From 2de5577149b786df81ca4fc96b725174252722c2 Mon Sep 17 00:00:00 2001 From: Tyler Stephens Date: Fri, 30 Aug 2024 09:39:59 -0600 Subject: [PATCH 01/14] Swap oscal examples (#38) DIT and DAR images and oscal samples was mixed. Swapped the oscal example to align with the image. Signed-off-by: A.J. Stein --- content/documentation/ssp/4-ssp-template-to-oscal-mapping.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/content/documentation/ssp/4-ssp-template-to-oscal-mapping.md b/content/documentation/ssp/4-ssp-template-to-oscal-mapping.md index a040a48..4b9ad7e 100644 --- a/content/documentation/ssp/4-ssp-template-to-oscal-mapping.md +++ b/content/documentation/ssp/4-ssp-template-to-oscal-mapping.md @@ -1209,7 +1209,7 @@ a URI fragment. The fragment must start with a hashtag (#) and include the UUID + value="data-in-transit"/> @@ -1253,7 +1253,7 @@ The approach is the same as in the [*cryptographic module data-in-transit*](#cry + value="data-at-rest"/> From 52c1500f77f071739421d44fa8f0120f30653bcf Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 6 Aug 2024 22:08:04 +0000 Subject: [PATCH 02/14] Bump actions/upload-artifact from 4.3.3 to 4.3.6 Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.3 to 4.3.6. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/65462800fd760344b1a7b4382951275a0abb4808...834a144ee995460fba8ed112a2fc961b36a5ec5a) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/workflow-generate-website.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/workflow-generate-website.yml b/.github/workflows/workflow-generate-website.yml index 95e7646..3d1762a 100644 --- a/.github/workflows/workflow-generate-website.yml +++ b/.github/workflows/workflow-generate-website.yml @@ -81,7 +81,7 @@ jobs: run: | zip ${{ runner.temp }}/website.zip -r _site-test - name: Upload generated site - uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 + uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a with: name: website path: | @@ -100,7 +100,7 @@ jobs: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} continue-on-error: true - name: Upload link check report - uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 + uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a with: name: html-link-report path: html-link-report.md From 1b240963c35ec554e83668d67f2c3b9365ec359e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 30 Aug 2024 18:08:08 +0000 Subject: [PATCH 03/14] Bump actions/setup-node from 4.0.2 to 4.0.3 Dependabot couldn't find the original pull request head commit, b593799f8f415edb84dfc23bc759d85d0abfda9e. --- .github/workflows/workflow-generate-website.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/workflow-generate-website.yml b/.github/workflows/workflow-generate-website.yml index 3d1762a..c415fa3 100644 --- a/.github/workflows/workflow-generate-website.yml +++ b/.github/workflows/workflow-generate-website.yml @@ -47,7 +47,7 @@ jobs: with: swap-size-gb: 10 - name: Set up NodeJS - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 + uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b with: node-version-file: '.nvmrc' cache: 'npm' From 96868ef2c7577fd5b4fdeccdb0eae0ee73ab416c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 3 Sep 2024 20:24:13 -0400 Subject: [PATCH 04/14] Bump actions/upload-artifact from 4.3.6 to 4.4.0 (#47) Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.6 to 4.4.0. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/834a144ee995460fba8ed112a2fc961b36a5ec5a...50769540e7f4bd5e21e526ee35c689e35e0d6874) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/workflow-generate-website.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/workflow-generate-website.yml b/.github/workflows/workflow-generate-website.yml index c415fa3..b9c774b 100644 --- a/.github/workflows/workflow-generate-website.yml +++ b/.github/workflows/workflow-generate-website.yml @@ -81,7 +81,7 @@ jobs: run: | zip ${{ runner.temp }}/website.zip -r _site-test - name: Upload generated site - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a + uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 with: name: website path: | @@ -100,7 +100,7 @@ jobs: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} continue-on-error: true - name: Upload link check report - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a + uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 with: name: html-link-report path: html-link-report.md From fa2ed97aed59ebca3dc77644718db387868ea75f Mon Sep 17 00:00:00 2001 From: "A.J. Stein" Date: Tue, 10 Sep 2024 13:45:06 -0400 Subject: [PATCH 05/14] Make data center country requirement explicit (#52) * Make country code requirement explicit for #51 * Country code example should be capitals for #51 We should follow constraint and the official spec for ISO-3166 Alpha-2. https://en.wikipedia.org/wiki/ISO_3166-1_alpha-2#US --- content/documentation/general-concepts/oscal-metadata.md | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/content/documentation/general-concepts/oscal-metadata.md b/content/documentation/general-concepts/oscal-metadata.md index e082f9f..02249c8 100644 --- a/content/documentation/general-concepts/oscal-metadata.md +++ b/content/documentation/general-concepts/oscal-metadata.md @@ -75,9 +75,10 @@ least one `location` assembly with the primary business address of the CSP. The SAP and SAR must contain at least one `location` assembly with the primary business address of the assessor. -OSCAL allows the location `title` field to be optional. FedRAMP strongly encourages -its use. If the `country` field is missing, FedRAMP tools must assume the -address is within the United States of America. +OSCAL allows the location `title` field to be optional. FedRAMP requires +an explicit `country` code. FedRAMP tools must generate and/or check that +an address has defined its country as the United States with the abbreviation +`US`. {{< highlight xml "linenos=table" >}} @@ -89,7 +90,7 @@ address is within the United States of America. Haven ME 00000 - us + US From 71eeff0a76faf1a9e172d98ab7e4e049cf556a50 Mon Sep 17 00:00:00 2001 From: "A.J. Stein" Date: Tue, 10 Sep 2024 15:54:20 -0400 Subject: [PATCH 06/14] Exempt missing CSP ConMon Strategy Guide from link scan Revert once #54 looks like it is no longer the case and PR putting it back on the scan list. --- .github/workflows/config/.lycheeignore | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/config/.lycheeignore b/.github/workflows/config/.lycheeignore index f17c4e3..1a26d16 100755 --- a/.github/workflows/config/.lycheeignore +++ b/.github/workflows/config/.lycheeignore @@ -2,3 +2,6 @@ https://search.usa.gov/search http://csrc.nist.gov/ns/* https://fedramp.gov/ns/* http://www.first.org/cvss/v3 +# TODO: Review this exemption when prudent, details in this issue: +# https://github.com/GSA/automate.fedramp.gov/issues/54 +https://www.fedramp.gov/assets/resources/documents/CSP_Continuous_Monitoring_Strategy_Guide.pdf From 81fde5aa93c615d1f0ea916531cf4d8c7919e29e Mon Sep 17 00:00:00 2001 From: "A.J. Stein" Date: Tue, 10 Sep 2024 16:26:38 -0400 Subject: [PATCH 07/14] Make attachment (resource) title req clear for #49 (#53) --- .../general-concepts/oscal-citations-and-attachments.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/content/documentation/general-concepts/oscal-citations-and-attachments.md b/content/documentation/general-concepts/oscal-citations-and-attachments.md index 554313b..5548a38 100644 --- a/content/documentation/general-concepts/oscal-citations-and-attachments.md +++ b/content/documentation/general-concepts/oscal-citations-and-attachments.md @@ -46,6 +46,8 @@ applicable standards such as NIST SP 800 series documents. Unlike citations, attachments are included with the authorization package when submitted. +Each attachment should have a title, but it is not required. + Tools may either embed an attachment using the `base64` field, or point to an attachment using an `rlink` field. If no base64 embedded content is present, at least one `rlink` field must exist with either an *absolute path* to content that is accessible by FedRAMP and Agency reviewers from From 0a033b0621a9c425de6a098526e8db9a4e028bd5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 19 Sep 2024 17:47:27 -0400 Subject: [PATCH 08/14] Bump actions/setup-node from 4.0.3 to 4.0.4 (#61) --- .github/workflows/workflow-generate-website.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/workflow-generate-website.yml b/.github/workflows/workflow-generate-website.yml index b9c774b..f305018 100644 --- a/.github/workflows/workflow-generate-website.yml +++ b/.github/workflows/workflow-generate-website.yml @@ -47,7 +47,7 @@ jobs: with: swap-size-gb: 10 - name: Set up NodeJS - uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b + uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 with: node-version-file: '.nvmrc' cache: 'npm' From 4f224d2576e2c44f7fb804b9fbae9e015d5add38 Mon Sep 17 00:00:00 2001 From: "A.J. Stein" Date: Thu, 19 Sep 2024 17:42:00 -0400 Subject: [PATCH 09/14] Woops, put #59 into develop, not main branch Below is the commit message. I noticed after the PR merge and this was not the intention. This PR branch should go into develop then be promoted into main after. I will reset branch before we forget. Explain name and short name requirement for #58 (#59) --- content/documentation/ssp/4-ssp-template-to-oscal-mapping.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/content/documentation/ssp/4-ssp-template-to-oscal-mapping.md b/content/documentation/ssp/4-ssp-template-to-oscal-mapping.md index 4b9ad7e..5d0ee75 100644 --- a/content/documentation/ssp/4-ssp-template-to-oscal-mapping.md +++ b/content/documentation/ssp/4-ssp-template-to-oscal-mapping.md @@ -72,6 +72,8 @@ For this reason, OSCAL requires the identifier-type flag be present and have a v {{< figure src="/img/ssp-figure-5.png" title="FedRAMP SSP template System Name and Package ID" alt="Screenshot of the system name, and package ID in the FedRAMP SSP template." >}} +This assembly defines the full name of the system and its short name. A FedRAMP OSCAL SSP must define the system name and its short name. + #### OSCAL Representation {{< highlight xml "linenos=table, hl_lines=9-13" >}} From 45a9bcfe4e1bb8aa03e559474d256f7906c8dcd5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 30 Sep 2024 09:00:48 -0400 Subject: [PATCH 10/14] Bump actions/checkout from 4.1.7 to 4.2.0 (#65) Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.7 to 4.2.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/692973e3d937129bcbf40652eb9f2f61becf3332...d632683dd7b4114ad314bca15554477dd762a938) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/workflow-generate-website.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/workflow-generate-website.yml b/.github/workflows/workflow-generate-website.yml index f305018..a6ccf72 100644 --- a/.github/workflows/workflow-generate-website.yml +++ b/.github/workflows/workflow-generate-website.yml @@ -38,7 +38,7 @@ jobs: run: echo "GH_TOKEN=${GITHUB_TOKEN}" >> $GITHUB_ENV # use this for overything else (i.e., pull requests) where publication is not needed - name: Checkout Latest - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 + uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 with: submodules: recursive - name: Setup Swap Space From 020e3273a60f708f9d6b7be809fcad7f00f84f96 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 30 Sep 2024 09:04:22 -0400 Subject: [PATCH 11/14] Bump peter-evans/create-issue-from-file from 5.0.0 to 5.0.1 (#64) Bumps [peter-evans/create-issue-from-file](https://github.com/peter-evans/create-issue-from-file) from 5.0.0 to 5.0.1. - [Release notes](https://github.com/peter-evans/create-issue-from-file/releases) - [Commits](https://github.com/peter-evans/create-issue-from-file/compare/24452a72d85239eacf1468b0f1982a9f3fec4c94...e8ef132d6df98ed982188e460ebb3b5d4ef3a9cd) --- updated-dependencies: - dependency-name: peter-evans/create-issue-from-file dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/workflow-generate-website.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/workflow-generate-website.yml b/.github/workflows/workflow-generate-website.yml index a6ccf72..1778479 100644 --- a/.github/workflows/workflow-generate-website.yml +++ b/.github/workflows/workflow-generate-website.yml @@ -107,7 +107,7 @@ jobs: retention-days: 5 - name: Create issue if bad links detected if: ${{ !cancelled() && env.lychee_exit_code != 0 && env.INPUT_ISSUE_ON_ERROR == 'true' }} - uses: peter-evans/create-issue-from-file@24452a72d85239eacf1468b0f1982a9f3fec4c94 + uses: peter-evans/create-issue-from-file@e8ef132d6df98ed982188e460ebb3b5d4ef3a9cd with: title: Scheduled Check of Website Content Found Bad Hyperlinks content-filepath: ./lychee/out.md From d4a83346a1958925f2bfba4bb1440e91e6af03a8 Mon Sep 17 00:00:00 2001 From: Rene Tshiteya Date: Thu, 3 Oct 2024 09:19:13 -0400 Subject: [PATCH 12/14] Add allowed-values page (issue#11) --- ...-fedramp-extensions-and-accepted-values.md | 45 +- .../fedramp-allowed-values.md | 7564 +++++++++++++++++ 2 files changed, 7566 insertions(+), 43 deletions(-) create mode 100644 content/documentation/general-concepts/fedramp-allowed-values.md diff --git a/content/documentation/general-concepts/3-fedramp-extensions-and-accepted-values.md b/content/documentation/general-concepts/3-fedramp-extensions-and-accepted-values.md index 783ac4b..6942a4a 100644 --- a/content/documentation/general-concepts/3-fedramp-extensions-and-accepted-values.md +++ b/content/documentation/general-concepts/3-fedramp-extensions-and-accepted-values.md @@ -1,8 +1,8 @@ --- -title: FedRAMP Extensions and Accepted Values +title: FedRAMP Extensions weight: 150 --- -# FedRAMP Extensions and Accepted Values +# FedRAMP Extensions The core OSCAL syntax is designed to represent cybersecurity information that is common to any organization and compliance framework. @@ -120,45 +120,4 @@ the OSCAL SSP, SAP, SAR, or POA&M. summarized in the FedRAMP OSCAL Registry.** -## FedRAMP Conformity Tagging -FedRAMP collaborated with NIST to address the ambiguities in OSCAL -syntax necessitating conformity tags. - -### OSCAL and FedRAMP-Defined Identifiers and Accepted Values - -OSCAL now defines *allowed values* in a way that supersedes FedRAMP's -separate handling of *defined identifiers* and *accepted values*. To -better align with OSCAL, FedRAMP has also shifted to this approach. -Further, many FedRAMP *defined values* are now recognized by OSCAL as -part of the core OSCAL syntax. - -Any remaining *defined identifiers* or *accepted values* are enumerated -in the FedRAMP OSCAL registry as *allowed values*. - -### OSCAL and FedRAMP Allowed Values - -To facilitate consistent processing, the value for property names, -annotation names, and some field values is limited to a list of -*case-sensitive* allowed values. In many instances, OSCAL defines allowed -values, which are enforced by OSCAL-based syntax validation mechanisms. - -In some cases, FedRAMP defines or adds allowed values specific to -FedRAMP ATO processing. Where defined, only these values are recognized -by FedRAMP processing tools. - -For example, every control requires an implementation status. FedRAMP -only accepts one of five possible responses for this status, which must -be provided using one of the specified choices. - -**FedRAMP allowed values are cited in relevant portions of each -guidebook and summarized in the FedRAMP OSCAL Registry.** - -{{}} -_***Revised FedRAMP Registry Approach***
The FedRAMP OSCAL Registry currently uses the draft OSCAL Extensions syntax and is offered in XML and JSON formats. This enables tools to be extension-aware._ - -- _[XML Version](https://github.com/GSA/fedramp-automation/raw/master/dist/content/rev5/resources/xml/FedRAMP_extensions.xml)_ -- _[JSON Version](https://raw.githubusercontent.com/GSA/fedramp-automation/master/dist/content/rev5/resources/json/FedRAMP_extensions.json)_ - -FedRAMP is actively working on implementing a Metaschema-based approach to document all FedRAMP OSCAL extensions and constraints. The FedRAMP OSCAL extensions and constraints will be provided in XML, JSON, and YAML formats, and will replace the current FedRAMP Registry. FedRAMP also plans to provide a human-readable version of its OSCAL extensions and constraints in the future. -{{}} diff --git a/content/documentation/general-concepts/fedramp-allowed-values.md b/content/documentation/general-concepts/fedramp-allowed-values.md new file mode 100644 index 0000000..5fdf3f9 --- /dev/null +++ b/content/documentation/general-concepts/fedramp-allowed-values.md @@ -0,0 +1,7564 @@ +--- +title: FedRAMP Allowed Values +weight: 150 +--- +# OSCAL and FedRAMP Allowed Values + +To facilitate consistent processing, the value for property names, +annotation names, and some field values is limited to a list of +*case-sensitive* allowed values. In many instances, OSCAL defines allowed +values, which are enforced by OSCAL-based syntax validation mechanisms. + +In some cases, FedRAMP defines or adds allowed values specific to +FedRAMP ATO processing. Where defined, only these values are recognized +by FedRAMP processing tools. + +For example, every control requires an implementation status. FedRAMP +only accepts one of five possible responses for this status, which must +be provided using one of the specified choices. + +**FedRAMP allowed values are cited in relevant portions of the online documentation and summarized in this section.** + +## Allowed Value Constraints +### /Assessment Plan/Assessment Assets/Assessment Platform/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/assessment-assets/assessment-platform/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Assessment Assets/Assessment Platform/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/assessment-assets/assessment-platform/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Assessment Assets/Assessment Platform/Uses Component/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/assessment-assets/assessment-platform/uses-component/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Assessment Assets/Assessment Platform/Uses Component/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/assessment-assets/assessment-platform/uses-component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Assessment Assets/Assessment Platform/Uses Component/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/assessment-assets/assessment-platform/uses-component/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Assessment Assets/Assessment Platform/Uses Component/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/assessment-assets/assessment-platform/uses-component/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Assessment Assets/Component/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/assessment-assets/component/@type) | . |
  • this-system
  • system
  • interconnection
  • software
  • hardware
  • service
  • policy
  • physical
  • process-procedure
  • plan
  • guidance
  • standard
  • validation
  • network
| True | builtin | + +### /Assessment Plan/Assessment Assets/Component/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/assessment-assets/component) | link/@rel |
  • depends-on
  • validation
  • proof-of-compliance
  • baseline-template
  • uses-service
  • system-security-plan
  • uses-network
  • imported-from
| True | builtin | +| allowed-values | [Location](/assessment-plan/assessment-assets/component) | (.)[@type='validation']/link/@rel |
  • validation-details
| True | builtin | +| allowed-values | [Location](/assessment-plan/assessment-assets/component) | (.)[@type='service']/link/@rel |
  • provided-by
  • used-by
| True | builtin | +| allowed-values | [Location](/assessment-plan/assessment-assets/component) | (.)[@type='interconnection']/link/@rel |
  • isa-agreement
| True | builtin | +| allowed-values | [Location](/assessment-plan/assessment-assets/component/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Assessment Assets/Component/Prop/@Class + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('ipv4-address','ipv6-address')]/@class |
  • local
  • remote
| False | builtin | + +### /Assessment Plan/Assessment Assets/Component/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • implementation-point
  • leveraged-authorization-uuid
  • inherited-uuid
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
| False | builtin | +| allowed-values | [Location](/assessment-plan/assessment-assets/component) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | +| allowed-values | [Location](/assessment-plan/assessment-assets/component) | (.)[@type='software']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • software-identifier
| False | builtin | +| allowed-values | [Location](/assessment-plan/assessment-assets/component) | (.)[@type='interconnection']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • isa-title
  • isa-date
  • isa-remote-system-name
  • ipv4-address
  • ipv6-address
  • direction
| False | builtin | +| allowed-values | [Location](/assessment-plan/assessment-assets/component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Assessment Assets/Component/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | +| allowed-values | [Location](/assessment-plan/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='allows-authenticated-scan']/@value |
  • yes
  • no
