Skip to content
oscal

Class: Result

Identifies all of the assessment observations and findings, initial and residual risks, deviations, and disposition for a particular execution of the assessment.

URI: oscal:Result

 classDiagram
    class Result
    click Result href "../Result/"
      OscalCommon <|-- Result
        click OscalCommon href "../OscalCommon/"
      
      Result : assessment_log
        
          
    
        
        
        Result --> "0..1" AssessmentLog : assessment_log
        click AssessmentLog href "../AssessmentLog/"
    

        
      Result : attestations
        
          
    
        
        
        Result --> "*" Attestation : attestations
        click Attestation href "../Attestation/"
    

        
      Result : description
        
      Result : end
        
      Result : findings
        
          
    
        
        
        Result --> "*" Finding : findings
        click Finding href "../Finding/"
    

        
      Result : links
        
          
    
        
        
        Result --> "*" Link : links
        click Link href "../Link/"
    

        
      Result : local_definitions
        
          
    
        
        
        Result --> "0..1" ResultLocalDefinitions : local_definitions
        click ResultLocalDefinitions href "../ResultLocalDefinitions/"
    

        
      Result : observations
        
          
    
        
        
        Result --> "*" Observation : observations
        click Observation href "../Observation/"
    

        
      Result : props
        
          
    
        
        
        Result --> "*" Property : props
        click Property href "../Property/"
    

        
      Result : remarks
        
      Result : reviewed_controls
        
          
    
        
        
        Result --> "1" ReviewedControls : reviewed_controls
        click ReviewedControls href "../ReviewedControls/"
    

        
      Result : risks
        
          
    
        
        
        Result --> "*" Risk : risks
        click Risk href "../Risk/"
    

        
      Result : start
        
      Result : title
        
      Result : uuid

Inheritance

Section titled “Inheritance”

Slots

Section titled “Slots”
Name Cardinality and Range Description Inheritance
uuid 1
UUIDType		 A machine-oriented, globally unique identifier with a cross-instance scope direct
title 1
MarkupLineType		 A human-readable name or title direct
description 1
MarkupMultilineType		 A human-readable description direct
start 1
DateTimeWithTimezoneType		 The start date/time direct
end 0..1
DateTimeWithTimezoneType		 The end date/time direct
local_definitions 0..1
ResultLocalDefinitions		 Used to define data objects that do not appear in the referenced SSP direct
reviewed_controls 1
ReviewedControls		 Identifies the controls being assessed and their control objectives direct
attestations *
Attestation		 A set of attestation statements for the result direct
assessment_log 0..1
AssessmentLog		 A log of assessment-related actions taken direct
observations *
Observation		 A collection of observations captured in the containing context direct
risks *
Risk		 A collection of risks captured in the containing context direct
findings *
Finding		 A collection of findings captured in the containing context direct
remarks 0..1
MarkupMultilineType		 Additional commentary about the containing object OscalCommon
props *
Property		 A list of properties HasPropsAndLinks
links *
Link		 A list of links HasPropsAndLinks

Usages

Section titled “Usages”
used by used in type used
AssessmentResults results range Result

In Subsets

Section titled “In Subsets”

Identifier and Mapping Information

Section titled “Identifier and Mapping Information”

Schema Source

Section titled “Schema Source”

Mappings

Section titled “Mappings”
Mapping Type Mapped Value
self oscal:Result
native oscal:Result

LinkML Source

Section titled “LinkML Source”

Direct

Section titled “Direct”
name: Result
description: Identifies all of the assessment observations and findings, initial and
  residual risks, deviations, and disposition for a particular execution of the assessment.
in_subset:
- assessment_results
from_schema: https://w3id.org/lmodel/oscal
mixins:
- OscalCommon
slots:
- uuid
- title
- description
- start
- end
- local-definitions
- reviewed-controls
- attestations
- assessment-log
- observations
- risks
- findings
slot_usage:
  uuid:
    name: uuid
    required: true
  title:
    name: title
    required: true
  description:
    name: description
    required: true
  start:
    name: start
    required: true
  local-definitions:
    name: local-definitions
    range: ResultLocalDefinitions
    inlined: true
  reviewed-controls:
    name: reviewed-controls
    required: true
  assessment-log:
    name: assessment-log
    inlined: true

