemImplementation
    - LeveragedAuthorization
    - SspImplementedRequirement
    - SspStatement
    - ByComponent
    - Export
    - ProvidedControlImplementation
    - ControlResponsibility
    - InheritedControlImplementation
    - SatisfiedControlImplementation
    range: Property
    multivalued: true
    inlined: true
    inlined_as_list: true
  links:
    name: links
    description: A list of links.
    from_schema: https://w3id.org/lmodel/oscal
    rank: 1000
    owner: Finding
    domain_of:
    - HasPropsAndLinks
    - Addition
    - SystemCharacteristics
    - SystemInformation
    - InformationType
    - ImpactLevel
    - AuthorizationBoundary
    - Diagram
    - NetworkArchitecture
    - DataFlow
    - SystemImplementation
    - LeveragedAuthorization
    - SspImplementedRequirement
    - SspStatement
    - ByComponent
    - Export
    - ProvidedControlImplementation
    - ControlResponsibility
    - InheritedControlImplementation
    - SatisfiedControlImplementation
    range: Link
    multivalued: true
    inlined: true
    inlined_as_list: true