| False | builtin | +| allowed-values | [Location](/assessment-plan/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='public']/@value |
  • yes
  • no
| False | builtin | +| allowed-values | [Location](/assessment-plan/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='virtual']/@value |
  • yes
  • no
| False | builtin | +| allowed-values | [Location](/assessment-plan/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='implementation-point']/@value |
  • internal
  • external
| False | builtin | +| allowed-values | [Location](/assessment-plan/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='direction']/@value |
  • incoming
  • outgoing
| False | builtin | + +### /Assessment Plan/Assessment Assets/Component/Protocol/Port Range/@Transport + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/assessment-assets/component/protocol/port-range/@transport) | . |
  • TCP
  • UDP
| False | builtin | + +### /Assessment Plan/Assessment Assets/Component/Responsible Role/@Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/assessment-assets/component) | responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | +| allowed-values | [Location](/assessment-plan/assessment-assets/component) | (.)[@type='interconnection']/responsible-role/@role-id |
  • isa-poc-local
  • isa-poc-remote
  • isa-authorizing-official-local
  • isa-authorizing-official-remote
| True | builtin | + +### /Assessment Plan/Assessment Assets/Component/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/assessment-assets/component/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Assessment Assets/Component/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/assessment-assets/component/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Assessment Assets/Component/Status/@State + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/assessment-assets/component/status/@state) | . |
  • under-development
  • operational
  • disposition
  • other
| False | builtin | + +### /Assessment Plan/Assessment Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/assessment-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Assessment Plan/Assessment Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/assessment-subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Plan/Assessment Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/assessment-subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Assessment Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/assessment-subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Assessment Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/assessment-subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Plan/Assessment Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/assessment-subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Assessment Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/assessment-subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Assessment Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/assessment-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Assessment Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/assessment-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Back Matter/Resource/Citation/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/back-matter/resource/citation/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Back Matter/Resource/Citation/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/back-matter/resource/citation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Back Matter/Resource/Document Id/@Scheme + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/back-matter/resource/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | + +### /Assessment Plan/Back Matter/Resource/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
  • version
  • published
| False | builtin | +| allowed-values | [Location](/assessment-plan/back-matter/resource/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Back Matter/Resource/Prop/@Value + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | attachment-type | [Location](/assessment-plan) | back-matter/resource/prop[@name='type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • law
  • regulation
  • standard
  • guidance
  • policy
  • procedure
  • guide
  • rules-of-behavior
  • plan
  • system-security-plan
  • artifact
  • evidence
  • screen-shot
  • image
  • tool-report
  • raw-tool-output
  • interview-notes
  • questionnaire
  • report
  • fedramp-citations
  • fedramp-acronyms
  • fedramp-logo
  • separation-of-duties-matrix
  • logo
  • personally-identifiable-information
  • agreement
  • isa-agreement
  • incident-response-plan
  • information-security-policies-and-procedures
  • users-guide
  • privacy-impact-assessment
  • information-system-contingency-plan
  • configuration-management-plan
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| allowed-values | | [Location](/assessment-plan/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • logo
  • image
  • screen-shot
  • law
  • regulation
  • standard
  • external-guidance
  • acronyms
  • citation
  • policy
  • procedure
  • system-guide
  • users-guide
  • administrators-guide
  • rules-of-behavior
  • plan
  • artifact
  • evidence
  • tool-output
  • raw-data
  • interview-notes
  • questionnaire
  • report
  • agreement
| False | builtin | + +### /Assessment Plan/Back Matter/Resource/Rlink/Hash/@Algorithm + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/back-matter/resource/rlink/hash/@algorithm) | . |
  • SHA-224
  • SHA-256
  • SHA-384
  • SHA-512
  • SHA3-224
  • SHA3-256
  • SHA3-384
  • SHA3-512
| True | builtin | + +### /Assessment Plan/Local Definitions/Activity/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/activity/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Local Definitions/Activity/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/activity) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • method
| False | builtin | +| allowed-values | [Location](/assessment-plan/local-definitions/activity/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Local Definitions/Activity/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/activity) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='method']/@value |
  • INTERVIEW
  • EXAMINE
  • TEST
| False | builtin | + +### /Assessment Plan/Local Definitions/Activity/Related Controls/Control Objective Selection/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/activity/related-controls/control-objective-selection/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Local Definitions/Activity/Related Controls/Control Objective Selection/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/activity/related-controls/control-objective-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Local Definitions/Activity/Related Controls/Control Selection/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/activity/related-controls/control-selection/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Local Definitions/Activity/Related Controls/Control Selection/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/activity/related-controls/control-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Local Definitions/Activity/Related Controls/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/activity/related-controls/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Local Definitions/Activity/Related Controls/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/activity/related-controls/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Local Definitions/Activity/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/activity/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Local Definitions/Activity/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/activity/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Local Definitions/Activity/Step/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/activity/step/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Local Definitions/Activity/Step/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/activity/step/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Local Definitions/Activity/Step/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/activity/step/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Local Definitions/Activity/Step/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/activity/step/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Local Definitions/Activity/Step/Reviewed Controls/Control Objective Selection/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/activity/step/reviewed-controls/control-objective-selection/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Local Definitions/Activity/Step/Reviewed Controls/Control Objective Selection/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/activity/step/reviewed-controls/control-objective-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Local Definitions/Activity/Step/Reviewed Controls/Control Selection/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/activity/step/reviewed-controls/control-selection/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Local Definitions/Activity/Step/Reviewed Controls/Control Selection/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/activity/step/reviewed-controls/control-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Local Definitions/Activity/Step/Reviewed Controls/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/activity/step/reviewed-controls/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Local Definitions/Activity/Step/Reviewed Controls/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/activity/step/reviewed-controls/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Local Definitions/Component/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/component/@type) | . |
  • this-system
  • system
  • interconnection
  • software
  • hardware
  • service
  • policy
  • physical
  • process-procedure
  • plan
  • guidance
  • standard
  • validation
  • network
| True | builtin | + +### /Assessment Plan/Local Definitions/Component/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/component) | link/@rel |
  • depends-on
  • validation
  • proof-of-compliance
  • baseline-template
  • uses-service
  • system-security-plan
  • uses-network
  • imported-from
| True | builtin | +| allowed-values | [Location](/assessment-plan/local-definitions/component) | (.)[@type='validation']/link/@rel |
  • validation-details
| True | builtin | +| allowed-values | [Location](/assessment-plan/local-definitions/component) | (.)[@type='service']/link/@rel |
  • provided-by
  • used-by
| True | builtin | +| allowed-values | [Location](/assessment-plan/local-definitions/component) | (.)[@type='interconnection']/link/@rel |
  • isa-agreement
| True | builtin | +| allowed-values | [Location](/assessment-plan/local-definitions/component/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Local Definitions/Component/Prop/@Class + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('ipv4-address','ipv6-address')]/@class |
  • local
  • remote
| False | builtin | + +### /Assessment Plan/Local Definitions/Component/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • implementation-point
  • leveraged-authorization-uuid
  • inherited-uuid
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
| False | builtin | +| allowed-values | [Location](/assessment-plan/local-definitions/component) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | +| allowed-values | [Location](/assessment-plan/local-definitions/component) | (.)[@type='software']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • software-identifier
| False | builtin | +| allowed-values | [Location](/assessment-plan/local-definitions/component) | (.)[@type='interconnection']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • isa-title
  • isa-date
  • isa-remote-system-name
  • ipv4-address
  • ipv6-address
  • direction
| False | builtin | +| allowed-values | [Location](/assessment-plan/local-definitions/component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Local Definitions/Component/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | +| allowed-values | [Location](/assessment-plan/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='allows-authenticated-scan']/@value |
  • yes
  • no
| False | builtin | +| allowed-values | [Location](/assessment-plan/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='public']/@value |
  • yes
  • no
| False | builtin | +| allowed-values | [Location](/assessment-plan/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='virtual']/@value |
  • yes
  • no
| False | builtin | +| allowed-values | [Location](/assessment-plan/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='implementation-point']/@value |
  • internal
  • external
| False | builtin | +| allowed-values | [Location](/assessment-plan/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='direction']/@value |
  • incoming
  • outgoing
| False | builtin | + +### /Assessment Plan/Local Definitions/Component/Protocol/Port Range/@Transport + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/component/protocol/port-range/@transport) | . |
  • TCP
  • UDP
| False | builtin | + +### /Assessment Plan/Local Definitions/Component/Responsible Role/@Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/component) | responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | +| allowed-values | [Location](/assessment-plan/local-definitions/component) | (.)[@type='interconnection']/responsible-role/@role-id |
  • isa-poc-local
  • isa-poc-remote
  • isa-authorizing-official-local
  • isa-authorizing-official-remote
| True | builtin | + +### /Assessment Plan/Local Definitions/Component/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/component/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Local Definitions/Component/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/component/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Local Definitions/Component/Status/@State + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/component/status/@state) | . |
  • under-development
  • operational
  • disposition
  • other
| False | builtin | + +### /Assessment Plan/Local Definitions/Inventory Item/Implemented Component/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item/implemented-component/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Local Definitions/Inventory Item/Implemented Component/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item/implemented-component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
| False | builtin | +| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item/implemented-component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Local Definitions/Inventory Item/Implemented Component/Responsible Party/@Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item/implemented-component) | responsible-party/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
| True | builtin | + +### /Assessment Plan/Local Definitions/Inventory Item/Implemented Component/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item/implemented-component/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Local Definitions/Inventory Item/Implemented Component/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item/implemented-component/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Local Definitions/Inventory Item/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item) | link/@rel |
  • baseline-template
| True | builtin | +| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Local Definitions/Inventory Item/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • ipv4-address
  • ipv6-address
  • fqdn
  • uri
  • serial-number
  • netbios-name
  • mac-address
  • physical-location
  • is-scanned
  • hardware-model
  • os-name
  • os-version
  • software-name
  • software-version
  • software-patch-level
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
| False | builtin | +| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | +| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Local Definitions/Inventory Item/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | +| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='is-scanned']/@value |
  • yes
  • no
| False | builtin | + +### /Assessment Plan/Local Definitions/Inventory Item/Responsible Party/@Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item) | responsible-party/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | + +### /Assessment Plan/Local Definitions/Inventory Item/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Local Definitions/Inventory Item/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Local Definitions/Objectives And Methods/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/objectives-and-methods/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Local Definitions/Objectives And Methods/Part/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/objectives-and-methods) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • objective
  • assessment
  • assessment-objective
  • assessment-method
| False | builtin | + +### /Assessment Plan/Local Definitions/Objectives And Methods/Part/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/objectives-and-methods/part/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Local Definitions/Objectives And Methods/Part/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/objectives-and-methods/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | +| allowed-values | [Location](/assessment-plan/local-definitions/objectives-and-methods/part/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| allowed-values | [Location](/assessment-plan/local-definitions/objectives-and-methods/part/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | + +### /Assessment Plan/Local Definitions/Objectives And Methods/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/objectives-and-methods/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Local Definitions/User/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/user/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Local Definitions/User/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/user) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
  • privilege-level
| False | builtin | +| allowed-values | [Location](/assessment-plan/local-definitions/user/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Local Definitions/User/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/user) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • internal
  • external
  • general-public
| False | builtin | +| allowed-values | [Location](/assessment-plan/local-definitions/user) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='privilege-level']/@value |
  • privileged
  • non-privileged
  • no-logical-access
| False | builtin | + +### /Assessment Plan/Local Definitions/User/Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/local-definitions/user) | role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
| True | builtin | + +### /Assessment Plan/Metadata/Action/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/metadata/action/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Metadata/Action/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/metadata/action/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Metadata/Action/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/metadata/action/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Metadata/Action/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/metadata/action/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Metadata/Document Id/@Scheme + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/metadata/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | + +### /Assessment Plan/Metadata/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/metadata) | link/@rel |
  • canonical
  • alternate
  • latest-version
  • predecessor-version
  • successor-version
| True | builtin | +| allowed-values | [Location](/assessment-plan/metadata/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Metadata/Location/Address/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/metadata/location/address/@type) | . |
  • home
  • work
| True | builtin | + +### /Assessment Plan/Metadata/Location/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/metadata/location/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Metadata/Location/Prop/@Class + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type' and @value='data-center']/@class |
  • primary
  • alternate
| False | builtin | + +### /Assessment Plan/Metadata/Location/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | +| allowed-values | [Location](/assessment-plan/metadata/location/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Metadata/Location/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • data-center
| False | builtin | + +### /Assessment Plan/Metadata/Location/Telephone Number/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/metadata/location/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | + +### /Assessment Plan/Metadata/Party/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/metadata/party/@type) | . |
  • person
  • organization