Induced

Section titled “Induced”
name: Result
description: Identifies all of the assessment observations and findings, initial and
  residual risks, deviations, and disposition for a particular execution of the assessment.
in_subset:
- assessment_results
from_schema: https://w3id.org/lmodel/oscal
mixins:
- OscalCommon
slot_usage:
  uuid:
    name: uuid
    required: true
  title:
    name: title
    required: true
  description:
    name: description
    required: true
  start:
    name: start
    required: true
  local-definitions:
    name: local-definitions
    range: ResultLocalDefinitions
    inlined: true
  reviewed-controls:
    name: reviewed-controls
    required: true
  assessment-log:
    name: assessment-log
    inlined: true
attributes:
  uuid:
    name: uuid
    description: A machine-oriented, globally unique identifier with a cross-instance
      scope.
    from_schema: https://w3id.org/lmodel/oscal
    rank: 1000
    owner: Result
    domain_of:
    - Catalog
    - Location
    - Party
    - Action
    - Property
    - Resource
    - Profile
    - AssessmentPlan
    - AssessmentSubjectPlaceholder
    - AssessmentPlatform
    - AssessmentMethod
    - Activity
    - Step
    - Task
    - AssessmentPart
    - SystemComponent
    - Protocol
    - SystemUser
    - InventoryItem
    - Observation
    - Finding
    - Risk
    - MitigatingFactor
    - Response
    - RequiredAsset
    - RiskLogEntry
    - SystemSecurityPlan
    - InformationType
    - Diagram
    - LeveragedAuthorization
    - SspImplementedRequirement
    - SspStatement
    - ByComponent
    - ProvidedControlImplementation
    - ControlResponsibility
    - InheritedControlImplementation
    - SatisfiedControlImplementation
    - AssessmentResults
    - Result
    - AssessmentLogEntry
    - ComponentDefinition
    - DefinedComponent
    - Capability
    - ControlImplementationSet
    - ImplementedRequirement
    - ImplementedControlStatement
    - MappingCollection
    - Mapping
    - Map
    - GapSummary
    - PlanOfActionAndMilestones
    - PoamItem
    range: UUIDType
    required: true
  title:
    name: title
    description: A human-readable name or title.
    from_schema: https://w3id.org/lmodel/oscal
    rank: 1000
    owner: Result
    domain_of:
    - Group
    - Control
    - Metadata
    - Revision
    - Role
    - Location
    - Resource
    - Part
    - ProfileGroup
    - Addition
    - SubjectReference
    - AssessmentPlatform
    - Activity
    - Step
    - Task
    - AssessmentPart
    - ControlPart
    - SystemComponent
    - Protocol
    - SystemUser
    - AuthorizedPrivilege
    - Observation
    - Finding
    - FindingTarget
    - Risk
    - Response
    - RequiredAsset
    - RiskLogEntry
    - InformationType
    - LeveragedAuthorization
    - Result
    - AssessmentLogEntry
    - DefinedComponent
    - PoamItem
    range: MarkupLineType
    required: true
  description:
    name: description
    description: A human-readable description.
    from_schema: https://w3id.org/lmodel/oscal
    rank: 1000
    owner: Result
    domain_of:
    - Role
    - Resource
    - ParameterConstraint
    - ReviewedControls
    - ControlSelection
    - ControlObjectiveSelection
    - AssessmentSubject
    - AssessmentSubjectPlaceholder
    - LocalObjective
    - AssessmentMethod
    - Activity
    - Step
    - Task
    - SystemComponent
    - SystemUser
    - AuthorizedPrivilege
    - InventoryItem
    - Observation
    - RelevantEvidence
    - Finding
    - FindingTarget
    - Risk
    - MitigatingFactor
    - Response
    - RequiredAsset
    - RiskLogEntry
    - SystemCharacteristics
    - InformationType
    - AuthorizationBoundary
    - Diagram
    - NetworkArchitecture
    - DataFlow
    - SspControlImplementation
    - ByComponent
    - Export
    - ProvidedControlImplementation
    - ControlResponsibility
    - InheritedControlImplementation
    - SatisfiedControlImplementation
    - Result
    - AssessmentLogEntry
    - DefinedComponent
    - Capability
    - IncorporatesComponent
    - ControlImplementationSet
    - ImplementedRequirement
    - ImplementedControlStatement
    - QualifierItem
    - PoamItem
    range: MarkupMultilineType
    required: true
  start:
    name: start
    description: The start date/time.
    from_schema: https://w3id.org/lmodel/oscal
    rank: 1000
    owner: Result
    domain_of:
    - WithinDateRange
    - PortRange
    - RiskLogEntry
    - Result
    - AssessmentLogEntry
    range: DateTimeWithTimezoneType
    required: true
  end:
    name: end
    description: The end date/time.
    from_schema: https://w3id.org/lmodel/oscal
    rank: 1000
    owner: Result
    domain_of:
    - WithinDateRange
    - PortRange
    - RiskLogEntry
    - Result
    - AssessmentLogEntry
    range: DateTimeWithTimezoneType
  local-definitions:
    name: local-definitions
    description: Used to define data objects that do not appear in the referenced
      SSP.
    from_schema: https://w3id.org/lmodel/oscal