| False | builtin | + +### /Assessment Plan/Metadata/Party/Address/@Type + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | address-type | [Location](/assessment-plan) | metadata/party/address/@type |
  • work
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| allowed-values | | [Location](/assessment-plan/metadata/party/address/@type) | . |
  • home
  • work
| True | builtin | + +### /Assessment Plan/Metadata/Party/External Id/@Scheme + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/metadata/party/external-id/@scheme) | . |
  • http://orcid.org/
| True | builtin | + +### /Assessment Plan/Metadata/Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/metadata/party/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Metadata/Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/metadata/party) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • mail-stop
  • office
  • job-title
| False | builtin | +| allowed-values | [Location](/assessment-plan/metadata/party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Metadata/Party/Telephone Number/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/metadata/party/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | + +### /Assessment Plan/Metadata/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/metadata) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • keywords
| False | builtin | +| allowed-values | [Location](/assessment-plan/metadata/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Metadata/Responsible Party/@Role Id + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | allowed-metadata-responsibe-party-role-ids | [Location](/assessment-plan/metadata) | responsible-party/@role-id |
  • creator
  • prepared-by
  • prepared-for
  • content-approver
  • contact
| True | builtin | + +### /Assessment Plan/Metadata/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/metadata/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Metadata/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/metadata/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Metadata/Revision/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/metadata/revision) | link/@rel |
  • canonical
  • alternate
  • predecessor-version
  • successor-version
  • version-history
| True | builtin | +| allowed-values | [Location](/assessment-plan/metadata/revision/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Metadata/Revision/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/metadata/revision/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Metadata/Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/metadata/role/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Metadata/Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/metadata/role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Reviewed Controls/Control Objective Selection/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/reviewed-controls/control-objective-selection/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Reviewed Controls/Control Objective Selection/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/reviewed-controls/control-objective-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Reviewed Controls/Control Selection/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/reviewed-controls/control-selection/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Reviewed Controls/Control Selection/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/reviewed-controls/control-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Reviewed Controls/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/reviewed-controls/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Reviewed Controls/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/reviewed-controls/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Task/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/task/@type) | . |
  • milestone
  • action
| True | builtin | + +### /Assessment Plan/Task/Associated Activity/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/task/associated-activity/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Task/Associated Activity/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/task/associated-activity/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Task/Associated Activity/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/task/associated-activity/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Task/Associated Activity/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/task/associated-activity/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Task/Associated Activity/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/task/associated-activity/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Assessment Plan/Task/Associated Activity/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/task/associated-activity/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Plan/Task/Associated Activity/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/task/associated-activity/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Task/Associated Activity/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/task/associated-activity/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Task/Associated Activity/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/task/associated-activity/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Plan/Task/Associated Activity/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/task/associated-activity/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Task/Associated Activity/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/task/associated-activity/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Task/Associated Activity/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/task/associated-activity/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Task/Associated Activity/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/task/associated-activity/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Task/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/task/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Task/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Task/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/task/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Task/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/task/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Task/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Assessment Plan/Task/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Plan/Task/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Task/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Task/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Plan/Task/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Task/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Task/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/task/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Task/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Plan/Task/Timing/At Frequency/@Unit + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/task/timing/at-frequency/@unit) | . |
  • seconds
  • minutes
  • hours
  • days
  • months
  • years
| False | builtin | + +### /Assessment Plan/Terms And Conditions/Part/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/terms-and-conditions) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • rules-of-engagement
  • disclosures
  • assessment-inclusions
  • assessment-exclusions
  • results-delivery
  • assumptions
  • methodology
| False | builtin | +| allowed-values | [Location](/assessment-plan/terms-and-conditions/part/@name) | . |
  • asset
  • method
  • objective
| True | builtin | + +### /Assessment Plan/Terms And Conditions/Part/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/terms-and-conditions/part/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Plan/Terms And Conditions/Part/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/terms-and-conditions/part) | .[@name='objective']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • method
| False | builtin | +| allowed-values | [Location](/assessment-plan/terms-and-conditions/part/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| allowed-values | [Location](/assessment-plan/terms-and-conditions/part/part) | .[@name='objective']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • method
| False | builtin | + +### /Assessment Plan/Terms And Conditions/Part/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-plan/terms-and-conditions/part) | .[@name='objective']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='method']/@value |
  • INTERVIEW
  • EXAMINE
  • TEST
| False | builtin | +| allowed-values | [Location](/assessment-plan/terms-and-conditions/part/part) | .[@name='objective']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='method']/@value |
  • INTERVIEW
  • EXAMINE
  • TEST
| False | builtin | + +### /Assessment Results/Back Matter/Resource/Citation/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/back-matter/resource/citation/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Back Matter/Resource/Citation/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/back-matter/resource/citation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Back Matter/Resource/Document Id/@Scheme + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/back-matter/resource/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | + +### /Assessment Results/Back Matter/Resource/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
  • version
  • published
| False | builtin | +| allowed-values | [Location](/assessment-results/back-matter/resource/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Back Matter/Resource/Prop/@Value + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | attachment-type | [Location](/assessment-results) | back-matter/resource/prop[@name='type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • law
  • regulation
  • standard
  • guidance
  • policy
  • procedure
  • guide
  • rules-of-behavior
  • plan
  • system-security-plan
  • artifact
  • evidence
  • screen-shot
  • image
  • tool-report
  • raw-tool-output
  • interview-notes
  • questionnaire
  • report
  • fedramp-citations
  • fedramp-acronyms
  • fedramp-logo
  • separation-of-duties-matrix
  • logo
  • personally-identifiable-information
  • agreement
  • isa-agreement
  • incident-response-plan
  • information-security-policies-and-procedures
  • users-guide
  • privacy-impact-assessment
  • information-system-contingency-plan
  • configuration-management-plan
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| allowed-values | | [Location](/assessment-results/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • logo
  • image
  • screen-shot
  • law
  • regulation
  • standard
  • external-guidance
  • acronyms
  • citation
  • policy
  • procedure
  • system-guide
  • users-guide
  • administrators-guide
  • rules-of-behavior
  • plan
  • artifact
  • evidence
  • tool-output
  • raw-data
  • interview-notes
  • questionnaire
  • report
  • agreement
| False | builtin | + +### /Assessment Results/Back Matter/Resource/Rlink/Hash/@Algorithm + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/back-matter/resource/rlink/hash/@algorithm) | . |
  • SHA-224
  • SHA-256
  • SHA-384
  • SHA-512
  • SHA3-224
  • SHA3-256
  • SHA3-384
  • SHA3-512
| True | builtin | + +### /Assessment Results/Local Definitions/Activity/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/local-definitions/activity/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Local Definitions/Activity/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/local-definitions/activity) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • method
| False | builtin | +| allowed-values | [Location](/assessment-results/local-definitions/activity/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Local Definitions/Activity/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/local-definitions/activity) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='method']/@value |
  • INTERVIEW
  • EXAMINE
  • TEST
| False | builtin | + +### /Assessment Results/Local Definitions/Activity/Related Controls/Control Objective Selection/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/local-definitions/activity/related-controls/control-objective-selection/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Local Definitions/Activity/Related Controls/Control Objective Selection/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/local-definitions/activity/related-controls/control-objective-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Local Definitions/Activity/Related Controls/Control Selection/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/local-definitions/activity/related-controls/control-selection/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Local Definitions/Activity/Related Controls/Control Selection/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/local-definitions/activity/related-controls/control-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Local Definitions/Activity/Related Controls/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/local-definitions/activity/related-controls/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Local Definitions/Activity/Related Controls/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/local-definitions/activity/related-controls/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Local Definitions/Activity/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/local-definitions/activity/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Local Definitions/Activity/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/local-definitions/activity/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Local Definitions/Activity/Step/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/local-definitions/activity/step/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Local Definitions/Activity/Step/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/local-definitions/activity/step/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Local Definitions/Activity/Step/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/local-definitions/activity/step/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Local Definitions/Activity/Step/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/local-definitions/activity/step/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Local Definitions/Activity/Step/Reviewed Controls/Control Objective Selection/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/local-definitions/activity/step/reviewed-controls/control-objective-selection/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Local Definitions/Activity/Step/Reviewed Controls/Control Objective Selection/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/local-definitions/activity/step/reviewed-controls/control-objective-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Local Definitions/Activity/Step/Reviewed Controls/Control Selection/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/local-definitions/activity/step/reviewed-controls/control-selection/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Local Definitions/Activity/Step/Reviewed Controls/Control Selection/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/local-definitions/activity/step/reviewed-controls/control-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Local Definitions/Activity/Step/Reviewed Controls/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/local-definitions/activity/step/reviewed-controls/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Local Definitions/Activity/Step/Reviewed Controls/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/local-definitions/activity/step/reviewed-controls/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Local Definitions/Objectives And Methods/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/local-definitions/objectives-and-methods/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Local Definitions/Objectives And Methods/Part/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/local-definitions/objectives-and-methods) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • objective
  • assessment
  • assessment-objective
  • assessment-method
| False | builtin | + +### /Assessment Results/Local Definitions/Objectives And Methods/Part/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/local-definitions/objectives-and-methods/part/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Local Definitions/Objectives And Methods/Part/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/local-definitions/objectives-and-methods/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | +| allowed-values | [Location](/assessment-results/local-definitions/objectives-and-methods/part/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| allowed-values | [Location](/assessment-results/local-definitions/objectives-and-methods/part/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | + +### /Assessment Results/Local Definitions/Objectives And Methods/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/local-definitions/objectives-and-methods/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Metadata/Action/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/metadata/action/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Metadata/Action/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/metadata/action/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Metadata/Action/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/metadata/action/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Metadata/Action/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/metadata/action/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Metadata/Document Id/@Scheme + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/metadata/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | + +### /Assessment Results/Metadata/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/metadata) | link/@rel |
  • canonical
  • alternate
  • latest-version
  • predecessor-version
  • successor-version
| True | builtin | +| allowed-values | [Location](/assessment-results/metadata/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Metadata/Location/Address/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/metadata/location/address/@type) | . |
  • home
  • work
| True | builtin | + +### /Assessment Results/Metadata/Location/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/metadata/location/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Metadata/Location/Prop/@Class + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type' and @value='data-center']/@class |
  • primary
  • alternate
| False | builtin | + +### /Assessment Results/Metadata/Location/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | +| allowed-values | [Location](/assessment-results/metadata/location/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Metadata/Location/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • data-center
| False | builtin | + +### /Assessment Results/Metadata/Location/Telephone Number/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/metadata/location/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | + +### /Assessment Results/Metadata/Party/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/metadata/party/@type) | . |
  • person
  • organization
| False | builtin | + +### /Assessment Results/Metadata/Party/Address/@Type + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | address-type | [Location](/assessment-results) | metadata/party/address/@type |
  • work
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| allowed-values | | [Location](/assessment-results/metadata/party/address/@type) | . |
  • home
  • work
| True | builtin | + +### /Assessment Results/Metadata/Party/External Id/@Scheme + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/metadata/party/external-id/@scheme) | . |
  • http://orcid.org/
| True | builtin | + +### /Assessment Results/Metadata/Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/metadata/party/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Metadata/Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/metadata/party) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • mail-stop
  • office
  • job-title
| False | builtin | +| allowed-values | [Location](/assessment-results/metadata/party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Metadata/Party/Telephone Number/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/metadata/party/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | + +### /Assessment Results/Metadata/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/metadata) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • keywords
| False | builtin | +| allowed-values | [Location](/assessment-results/metadata/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Metadata/Responsible Party/@Role Id + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | allowed-metadata-responsibe-party-role-ids | [Location](/assessment-results/metadata) | responsible-party/@role-id |
  • creator
  • prepared-by
  • prepared-for
  • content-approver
  • contact
| True | builtin | + +### /Assessment Results/Metadata/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/metadata/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Metadata/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/metadata/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Metadata/Revision/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/metadata/revision) | link/@rel |
  • canonical
  • alternate
  • predecessor-version
  • successor-version
  • version-history
| True | builtin | +| allowed-values | [Location](/assessment-results/metadata/revision/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Metadata/Revision/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/metadata/revision/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Metadata/Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/metadata/role/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Metadata/Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/metadata/role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Assessment Log/Entry/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/assessment-log/entry/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Assessment Log/Entry/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/assessment-log/entry/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Assessment Log/Entry/Related Task/Identified Subject/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Assessment Results/Result/Assessment Log/Entry/Related Task/Identified Subject/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Assessment Log/Entry/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Assessment Log/Entry/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Assessment Log/Entry/Related Task/Identified Subject/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Assessment Log/Entry/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Assessment Log/Entry/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Assessment Log/Entry/Related Task/Identified Subject/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Assessment Log/Entry/Related Task/Identified Subject/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Assessment Log/Entry/Related Task/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Assessment Log/Entry/Related Task/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Assessment Log/Entry/Related Task/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Assessment Log/Entry/Related Task/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Assessment Log/Entry/Related Task/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Assessment Results/Result/Assessment Log/Entry/Related Task/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Assessment Log/Entry/Related Task/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Assessment Log/Entry/Related Task/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Assessment Log/Entry/Related Task/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Assessment Log/Entry/Related Task/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Assessment Log/Entry/Related Task/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Assessment Log/Entry/Related Task/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Assessment Log/Entry/Related Task/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Attestation/Part/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/attestation/part/@name) | . |
  • asset
  • method
  • objective
| True | builtin | + +### /Assessment Results/Result/Attestation/Part/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/attestation/part/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Attestation/Part/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/attestation/part) | .[@name='objective']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • method
| False | builtin | +| allowed-values | [Location](/assessment-results/result/attestation/part/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| allowed-values | [Location](/assessment-results/result/attestation/part/part) | .[@name='objective']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • method
| False | builtin | + +### /Assessment Results/Result/Attestation/Part/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/attestation/part) | .[@name='objective']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='method']/@value |
  • INTERVIEW
  • EXAMINE
  • TEST
| False | builtin | +| allowed-values | [Location](/assessment-results/result/attestation/part/part) | .[@name='objective']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='method']/@value |
  • INTERVIEW
  • EXAMINE
  • TEST
| False | builtin | + +### /Assessment Results/Result/Attestation/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/attestation/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Attestation/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/attestation/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Finding/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Finding/Origin/Actor/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | + +### /Assessment Results/Result/Finding/Origin/Actor/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/origin/actor/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Finding/Origin/Actor/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Finding/Origin/Related Task/Identified Subject/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Assessment Results/Result/Finding/Origin/Related Task/Identified Subject/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Finding/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Finding/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Finding/Origin/Related Task/Identified Subject/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Finding/Origin/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Finding/Origin/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Finding/Origin/Related Task/Identified Subject/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Finding/Origin/Related Task/Identified Subject/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Finding/Origin/Related Task/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Finding/Origin/Related Task/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Finding/Origin/Related Task/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Finding/Origin/Related Task/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Finding/Origin/Related Task/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Assessment Results/Result/Finding/Origin/Related Task/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Finding/Origin/Related Task/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Finding/Origin/Related Task/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Finding/Origin/Related Task/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Finding/Origin/Related Task/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Finding/Origin/Related Task/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Finding/Origin/Related Task/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Finding/Origin/Related Task/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Finding/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Finding/Target/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/target/@type) | . |
  • statement-id
  • objective-id
| False | builtin | + +### /Assessment Results/Result/Finding/Target/Implementation Status/@State + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/target/implementation-status/@state) | . |
  • implemented
  • partial
  • planned
  • alternative
  • not-applicable
| True | builtin | + +### /Assessment Results/Result/Finding/Target/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/target/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Finding/Target/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/target/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Finding/Target/Status/@Reason + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/target/status/@reason) | . |
  • pass
  • fail
  • other
| True | builtin | + +### /Assessment Results/Result/Finding/Target/Status/@State + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/finding/target/status/@state) | . |
  • satisfied
  • not-satisfied
| False | builtin | + +### /Assessment Results/Result/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Assets/Assessment Platform/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/assessment-platform/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Assets/Assessment Platform/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/assessment-platform/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Assets/Assessment Platform/Uses Component/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/assessment-platform/uses-component/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Assets/Assessment Platform/Uses Component/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/assessment-platform/uses-component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Assets/Assessment Platform/Uses Component/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/assessment-platform/uses-component/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Assets/Assessment Platform/Uses Component/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/assessment-platform/uses-component/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Assets/Component/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component/@type) | . |
  • this-system
  • system
  • interconnection
  • software
  • hardware
  • service
  • policy
  • physical
  • process-procedure
  • plan
  • guidance
  • standard
  • validation
  • network
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Assets/Component/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | link/@rel |
  • depends-on
  • validation
  • proof-of-compliance
  • baseline-template
  • uses-service
  • system-security-plan
  • uses-network
  • imported-from
| True | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | (.)[@type='validation']/link/@rel |
  • validation-details
| True | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | (.)[@type='service']/link/@rel |
  • provided-by
  • used-by
| True | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | (.)[@type='interconnection']/link/@rel |
  • isa-agreement
| True | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Assets/Component/Prop/@Class + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('ipv4-address','ipv6-address')]/@class |
  • local
  • remote
| False | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Assets/Component/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • implementation-point
  • leveraged-authorization-uuid
  • inherited-uuid
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
| False | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | (.)[@type='software']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • software-identifier
| False | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | (.)[@type='interconnection']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • isa-title
  • isa-date
  • isa-remote-system-name
  • ipv4-address
  • ipv6-address
  • direction
| False | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Assets/Component/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='allows-authenticated-scan']/@value |
  • yes
  • no
| False | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='public']/@value |
  • yes
  • no
| False | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='virtual']/@value |
  • yes
  • no
| False | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='implementation-point']/@value |
  • internal
  • external
| False | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='direction']/@value |
  • incoming
  • outgoing
| False | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Assets/Component/Protocol/Port Range/@Transport + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component/protocol/port-range/@transport) | . |
  • TCP
  • UDP
| False | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Assets/Component/Responsible Role/@Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | (.)[@type='interconnection']/responsible-role/@role-id |
  • isa-poc-local
  • isa-poc-remote
  • isa-authorizing-official-local
  • isa-authorizing-official-remote
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Assets/Component/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Assets/Component/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Assets/Component/Status/@State + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component/status/@state) | . |
  • under-development
  • operational
  • disposition
  • other
| False | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Task/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/@type) | . |
  • milestone
  • action
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Task/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Task/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Task/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Task/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Task/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Task/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Task/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Task/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Task/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Task/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Task/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Task/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Task/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Local Definitions/Assessment Task/Timing/At Frequency/@Unit + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/timing/at-frequency/@unit) | . |
  • seconds
  • minutes
  • hours
  • days
  • months
  • years
| False | builtin | + +### /Assessment Results/Result/Local Definitions/Component/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/component/@type) | . |
  • this-system
  • system
  • interconnection
  • software
  • hardware
  • service
  • policy
  • physical
  • process-procedure
  • plan
  • guidance
  • standard
  • validation
  • network
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Component/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/component) | link/@rel |
  • depends-on
  • validation
  • proof-of-compliance
  • baseline-template
  • uses-service
  • system-security-plan
  • uses-network
  • imported-from
| True | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/component) | (.)[@type='validation']/link/@rel |
  • validation-details
| True | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/component) | (.)[@type='service']/link/@rel |
  • provided-by
  • used-by
| True | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/component) | (.)[@type='interconnection']/link/@rel |
  • isa-agreement
| True | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/component/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Component/Prop/@Class + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('ipv4-address','ipv6-address')]/@class |
  • local
  • remote
| False | builtin | + +### /Assessment Results/Result/Local Definitions/Component/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • implementation-point
  • leveraged-authorization-uuid
  • inherited-uuid
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
| False | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/component) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/component) | (.)[@type='software']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • software-identifier
| False | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/component) | (.)[@type='interconnection']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • isa-title
  • isa-date
  • isa-remote-system-name
  • ipv4-address
  • ipv6-address
  • direction
| False | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Local Definitions/Component/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='allows-authenticated-scan']/@value |
  • yes
  • no
| False | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='public']/@value |
  • yes
  • no
| False | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='virtual']/@value |
  • yes
  • no
| False | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='implementation-point']/@value |
  • internal
  • external
| False | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='direction']/@value |
  • incoming
  • outgoing
| False | builtin | + +### /Assessment Results/Result/Local Definitions/Component/Protocol/Port Range/@Transport + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/component/protocol/port-range/@transport) | . |
  • TCP
  • UDP
| False | builtin | + +### /Assessment Results/Result/Local Definitions/Component/Responsible Role/@Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/component) | responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/component) | (.)[@type='interconnection']/responsible-role/@role-id |
  • isa-poc-local
  • isa-poc-remote
  • isa-authorizing-official-local
  • isa-authorizing-official-remote
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Component/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/component/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Component/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/component/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Local Definitions/Component/Status/@State + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/component/status/@state) | . |
  • under-development
  • operational
  • disposition
  • other
| False | builtin | + +### /Assessment Results/Result/Local Definitions/Inventory Item/Implemented Component/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item/implemented-component/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Inventory Item/Implemented Component/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item/implemented-component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
| False | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item/implemented-component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Local Definitions/Inventory Item/Implemented Component/Responsible Party/@Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item/implemented-component) | responsible-party/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Inventory Item/Implemented Component/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item/implemented-component/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Inventory Item/Implemented Component/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item/implemented-component/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Local Definitions/Inventory Item/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item) | link/@rel |
  • baseline-template
| True | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Inventory Item/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • ipv4-address
  • ipv6-address
  • fqdn
  • uri
  • serial-number
  • netbios-name
  • mac-address
  • physical-location
  • is-scanned
  • hardware-model
  • os-name
  • os-version
  • software-name
  • software-version
  • software-patch-level
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
| False | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Local Definitions/Inventory Item/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='is-scanned']/@value |
  • yes
  • no
| False | builtin | + +### /Assessment Results/Result/Local Definitions/Inventory Item/Responsible Party/@Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item) | responsible-party/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Inventory Item/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Local Definitions/Inventory Item/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Local Definitions/User/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/user/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Local Definitions/User/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/user) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
  • privilege-level
| False | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/user/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Local Definitions/User/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/user) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • internal
  • external
  • general-public
| False | builtin | +| allowed-values | [Location](/assessment-results/result/local-definitions/user) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='privilege-level']/@value |
  • privileged
  • non-privileged
  • no-logical-access
| False | builtin | + +### /Assessment Results/Result/Local Definitions/User/Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/local-definitions/user) | role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
| True | builtin | + +### /Assessment Results/Result/Observation/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Observation/Method + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/method) | . |
  • EXAMINE
  • INTERVIEW
  • TEST
  • UNKNOWN