    rank: 1000
    alias: local_definitions
    owner: Result
    domain_of:
    - AssessmentPlan
    - AssessmentResults
    - Result
    - PlanOfActionAndMilestones
    range: ResultLocalDefinitions
    inlined: true
  reviewed-controls:
    name: reviewed-controls
    description: Identifies the controls being assessed and their control objectives.
    from_schema: https://w3id.org/lmodel/oscal
    rank: 1000
    alias: reviewed_controls
    owner: Result
    domain_of:
    - AssessmentPlan
    - Step
    - Result
    range: ReviewedControls
    required: true
    inlined: true
  attestations:
    name: attestations
    description: A set of attestation statements for the result.
    from_schema: https://w3id.org/lmodel/oscal
    rank: 1000
    owner: Result
    domain_of:
    - Result
    range: Attestation
    multivalued: true
    inlined: true
    inlined_as_list: true
  assessment-log:
    name: assessment-log
    description: A log of assessment-related actions taken.
    from_schema: https://w3id.org/lmodel/oscal
    rank: 1000
    alias: assessment_log
    owner: Result
    domain_of:
    - Result
    range: AssessmentLog
    inlined: true
  observations:
    name: observations
    description: A collection of observations captured in the containing context.
    from_schema: https://w3id.org/lmodel/oscal
    rank: 1000
    owner: Result
    domain_of:
    - Result
    - PlanOfActionAndMilestones
    range: Observation
    multivalued: true
    inlined: true
    inlined_as_list: true
  risks:
    name: risks
    description: A collection of risks captured in the containing context.
    from_schema: https://w3id.org/lmodel/oscal
    rank: 1000
    owner: Result
    domain_of:
    - Result
    - PlanOfActionAndMilestones
    range: Risk
    multivalued: true
    inlined: true
    inlined_as_list: true
  findings:
    name: findings
    description: A collection of findings captured in the containing context.
    from_schema: https://w3id.org/lmodel/oscal
    rank: 1000
    owner: Result
    domain_of:
    - Result
    - PlanOfActionAndMilestones
    range: Finding
    multivalued: true
    inlined: true
    inlined_as_list: true
  remarks:
    name: remarks
    description: Additional commentary about the containing object.
    from_schema: https://w3id.org/lmodel/oscal
    rank: 1000
    owner: Result
    domain_of:
    - OscalCommon
    - Property
    - Resource
    - ConstraintTest
    - ControlMatching
    - Removal
    - ImportSSP
    - LocalDefinitions
    - SelectObjectiveById
    - AssessmentSubjectSource
    - OnDateCondition
    - WithinDateRange
    - AtFrequency
    - TaskDependency
    - SetParameter
    - ComponentStatus
    - PortRange
    - ImplementationStatus
    - ObjectiveStatus
    - RelatedObservation
    - AssociatedRisk
    - LoggedBy
    - ImportProfile
    - SystemCharacteristics
    - SystemStatus
    - AuthorizationBoundary
    - Diagram
    - NetworkArchitecture
    - DataFlow
    - SystemImplementation
    - LeveragedAuthorization
    - SspImplementedRequirement
    - SspStatement
    - ByComponent
    - ProvidedControlImplementation
    - ControlResponsibility
    - InheritedControlImplementation
    - SatisfiedControlImplementation
    - ImportAssessmentPlan
    - AssessmentResultsLocalDefinitions
    - ImportComponentDefinition
    - ImplementedRequirement
    - ImplementedControlStatement
    - QualifierItem
    - PoamLocalDefinitions
    - RelatedFinding
    range: MarkupMultilineType
  props:
    name: props
    description: A list of properties.
    from_schema: https://w3id.org/lmodel/oscal
    rank: 1000
    owner: Result
    domain_of:
    - HasPropsAndLinks
    - Resource
    - Addition
    - SystemCharacteristics
    - SystemInformation
    - InformationType
    - ImpactLevel
    - AuthorizationBoundary
    - Diagram
    - NetworkArchitecture
    - DataFlow
    - SystemImplementation
    - LeveragedAuthorization
    - SspImplementedRequirement
    - SspStatement
    - ByComponent
    - Export
    - ProvidedControlImplementation
    - ControlResponsibility
    - InheritedControlImplementation
    - SatisfiedControlImplementation
    range: Property
    multivalued: true
    inlined: true
    inlined_as_list: true
  links:
    name: links
    description: A list of links.
    from_schema: https://w3id.org/lmodel/oscal
    rank: 1000
    owner: Result
    domain_of:
    - HasPropsAndLinks
    - Addition
    - SystemCharacteristics
    - SystemInformation
    - InformationType
    - ImpactLevel
    - AuthorizationBoundary
    - Diagram
    - NetworkArchitecture
    - DataFlow
    - SystemImplementation
    - LeveragedAuthorization
    - SspImplementedRequirement
    - SspStatement
    - ByComponent
    - Export
    - ProvidedControlImplementation
    - ControlResponsibility
    - InheritedControlImplementation
    - SatisfiedControlImplementation
    range: Link
    multivalued: true
    inlined: true
    inlined_as_list: true