| True | builtin | + +### /Assessment Results/Result/Observation/Origin/Actor/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | + +### /Assessment Results/Result/Observation/Origin/Actor/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/origin/actor/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Observation/Origin/Actor/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Observation/Origin/Related Task/Identified Subject/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Assessment Results/Result/Observation/Origin/Related Task/Identified Subject/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Observation/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Observation/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Observation/Origin/Related Task/Identified Subject/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Observation/Origin/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Observation/Origin/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Observation/Origin/Related Task/Identified Subject/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Observation/Origin/Related Task/Identified Subject/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Observation/Origin/Related Task/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Observation/Origin/Related Task/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Observation/Origin/Related Task/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Observation/Origin/Related Task/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Observation/Origin/Related Task/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Assessment Results/Result/Observation/Origin/Related Task/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Observation/Origin/Related Task/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Observation/Origin/Related Task/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Observation/Origin/Related Task/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Observation/Origin/Related Task/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Observation/Origin/Related Task/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Observation/Origin/Related Task/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Observation/Origin/Related Task/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Observation/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Observation/Relevant Evidence/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/relevant-evidence/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Observation/Relevant Evidence/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/relevant-evidence/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Observation/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Observation/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Observation/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Observation/Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/observation/type) | . |
  • ssp-statement-issue
  • control-objective
  • mitigation
  • finding
  • historic
| True | builtin | + +### /Assessment Results/Result/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Reviewed Controls/Control Objective Selection/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/reviewed-controls/control-objective-selection/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Reviewed Controls/Control Objective Selection/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/reviewed-controls/control-objective-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Reviewed Controls/Control Selection/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/reviewed-controls/control-selection/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Reviewed Controls/Control Selection/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/reviewed-controls/control-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Reviewed Controls/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/reviewed-controls/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Reviewed Controls/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/reviewed-controls/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Characterization/Facet/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://csrc.nist.gov/ns/oscal']/@name |
  • likelihood
  • impact
  • risk
  • severity
| False | builtin | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://fedramp.gov','http://fedramp.gov/ns/oscal')]/@name |
  • likelihood
  • impact
  • risk
| False | builtin | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://cve.mitre.org']/@name |
  • cve-id
| False | builtin | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0']/@name |
  • access-vector
  • access-complexity
  • authentication
  • confidentiality-impact
  • integrity-impact
  • availability-impact
  • exploitability
  • remediation-level
  • report-confidence
  • collateral-damage-potential
  • target-distribution
  • confidentiality-requirement
  • integrity-requirement
  • availability-requirement
| False | builtin | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1')]/@name |
  • attack-vector
  • access-complexity
  • privileges-required
  • user-interaction
  • scope
  • confidentiality-impact
  • integrity-impact
  • availability-impact
  • exploit-code-maturity
  • remediation-level
  • report-confidence
  • modified-attack-vector
  • modified-attack-complexity
  • modified-privileges-required
  • modified-user-interaction
  • modified-scope
  • modified-confidentiality
  • modified-integrity
  • modified-availability
  • confidentiality-requirement
  • integrity-requirement
  • availability-requirement
| False | builtin | + +### /Assessment Results/Result/Risk/Characterization/Facet/@System + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet/@system) | . |
  • http://fedramp.gov
  • http://fedramp.gov/ns/oscal
  • http://csrc.nist.gov/ns/oscal
  • http://csrc.nist.gov/ns/oscal/unknown
  • http://cve.mitre.org
  • http://www.first.org/cvss/v2.0
  • http://www.first.org/cvss/v3.0
  • http://www.first.org/cvss/v3.1
| True | builtin | + +### /Assessment Results/Result/Risk/Characterization/Facet/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='access-vector']/@value |
  • local
  • adjacent-network
  • network
| False | builtin | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='access-complexity']/@value |
  • high
  • medium
  • low
| False | builtin | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='authentication']/@value |
  • multiple
  • single
  • none
| False | builtin | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name=('confidentiality-impact', 'integrity-impact', 'availability-impact')]/@value |
  • none
  • partial
  • complete
| False | builtin | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='exploitability']/@value |
  • unproven
  • proof-of-concept
  • functional
  • high
  • not-defined
| False | builtin | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='remediation-level']/@value |
  • official-fix
  • temporary-fix
  • workaround
  • unavailable
  • not-defined
| False | builtin | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='report-confidence']/@value |
  • unconfirmed
  • uncorroborated
  • confirmed
  • not-defined
| False | builtin | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='collateral-damage-potential']/@value |
  • none
  • low
  • low-medium
  • medium-high
  • high
  • not-defined
| False | builtin | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name=('target-distribution', 'confidentiality-requirement', 'integrity-requirement', 'availability-requirement')]/@value |
  • none
  • low
  • medium
  • high
  • not-defined
| False | builtin | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='access-vector']/@value |
  • network
  • adjacent
  • local
  • physical
| False | builtin | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='access-complexity']/@value |
  • high
  • low
| False | builtin | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name=('privileges-required', 'confidentiality-impact', 'integrity-impact', 'availability-impact')]/@value |
  • none
  • low
  • high
| False | builtin | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='user-interaction']/@value |
  • none
  • required
| False | builtin | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='scope']/@value |
  • unchanged
  • changed
| False | builtin | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='exploit-code-maturity']/@value |
  • not-defined
  • unproven
  • proof-of-concept
  • functional
  • high
| False | builtin | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='remediation-level']/@value |
  • not-defined
  • official-fix
  • temporary-fix
  • workaround
  • unavailable
| False | builtin | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='report-confidence']/@value |
  • not-defined
  • unknown
  • reasonable
  • confirmed
| False | builtin | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name=('confidentiality-requirement', 'integrity-requirement', 'availability-requirement')]/@value |
  • not-defined
  • low
  • medium
  • high
| False | builtin | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='modified-attack-vector']/@value |
  • not-defined
  • network
  • adjacent
  • local
  • physical
| False | builtin | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='modified-attack-complexity']/@value |
  • not-defined
  • high
  • low
| False | builtin | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name=('modified-privileges-required', 'modified-confidentiality', 'modified-integrity', 'modified-availability')]/@value |
  • not-defined
  • none
  • low
  • high
| False | builtin | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='modified-user-interaction']/@value |
  • not-defined
  • none
  • required
| False | builtin | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='modified-scope']/@value |
  • not-defined
  • unchanged
  • changed
| False | builtin | + +### /Assessment Results/Result/Risk/Characterization/Facet/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Characterization/Facet/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • state
| False | builtin | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Characterization/Facet/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='state']/@value |
  • initial
  • adjusted
| False | builtin | + +### /Assessment Results/Result/Risk/Characterization/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Characterization/Origin/Actor/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | + +### /Assessment Results/Result/Risk/Characterization/Origin/Actor/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/actor/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Characterization/Origin/Actor/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Characterization/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/characterization/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Mitigating Factor/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/mitigating-factor/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Mitigating Factor/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/mitigating-factor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Mitigating Factor/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/mitigating-factor/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Risk/Mitigating Factor/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/mitigating-factor/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Mitigating Factor/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/mitigating-factor/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Origin/Actor/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | + +### /Assessment Results/Result/Risk/Origin/Actor/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/origin/actor/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Origin/Actor/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Origin/Related Task/Identified Subject/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Assessment Results/Result/Risk/Origin/Related Task/Identified Subject/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Risk/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Origin/Related Task/Identified Subject/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Risk/Origin/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Origin/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Origin/Related Task/Identified Subject/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Origin/Related Task/Identified Subject/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Origin/Related Task/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Origin/Related Task/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Origin/Related Task/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Origin/Related Task/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Origin/Related Task/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Assessment Results/Result/Risk/Origin/Related Task/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Risk/Origin/Related Task/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Origin/Related Task/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Origin/Related Task/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Risk/Origin/Related Task/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Origin/Related Task/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Origin/Related Task/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Origin/Related Task/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • false-positive
  • accepted
  • risk-adjusted
  • priority
| False | builtin | +| allowed-values | [Location](/assessment-results/result/risk/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Response/@Lifecycle + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/@lifecycle) | . |
  • recommendation
  • planned
  • completed
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Origin/Actor/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | + +### /Assessment Results/Result/Risk/Response/Origin/Actor/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/origin/actor/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Origin/Actor/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Response/Origin/Related Task/Identified Subject/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Origin/Related Task/Identified Subject/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Response/Origin/Related Task/Identified Subject/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Origin/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Origin/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Response/Origin/Related Task/Identified Subject/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Origin/Related Task/Identified Subject/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Response/Origin/Related Task/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Origin/Related Task/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Response/Origin/Related Task/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Origin/Related Task/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Response/Origin/Related Task/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Origin/Related Task/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Origin/Related Task/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Origin/Related Task/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Response/Origin/Related Task/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Origin/Related Task/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Origin/Related Task/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Response/Origin/Related Task/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Origin/Related Task/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Response/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | +| allowed-values | [Location](/assessment-results/result/risk/response/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Response/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • avoid
  • mitigate
  • transfer
  • accept
  • share
  • contingency
  • none
| False | builtin | + +### /Assessment Results/Result/Risk/Response/Required Asset/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/required-asset/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Required Asset/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/required-asset/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Response/Required Asset/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/required-asset/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Required Asset/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/required-asset/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Required Asset/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/required-asset/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Response/Task/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/task/@type) | . |
  • milestone
  • action
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/task/associated-activity/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/task/associated-activity/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/task/associated-activity/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/task/associated-activity/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/task/associated-activity/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/task/associated-activity/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/task/associated-activity/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/task/associated-activity/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/task/associated-activity/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/task/associated-activity/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/task/associated-activity/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/task/associated-activity/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/task/associated-activity/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Response/Task/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/task/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Task/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Response/Task/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/task/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Task/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/task/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Response/Task/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Task/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Task/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Task/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Response/Task/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Task/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Task/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Response/Task/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/task/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Response/Task/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Response/Task/Timing/At Frequency/@Unit + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/response/task/timing/at-frequency/@unit) | . |
  • seconds
  • minutes
  • hours
  • days
  • months
  • years
| False | builtin | + +### /Assessment Results/Result/Risk/Risk Log/Entry/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Risk Log/Entry/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | +| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Risk Log/Entry/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • vendor-check-in
  • status-update
  • milestone-complete
  • mitigation
  • remediated
  • closed
  • dr-submission
  • dr-updated
  • dr-approved
  • dr-rejected
| True | builtin | + +### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Assessment Results/Result/Risk/Risk Log/Entry/Status Change + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/status-change) | . |
  • open
  • investigating
  • remediating
  • deviation-requested
  • deviation-approved
  • closed
| True | builtin | + +### /Assessment Results/Result/Risk/Status + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/status) | . |
  • open
  • investigating
  • remediating
  • deviation-requested
  • deviation-approved
  • closed
| True | builtin | + +### /Assessment Results/Result/Risk/Threat Id/@System + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/assessment-results/result/risk/threat-id/@system) | . |
  • http://fedramp.gov
  • http://fedramp.gov/ns/oscal
| True | builtin | + +### /Catalog/Back Matter/Resource/Citation/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/back-matter/resource/citation/link/@rel) | . |
  • reference
| True | builtin | + +### /Catalog/Back Matter/Resource/Citation/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/back-matter/resource/citation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Catalog/Back Matter/Resource/Document Id/@Scheme + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/back-matter/resource/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | + +### /Catalog/Back Matter/Resource/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
  • version
  • published
| False | builtin | +| allowed-values | [Location](/catalog/back-matter/resource/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Catalog/Back Matter/Resource/Prop/@Value + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | attachment-type | [Location](/catalog) | back-matter/resource/prop[@name='type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • law
  • regulation
  • standard
  • guidance
  • policy
  • procedure
  • guide
  • rules-of-behavior
  • plan
  • system-security-plan
  • artifact
  • evidence
  • screen-shot
  • image
  • tool-report
  • raw-tool-output
  • interview-notes
  • questionnaire
  • report
  • fedramp-citations
  • fedramp-acronyms
  • fedramp-logo
  • separation-of-duties-matrix
  • logo
  • personally-identifiable-information
  • agreement
  • isa-agreement
  • incident-response-plan
  • information-security-policies-and-procedures
  • users-guide
  • privacy-impact-assessment
  • information-system-contingency-plan
  • configuration-management-plan
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| allowed-values | | [Location](/catalog/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • logo
  • image
  • screen-shot
  • law
  • regulation
  • standard
  • external-guidance
  • acronyms
  • citation
  • policy
  • procedure
  • system-guide
  • users-guide
  • administrators-guide
  • rules-of-behavior
  • plan
  • artifact
  • evidence
  • tool-output
  • raw-data
  • interview-notes
  • questionnaire
  • report
  • agreement
| False | builtin | + +### /Catalog/Back Matter/Resource/Rlink/Hash/@Algorithm + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/back-matter/resource/rlink/hash/@algorithm) | . |
  • SHA-224
  • SHA-256
  • SHA-384
  • SHA-512
  • SHA3-224
  • SHA3-256
  • SHA3-384
  • SHA3-512
| True | builtin | + +### /Catalog/Control/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/control) | link/@rel |
  • reference
  • related
  • required
  • incorporated-into
  • moved-to
| True | builtin | +| allowed-values | [Location](/catalog/control/link/@rel) | . |
  • reference
| True | builtin | +| allowed-values | [Location](/catalog/control/control) | link/@rel |
  • reference
  • related
  • required
  • incorporated-into
  • moved-to
| True | builtin | + +### /Catalog/Control/Param/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/control/param/link/@rel) | . |
  • reference
| True | builtin | + +### /Catalog/Control/Param/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/control/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
  • alt-label
| False | builtin | +| allowed-values | [Location](/catalog/control/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/rmf')]/@name |
  • aggregates
| False | builtin | +| allowed-values | [Location](/catalog/control/param/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Catalog/Control/Param/Select/@How Many + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/control/param/select/@how-many) | . |
  • one
  • one-or-more
| False | builtin | + +### /Catalog/Control/Part/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • overview
  • statement
  • guidance
  • example
  • assessment
  • assessment-method
| False | builtin | +| allowed-values | [Location](/catalog/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='statement']//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • item
| False | builtin | +| allowed-values | [Location](/catalog/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='statement']//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • item
| False | builtin | +| allowed-values | [Location](/catalog/control) | [Target](.//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name) |
  • objective
  • assessment-objective
| False | builtin | +| allowed-values | [Location](/catalog/control) | [Target](.//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name) |
  • objective
  • assessment-objective
| False | builtin | +| allowed-values | [Location](/catalog/control) | [Target](.//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name) |
  • objective
  • assessment-objective
| False | builtin | +| allowed-values | [Location](/catalog/control) | [Target](.//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name) |
  • objective
  • assessment-objective
| False | builtin | +| allowed-values | [Location](/catalog/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • objects
  • assessment-objects
| False | builtin | +| allowed-values | [Location](/catalog/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • overview
  • statement
  • guidance
  • example
  • assessment
  • assessment-method
| False | builtin | +| allowed-values | [Location](/catalog/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='statement']//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • item
| False | builtin | +| allowed-values | [Location](/catalog/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='statement']//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • item
| False | builtin | +| allowed-values | [Location](/catalog/control/control) | [Target](.//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name) |
  • objective
  • assessment-objective
| False | builtin | +| allowed-values | [Location](/catalog/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • objects
  • assessment-objects
| False | builtin | + +### /Catalog/Control/Part/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/control/part/link/@rel) | . |
  • reference
| True | builtin | + +### /Catalog/Control/Part/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • method
| False | builtin | +| allowed-values | [Location](/catalog/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/rmf')]/@name |
  • method
| False | builtin | +| allowed-values | [Location](/catalog/control/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | +| allowed-values | [Location](/catalog/control/part/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| allowed-values | [Location](/catalog/control/part/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | +| allowed-values | [Location](/catalog/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • method
| False | builtin | +| allowed-values | [Location](/catalog/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/rmf')]/@name |
  • method
| False | builtin | + +### /Catalog/Control/Part/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace(('http://csrc.nist.gov/ns/oscal','http://csrc.nist.gov/ns/rmf')) and @name='method']/@value |
  • INTERVIEW
  • EXAMINE
  • TEST
| False | builtin | +| allowed-values | [Location](/catalog/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace(('http://csrc.nist.gov/ns/oscal','http://csrc.nist.gov/ns/rmf')) and @name='method']/@value |
  • INTERVIEW
  • EXAMINE
  • TEST
| False | builtin | + +### /Catalog/Control/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/control) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
  • status
| False | builtin | +| allowed-values | [Location](/catalog/control/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| allowed-values | [Location](/catalog/control/control) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
  • status
| False | builtin | + +### /Catalog/Control/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/control) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='status']/@value |
  • withdrawn
  • Withdrawn
| False | builtin | +| allowed-values | [Location](/catalog/control/control) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='status']/@value |
  • withdrawn
  • Withdrawn
| False | builtin | + +### /Catalog/Group/Control/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/group/control) | link/@rel |
  • reference
  • related
  • required
  • incorporated-into
  • moved-to
| True | builtin | +| allowed-values | [Location](/catalog/group/control/link/@rel) | . |
  • reference
| True | builtin | +| allowed-values | [Location](/catalog/group/control/control) | link/@rel |
  • reference
  • related
  • required
  • incorporated-into
  • moved-to
| True | builtin | + +### /Catalog/Group/Control/Param/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/group/control/param/link/@rel) | . |
  • reference
| True | builtin | + +### /Catalog/Group/Control/Param/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/group/control/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
  • alt-label
| False | builtin | +| allowed-values | [Location](/catalog/group/control/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/rmf')]/@name |
  • aggregates
| False | builtin | +| allowed-values | [Location](/catalog/group/control/param/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Catalog/Group/Control/Param/Select/@How Many + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/group/control/param/select/@how-many) | . |
  • one
  • one-or-more
| False | builtin | + +### /Catalog/Group/Control/Part/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/group/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • overview
  • statement
  • guidance
  • example
  • assessment
  • assessment-method
| False | builtin | +| allowed-values | [Location](/catalog/group/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='statement']//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • item
| False | builtin | +| allowed-values | [Location](/catalog/group/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='statement']//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • item
| False | builtin | +| allowed-values | [Location](/catalog/group/control) | [Target](.//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name) |
  • objective
  • assessment-objective
| False | builtin | +| allowed-values | [Location](/catalog/group/control) | [Target](.//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name) |
  • objective
  • assessment-objective
| False | builtin | +| allowed-values | [Location](/catalog/group/control) | [Target](.//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name) |
  • objective
  • assessment-objective
| False | builtin | +| allowed-values | [Location](/catalog/group/control) | [Target](.//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name) |
  • objective
  • assessment-objective
| False | builtin | +| allowed-values | [Location](/catalog/group/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • objects
  • assessment-objects
| False | builtin | +| allowed-values | [Location](/catalog/group/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • overview
  • statement
  • guidance
  • example
  • assessment
  • assessment-method
| False | builtin | +| allowed-values | [Location](/catalog/group/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='statement']//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • item
| False | builtin | +| allowed-values | [Location](/catalog/group/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='statement']//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • item
| False | builtin | +| allowed-values | [Location](/catalog/group/control/control) | [Target](.//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name) |
  • objective
  • assessment-objective
| False | builtin | +| allowed-values | [Location](/catalog/group/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • objects
  • assessment-objects
| False | builtin | + +### /Catalog/Group/Control/Part/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/group/control/part/link/@rel) | . |
  • reference
| True | builtin | + +### /Catalog/Group/Control/Part/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/group/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • method
| False | builtin | +| allowed-values | [Location](/catalog/group/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/rmf')]/@name |
  • method
| False | builtin | +| allowed-values | [Location](/catalog/group/control/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | +| allowed-values | [Location](/catalog/group/control/part/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| allowed-values | [Location](/catalog/group/control/part/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | +| allowed-values | [Location](/catalog/group/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • method
| False | builtin | +| allowed-values | [Location](/catalog/group/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/rmf')]/@name |
  • method
| False | builtin | + +### /Catalog/Group/Control/Part/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/group/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace(('http://csrc.nist.gov/ns/oscal','http://csrc.nist.gov/ns/rmf')) and @name='method']/@value |
  • INTERVIEW
  • EXAMINE
  • TEST
| False | builtin | +| allowed-values | [Location](/catalog/group/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace(('http://csrc.nist.gov/ns/oscal','http://csrc.nist.gov/ns/rmf')) and @name='method']/@value |
  • INTERVIEW
  • EXAMINE
  • TEST
| False | builtin | + +### /Catalog/Group/Control/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/group/control) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
  • status
| False | builtin | +| allowed-values | [Location](/catalog/group/control/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| allowed-values | [Location](/catalog/group/control/control) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
  • status
| False | builtin | + +### /Catalog/Group/Control/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/group/control) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='status']/@value |
  • withdrawn
  • Withdrawn
| False | builtin | +| allowed-values | [Location](/catalog/group/control/control) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='status']/@value |
  • withdrawn
  • Withdrawn
| False | builtin | + +### /Catalog/Group/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/group/link/@rel) | . |
  • reference
| True | builtin | + +### /Catalog/Group/Param/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/group/param/link/@rel) | . |
  • reference
| True | builtin | + +### /Catalog/Group/Param/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/group/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
  • alt-label
| False | builtin | +| allowed-values | [Location](/catalog/group/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/rmf')]/@name |
  • aggregates
| False | builtin | +| allowed-values | [Location](/catalog/group/param/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Catalog/Group/Param/Select/@How Many + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/group/param/select/@how-many) | . |
  • one
  • one-or-more
| False | builtin | + +### /Catalog/Group/Part/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/group) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • overview
  • instruction
| False | builtin | +| allowed-values | [Location](/catalog/group/group) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • overview
  • instruction
| False | builtin | + +### /Catalog/Group/Part/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/group/part/link/@rel) | . |
  • reference
| True | builtin | + +### /Catalog/Group/Part/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/group/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | +| allowed-values | [Location](/catalog/group/part/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| allowed-values | [Location](/catalog/group/part/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | + +### /Catalog/Group/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/group) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | +| allowed-values | [Location](/catalog/group/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| allowed-values | [Location](/catalog/group/group) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | + +### /Catalog/Metadata/Action/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/metadata/action/link/@rel) | . |
  • reference
| True | builtin | + +### /Catalog/Metadata/Action/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/metadata/action/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Catalog/Metadata/Action/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/metadata/action/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Catalog/Metadata/Action/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/metadata/action/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Catalog/Metadata/Document Id/@Scheme + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/metadata/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | + +### /Catalog/Metadata/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog) | metadata/link/@rel |
  • source-profile
  • source-profile-uuid
| True | builtin | +| allowed-values | [Location](/catalog/metadata) | link/@rel |
  • canonical
  • alternate
  • latest-version
  • predecessor-version
  • successor-version
| True | builtin | +| allowed-values | [Location](/catalog/metadata/link/@rel) | . |
  • reference
| True | builtin | + +### /Catalog/Metadata/Location/Address/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/metadata/location/address/@type) | . |
  • home
  • work
| True | builtin | + +### /Catalog/Metadata/Location/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/metadata/location/link/@rel) | . |
  • reference
| True | builtin | + +### /Catalog/Metadata/Location/Prop/@Class + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type' and @value='data-center']/@class |
  • primary
  • alternate
| False | builtin | + +### /Catalog/Metadata/Location/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | +| allowed-values | [Location](/catalog/metadata/location/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Catalog/Metadata/Location/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • data-center
| False | builtin | + +### /Catalog/Metadata/Location/Telephone Number/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/metadata/location/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | + +### /Catalog/Metadata/Party/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/metadata/party/@type) | . |
  • person
  • organization
| False | builtin | + +### /Catalog/Metadata/Party/Address/@Type + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | address-type | [Location](/catalog) | metadata/party/address/@type |
  • work
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| allowed-values | | [Location](/catalog/metadata/party/address/@type) | . |
  • home
  • work
| True | builtin | + +### /Catalog/Metadata/Party/External Id/@Scheme + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/metadata/party/external-id/@scheme) | . |
  • http://orcid.org/
| True | builtin | + +### /Catalog/Metadata/Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/metadata/party/link/@rel) | . |
  • reference
| True | builtin | + +### /Catalog/Metadata/Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/metadata/party) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • mail-stop
  • office
  • job-title
| False | builtin | +| allowed-values | [Location](/catalog/metadata/party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Catalog/Metadata/Party/Telephone Number/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/metadata/party/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | + +### /Catalog/Metadata/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog) | metadata/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • resolution-tool
  • source-profile-uuid
| False | builtin | +| allowed-values | [Location](/catalog/metadata) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • keywords
| False | builtin | +| allowed-values | [Location](/catalog/metadata/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Catalog/Metadata/Responsible Party/@Role Id + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | allowed-metadata-responsibe-party-role-ids | [Location](/catalog/metadata) | responsible-party/@role-id |
  • creator
  • prepared-by
  • prepared-for
  • content-approver
  • contact
| True | builtin | + +### /Catalog/Metadata/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/metadata/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Catalog/Metadata/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/metadata/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Catalog/Metadata/Revision/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/metadata/revision) | link/@rel |
  • canonical
  • alternate
  • predecessor-version
  • successor-version
  • version-history
| True | builtin | +| allowed-values | [Location](/catalog/metadata/revision/link/@rel) | . |
  • reference
| True | builtin | + +### /Catalog/Metadata/Revision/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/metadata/revision/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Catalog/Metadata/Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/metadata/role/link/@rel) | . |
  • reference
| True | builtin | + +### /Catalog/Metadata/Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/metadata/role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Catalog/Param/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/param/link/@rel) | . |
  • reference
| True | builtin | + +### /Catalog/Param/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
  • alt-label
| False | builtin | +| allowed-values | [Location](/catalog/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/rmf')]/@name |
  • aggregates
| False | builtin | +| allowed-values | [Location](/catalog/param/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Catalog/Param/Select/@How Many + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/catalog/param/select/@how-many) | . |
  • one
  • one-or-more
| False | builtin | + +### /Component Definition/Back Matter/Resource/Citation/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/back-matter/resource/citation/link/@rel) | . |
  • reference
| True | builtin | + +### /Component Definition/Back Matter/Resource/Citation/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/back-matter/resource/citation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Component Definition/Back Matter/Resource/Document Id/@Scheme + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/back-matter/resource/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | + +### /Component Definition/Back Matter/Resource/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
  • version
  • published
| False | builtin | +| allowed-values | [Location](/component-definition/back-matter/resource/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Component Definition/Back Matter/Resource/Prop/@Value + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | attachment-type | [Location](/component-definition) | back-matter/resource/prop[@name='type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • law
  • regulation
  • standard
  • guidance
  • policy
  • procedure
  • guide
  • rules-of-behavior
  • plan
  • system-security-plan
  • artifact
  • evidence
  • screen-shot
  • image
  • tool-report
  • raw-tool-output
  • interview-notes
  • questionnaire
  • report
  • fedramp-citations
  • fedramp-acronyms
  • fedramp-logo
  • separation-of-duties-matrix
  • logo
  • personally-identifiable-information
  • agreement
  • isa-agreement
  • incident-response-plan
  • information-security-policies-and-procedures
  • users-guide
  • privacy-impact-assessment
  • information-system-contingency-plan
  • configuration-management-plan
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| allowed-values | | [Location](/component-definition/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • logo
  • image
  • screen-shot
  • law
  • regulation
  • standard
  • external-guidance
  • acronyms
  • citation
  • policy
  • procedure
  • system-guide
  • users-guide
  • administrators-guide
  • rules-of-behavior
  • plan
  • artifact
  • evidence
  • tool-output
  • raw-data
  • interview-notes
  • questionnaire
  • report
  • agreement
| False | builtin | + +### /Component Definition/Back Matter/Resource/Rlink/Hash/@Algorithm + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/back-matter/resource/rlink/hash/@algorithm) | . |
  • SHA-224
  • SHA-256
  • SHA-384
  • SHA-512
  • SHA3-224
  • SHA3-256
  • SHA3-384
  • SHA3-512
| True | builtin | + +### /Component Definition/Capability/Control Implementation/Implemented Requirement/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/capability/control-implementation/implemented-requirement/link/@rel) | . |
  • reference
| True | builtin | + +### /Component Definition/Capability/Control Implementation/Implemented Requirement/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/capability/control-implementation/implemented-requirement/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Component Definition/Capability/Control Implementation/Implemented Requirement/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/capability/control-implementation/implemented-requirement/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /Component Definition/Capability/Control Implementation/Implemented Requirement/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/capability/control-implementation/implemented-requirement/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Component Definition/Capability/Control Implementation/Implemented Requirement/Statement/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/capability/control-implementation/implemented-requirement/statement/link/@rel) | . |
  • reference
| True | builtin | + +### /Component Definition/Capability/Control Implementation/Implemented Requirement/Statement/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/capability/control-implementation/implemented-requirement/statement/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Component Definition/Capability/Control Implementation/Implemented Requirement/Statement/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/capability/control-implementation/implemented-requirement/statement/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /Component Definition/Capability/Control Implementation/Implemented Requirement/Statement/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/capability/control-implementation/implemented-requirement/statement/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Component Definition/Capability/Control Implementation/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/capability/control-implementation/link/@rel) | . |
  • reference
| True | builtin | + +### /Component Definition/Capability/Control Implementation/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/capability/control-implementation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Component Definition/Capability/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/capability/link/@rel) | . |
  • reference
| True | builtin | + +### /Component Definition/Capability/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/capability/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Component Definition/Component/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/component/@type) | . |
  • interconnection
  • software
  • hardware
  • service
  • policy
  • physical
  • process-procedure
  • plan
  • guidance
  • standard
  • validation
| True | builtin | + +### /Component Definition/Component/Control Implementation/Implemented Requirement/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/component/control-implementation/implemented-requirement/link/@rel) | . |
  • reference
| True | builtin | + +### /Component Definition/Component/Control Implementation/Implemented Requirement/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/component/control-implementation/implemented-requirement/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Component Definition/Component/Control Implementation/Implemented Requirement/Responsible Role/@Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/component) | responsible-role/@role-id|control-implementation/implemented-requirement/responsible-role/@role-id|control-implementation/implemented-requirement/statement/responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | + +### /Component Definition/Component/Control Implementation/Implemented Requirement/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/component/control-implementation/implemented-requirement/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /Component Definition/Component/Control Implementation/Implemented Requirement/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/component/control-implementation/implemented-requirement/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Component Definition/Component/Control Implementation/Implemented Requirement/Statement/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/component/control-implementation/implemented-requirement/statement/link/@rel) | . |
  • reference
| True | builtin | + +### /Component Definition/Component/Control Implementation/Implemented Requirement/Statement/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/component/control-implementation/implemented-requirement/statement/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Component Definition/Component/Control Implementation/Implemented Requirement/Statement/Responsible Role/@Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/component) | responsible-role/@role-id|control-implementation/implemented-requirement/responsible-role/@role-id|control-implementation/implemented-requirement/statement/responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | + +### /Component Definition/Component/Control Implementation/Implemented Requirement/Statement/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/component/control-implementation/implemented-requirement/statement/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /Component Definition/Component/Control Implementation/Implemented Requirement/Statement/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/component/control-implementation/implemented-requirement/statement/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Component Definition/Component/Control Implementation/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/component/control-implementation/link/@rel) | . |
  • reference
| True | builtin | + +### /Component Definition/Component/Control Implementation/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/component/control-implementation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Component Definition/Component/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/component) | link/@rel |
  • depends-on
  • validation
  • proof-of-compliance
  • baseline-template
  • uses-service
  • system-security-plan
  • uses-network
| True | builtin | +| allowed-values | [Location](/component-definition/component) | (.)[@type='service']/link/@rel |
  • provided-by
  • used-by
| True | builtin | +| allowed-values | [Location](/component-definition/component/link/@rel) | . |
  • reference
| True | builtin | + +### /Component Definition/Component/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
| False | builtin | +| allowed-values | [Location](/component-definition/component) | (.)[@type='software']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • software-identifier
| False | builtin | +| allowed-values | [Location](/component-definition/component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Component Definition/Component/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | +| allowed-values | [Location](/component-definition/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='allows-authenticated-scan']/@value |
  • yes
  • no
| False | builtin | +| allowed-values | [Location](/component-definition/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='virtual']/@value |
  • yes
  • no
| False | builtin | +| allowed-values | [Location](/component-definition/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='public']/@value |
  • yes
  • no
| False | builtin | +| allowed-values | [Location](/component-definition/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='implementation-point']/@value |
  • internal
  • external
| False | builtin | + +### /Component Definition/Component/Protocol/Port Range/@Transport + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/component/protocol/port-range/@transport) | . |
  • TCP
  • UDP
| False | builtin | + +### /Component Definition/Component/Responsible Role/@Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/component) | responsible-role/@role-id|control-implementation/implemented-requirement/responsible-role/@role-id|control-implementation/implemented-requirement/statement/responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | + +### /Component Definition/Component/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/component/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /Component Definition/Component/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/component/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Component Definition/Metadata/Action/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/metadata/action/link/@rel) | . |
  • reference
| True | builtin | + +### /Component Definition/Metadata/Action/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/metadata/action/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Component Definition/Metadata/Action/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/metadata/action/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Component Definition/Metadata/Action/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/metadata/action/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Component Definition/Metadata/Document Id/@Scheme + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/metadata/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | + +### /Component Definition/Metadata/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/metadata) | link/@rel |
  • canonical
  • alternate
  • latest-version
  • predecessor-version
  • successor-version
| True | builtin | +| allowed-values | [Location](/component-definition/metadata/link/@rel) | . |
  • reference
| True | builtin | + +### /Component Definition/Metadata/Location/Address/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/metadata/location/address/@type) | . |
  • home
  • work
| True | builtin | + +### /Component Definition/Metadata/Location/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/metadata/location/link/@rel) | . |
  • reference
| True | builtin | + +### /Component Definition/Metadata/Location/Prop/@Class + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type' and @value='data-center']/@class |
  • primary
  • alternate
| False | builtin | + +### /Component Definition/Metadata/Location/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | +| allowed-values | [Location](/component-definition/metadata/location/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Component Definition/Metadata/Location/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • data-center
| False | builtin | + +### /Component Definition/Metadata/Location/Telephone Number/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/metadata/location/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | + +### /Component Definition/Metadata/Party/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/metadata/party/@type) | . |
  • person
  • organization
| False | builtin | + +### /Component Definition/Metadata/Party/Address/@Type + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | address-type | [Location](/component-definition) | metadata/party/address/@type |
  • work
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| allowed-values | | [Location](/component-definition/metadata/party/address/@type) | . |
  • home
  • work
| True | builtin | + +### /Component Definition/Metadata/Party/External Id/@Scheme + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/metadata/party/external-id/@scheme) | . |
  • http://orcid.org/
| True | builtin | + +### /Component Definition/Metadata/Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/metadata/party/link/@rel) | . |
  • reference
| True | builtin | + +### /Component Definition/Metadata/Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/metadata/party) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • mail-stop
  • office
  • job-title
| False | builtin | +| allowed-values | [Location](/component-definition/metadata/party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Component Definition/Metadata/Party/Telephone Number/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/metadata/party/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | + +### /Component Definition/Metadata/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/metadata) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • keywords
| False | builtin | +| allowed-values | [Location](/component-definition/metadata/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Component Definition/Metadata/Responsible Party/@Role Id + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | allowed-metadata-responsibe-party-role-ids | [Location](/component-definition/metadata) | responsible-party/@role-id |
  • creator
  • prepared-by
  • prepared-for
  • content-approver
  • contact
| True | builtin | + +### /Component Definition/Metadata/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/metadata/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Component Definition/Metadata/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/metadata/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Component Definition/Metadata/Revision/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/metadata/revision) | link/@rel |
  • canonical
  • alternate
  • predecessor-version
  • successor-version
  • version-history
| True | builtin | +| allowed-values | [Location](/component-definition/metadata/revision/link/@rel) | . |
  • reference
| True | builtin | + +### /Component Definition/Metadata/Revision/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/metadata/revision/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Component Definition/Metadata/Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/metadata/role/link/@rel) | . |
  • reference
| True | builtin | + +### /Component Definition/Metadata/Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/component-definition/metadata/role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Back Matter/Resource/Citation/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/back-matter/resource/citation/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Back Matter/Resource/Citation/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/back-matter/resource/citation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Back Matter/Resource/Document Id/@Scheme + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/back-matter/resource/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | + +### /Plan Of Action And Milestones/Back Matter/Resource/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
  • version
  • published
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/back-matter/resource/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Back Matter/Resource/Prop/@Value + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | attachment-type | [Location](/plan-of-action-and-milestones) | back-matter/resource/prop[@name='type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • law
  • regulation
  • standard
  • guidance
  • policy
  • procedure
  • guide
  • rules-of-behavior
  • plan
  • system-security-plan
  • artifact
  • evidence
  • screen-shot
  • image
  • tool-report
  • raw-tool-output
  • interview-notes
  • questionnaire
  • report
  • fedramp-citations
  • fedramp-acronyms
  • fedramp-logo
  • separation-of-duties-matrix
  • logo
  • personally-identifiable-information
  • agreement
  • isa-agreement
  • incident-response-plan
  • information-security-policies-and-procedures
  • users-guide
  • privacy-impact-assessment
  • information-system-contingency-plan
  • configuration-management-plan
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| allowed-values | | [Location](/plan-of-action-and-milestones/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • logo
  • image
  • screen-shot
  • law
  • regulation
  • standard
  • external-guidance
  • acronyms
  • citation
  • policy
  • procedure
  • system-guide
  • users-guide
  • administrators-guide
  • rules-of-behavior
  • plan
  • artifact
  • evidence
  • tool-output
  • raw-data
  • interview-notes
  • questionnaire
  • report
  • agreement
| False | builtin | + +### /Plan Of Action And Milestones/Back Matter/Resource/Rlink/Hash/@Algorithm + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/back-matter/resource/rlink/hash/@algorithm) | . |
  • SHA-224
  • SHA-256
  • SHA-384
  • SHA-512
  • SHA3-224
  • SHA3-256
  • SHA3-384
  • SHA3-512
| True | builtin | + +### /Plan Of Action And Milestones/Finding/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Finding/Origin/Actor/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | + +### /Plan Of Action And Milestones/Finding/Origin/Actor/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/actor/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Finding/Origin/Actor/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Finding/Origin/Related Task/Identified Subject/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Plan Of Action And Milestones/Finding/Origin/Related Task/Identified Subject/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Plan Of Action And Milestones/Finding/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Finding/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Finding/Origin/Related Task/Identified Subject/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Plan Of Action And Milestones/Finding/Origin/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Finding/Origin/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Finding/Origin/Related Task/Identified Subject/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Finding/Origin/Related Task/Identified Subject/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Finding/Origin/Related Task/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Finding/Origin/Related Task/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Finding/Origin/Related Task/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Finding/Origin/Related Task/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Finding/Origin/Related Task/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Plan Of Action And Milestones/Finding/Origin/Related Task/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Plan Of Action And Milestones/Finding/Origin/Related Task/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Finding/Origin/Related Task/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Finding/Origin/Related Task/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Plan Of Action And Milestones/Finding/Origin/Related Task/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Finding/Origin/Related Task/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Finding/Origin/Related Task/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Finding/Origin/Related Task/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Finding/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Finding/Target/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/target/@type) | . |
  • statement-id
  • objective-id
| False | builtin | + +### /Plan Of Action And Milestones/Finding/Target/Implementation Status/@State + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/target/implementation-status/@state) | . |
  • implemented
  • partial
  • planned
  • alternative
  • not-applicable
| True | builtin | + +### /Plan Of Action And Milestones/Finding/Target/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/target/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Finding/Target/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/target/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Finding/Target/Status/@Reason + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/target/status/@reason) | . |
  • pass
  • fail
  • other
| True | builtin | + +### /Plan Of Action And Milestones/Finding/Target/Status/@State + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/finding/target/status/@state) | . |
  • satisfied
  • not-satisfied
| False | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Assessment Platform/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/assessment-platform/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Assessment Platform/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/assessment-platform/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Assessment Platform/Uses Component/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/assessment-platform/uses-component/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Assessment Platform/Uses Component/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/assessment-platform/uses-component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Assessment Platform/Uses Component/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/assessment-platform/uses-component/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Assessment Platform/Uses Component/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/assessment-platform/uses-component/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Component/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component/@type) | . |
  • this-system
  • system
  • interconnection
  • software
  • hardware
  • service
  • policy
  • physical
  • process-procedure
  • plan
  • guidance
  • standard
  • validation
  • network
| True | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Component/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | link/@rel |
  • depends-on
  • validation
  • proof-of-compliance
  • baseline-template
  • uses-service
  • system-security-plan
  • uses-network
  • imported-from
| True | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | (.)[@type='validation']/link/@rel |
  • validation-details
| True | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | (.)[@type='service']/link/@rel |
  • provided-by
  • used-by
| True | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | (.)[@type='interconnection']/link/@rel |
  • isa-agreement
| True | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Component/Prop/@Class + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('ipv4-address','ipv6-address')]/@class |
  • local
  • remote
| False | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Component/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • implementation-point
  • leveraged-authorization-uuid
  • inherited-uuid
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | (.)[@type='software']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • software-identifier
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | (.)[@type='interconnection']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • isa-title
  • isa-date
  • isa-remote-system-name
  • ipv4-address
  • ipv6-address
  • direction
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Component/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='allows-authenticated-scan']/@value |
  • yes
  • no
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='public']/@value |
  • yes
  • no
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='virtual']/@value |
  • yes
  • no
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='implementation-point']/@value |
  • internal
  • external
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='direction']/@value |
  • incoming
  • outgoing
| False | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Component/Protocol/Port Range/@Transport + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component/protocol/port-range/@transport) | . |
  • TCP
  • UDP
| False | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Component/Responsible Role/@Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | (.)[@type='interconnection']/responsible-role/@role-id |
  • isa-poc-local
  • isa-poc-remote
  • isa-authorizing-official-local
  • isa-authorizing-official-remote
| True | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Component/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Component/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Component/Status/@State + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component/status/@state) | . |
  • under-development
  • operational
  • disposition
  • other
| False | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Component/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component/@type) | . |
  • this-system
  • system
  • interconnection
  • software
  • hardware
  • service
  • policy
  • physical
  • process-procedure
  • plan
  • guidance
  • standard
  • validation
  • network
| True | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Component/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | link/@rel |
  • depends-on
  • validation
  • proof-of-compliance
  • baseline-template
  • uses-service
  • system-security-plan
  • uses-network
  • imported-from
| True | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | (.)[@type='validation']/link/@rel |
  • validation-details
| True | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | (.)[@type='service']/link/@rel |
  • provided-by
  • used-by
| True | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | (.)[@type='interconnection']/link/@rel |
  • isa-agreement
| True | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Component/Prop/@Class + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('ipv4-address','ipv6-address')]/@class |
  • local
  • remote
| False | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Component/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • implementation-point
  • leveraged-authorization-uuid
  • inherited-uuid
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | (.)[@type='software']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • software-identifier
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | (.)[@type='interconnection']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • isa-title
  • isa-date
  • isa-remote-system-name
  • ipv4-address
  • ipv6-address
  • direction
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Component/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='allows-authenticated-scan']/@value |
  • yes
  • no
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='public']/@value |
  • yes
  • no
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='virtual']/@value |
  • yes
  • no
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='implementation-point']/@value |
  • internal
  • external
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='direction']/@value |
  • incoming
  • outgoing
| False | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Component/Protocol/Port Range/@Transport + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component/protocol/port-range/@transport) | . |
  • TCP
  • UDP
| False | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Component/Responsible Role/@Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | (.)[@type='interconnection']/responsible-role/@role-id |
  • isa-poc-local
  • isa-poc-remote
  • isa-authorizing-official-local
  • isa-authorizing-official-remote
| True | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Component/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Component/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Component/Status/@State + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component/status/@state) | . |
  • under-development
  • operational
  • disposition
  • other
| False | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Implemented Component/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item/implemented-component/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Implemented Component/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item/implemented-component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item/implemented-component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Implemented Component/Responsible Party/@Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item/implemented-component) | responsible-party/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
| True | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Implemented Component/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item/implemented-component/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Implemented Component/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item/implemented-component/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item) | link/@rel |
  • baseline-template
| True | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • ipv4-address
  • ipv6-address
  • fqdn
  • uri
  • serial-number
  • netbios-name
  • mac-address
  • physical-location
  • is-scanned
  • hardware-model
  • os-name
  • os-version
  • software-name
  • software-version
  • software-patch-level
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='is-scanned']/@value |
  • yes
  • no
| False | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Responsible Party/@Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item) | responsible-party/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Metadata/Action/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/metadata/action/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Metadata/Action/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/metadata/action/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Metadata/Action/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/metadata/action/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Metadata/Action/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/metadata/action/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Metadata/Document Id/@Scheme + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/metadata/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | + +### /Plan Of Action And Milestones/Metadata/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/metadata) | link/@rel |
  • canonical
  • alternate
  • latest-version
  • predecessor-version
  • successor-version
| True | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/metadata/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Metadata/Location/Address/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/metadata/location/address/@type) | . |
  • home
  • work
| True | builtin | + +### /Plan Of Action And Milestones/Metadata/Location/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/metadata/location/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Metadata/Location/Prop/@Class + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type' and @value='data-center']/@class |
  • primary
  • alternate
| False | builtin | + +### /Plan Of Action And Milestones/Metadata/Location/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/metadata/location/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Metadata/Location/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • data-center
| False | builtin | + +### /Plan Of Action And Milestones/Metadata/Location/Telephone Number/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/metadata/location/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | + +### /Plan Of Action And Milestones/Metadata/Party/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/metadata/party/@type) | . |
  • person
  • organization
| False | builtin | + +### /Plan Of Action And Milestones/Metadata/Party/Address/@Type + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | address-type | [Location](/plan-of-action-and-milestones) | metadata/party/address/@type |
  • work
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| allowed-values | | [Location](/plan-of-action-and-milestones/metadata/party/address/@type) | . |
  • home
  • work
| True | builtin | + +### /Plan Of Action And Milestones/Metadata/Party/External Id/@Scheme + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/metadata/party/external-id/@scheme) | . |
  • http://orcid.org/
| True | builtin | + +### /Plan Of Action And Milestones/Metadata/Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/metadata/party/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Metadata/Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/metadata/party) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • mail-stop
  • office
  • job-title
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/metadata/party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Metadata/Party/Telephone Number/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/metadata/party/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | + +### /Plan Of Action And Milestones/Metadata/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/metadata) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • keywords
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/metadata/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Metadata/Responsible Party/@Role Id + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | allowed-metadata-responsibe-party-role-ids | [Location](/plan-of-action-and-milestones/metadata) | responsible-party/@role-id |
  • creator
  • prepared-by
  • prepared-for
  • content-approver
  • contact
| True | builtin | + +### /Plan Of Action And Milestones/Metadata/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/metadata/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Metadata/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/metadata/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Metadata/Revision/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/metadata/revision) | link/@rel |
  • canonical
  • alternate
  • predecessor-version
  • successor-version
  • version-history
| True | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/metadata/revision/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Metadata/Revision/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/metadata/revision/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Metadata/Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/metadata/role/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Metadata/Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/metadata/role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Observation/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Observation/Method + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/method) | . |
  • EXAMINE
  • INTERVIEW
  • TEST
  • UNKNOWN
| True | builtin | + +### /Plan Of Action And Milestones/Observation/Origin/Actor/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | + +### /Plan Of Action And Milestones/Observation/Origin/Actor/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/actor/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Observation/Origin/Actor/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Observation/Origin/Related Task/Identified Subject/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Plan Of Action And Milestones/Observation/Origin/Related Task/Identified Subject/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Plan Of Action And Milestones/Observation/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Observation/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Observation/Origin/Related Task/Identified Subject/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Plan Of Action And Milestones/Observation/Origin/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Observation/Origin/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Observation/Origin/Related Task/Identified Subject/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Observation/Origin/Related Task/Identified Subject/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Observation/Origin/Related Task/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Observation/Origin/Related Task/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Observation/Origin/Related Task/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Observation/Origin/Related Task/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Observation/Origin/Related Task/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Plan Of Action And Milestones/Observation/Origin/Related Task/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Plan Of Action And Milestones/Observation/Origin/Related Task/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Observation/Origin/Related Task/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Observation/Origin/Related Task/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Plan Of Action And Milestones/Observation/Origin/Related Task/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Observation/Origin/Related Task/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Observation/Origin/Related Task/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Observation/Origin/Related Task/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Observation/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Observation/Relevant Evidence/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/relevant-evidence/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Observation/Relevant Evidence/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/relevant-evidence/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Observation/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Plan Of Action And Milestones/Observation/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Observation/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Observation/Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/observation/type) | . |
  • ssp-statement-issue
  • control-objective
  • mitigation
  • finding
  • historic
| True | builtin | + +### /Plan Of Action And Milestones/Poam Item/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/poam-item/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Poam Item/Origin/Actor/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/poam-item/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | + +### /Plan Of Action And Milestones/Poam Item/Origin/Actor/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/poam-item/origin/actor/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Poam Item/Origin/Actor/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/poam-item/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Poam Item/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/poam-item/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Facet/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://csrc.nist.gov/ns/oscal']/@name |
  • likelihood
  • impact
  • risk
  • severity
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://fedramp.gov','http://fedramp.gov/ns/oscal')]/@name |
  • likelihood
  • impact
  • risk
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://cve.mitre.org']/@name |
  • cve-id
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0']/@name |
  • access-vector
  • access-complexity
  • authentication
  • confidentiality-impact
  • integrity-impact
  • availability-impact
  • exploitability
  • remediation-level
  • report-confidence
  • collateral-damage-potential
  • target-distribution
  • confidentiality-requirement
  • integrity-requirement
  • availability-requirement
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1')]/@name |
  • attack-vector
  • access-complexity
  • privileges-required
  • user-interaction
  • scope
  • confidentiality-impact
  • integrity-impact
  • availability-impact
  • exploit-code-maturity
  • remediation-level
  • report-confidence
  • modified-attack-vector
  • modified-attack-complexity
  • modified-privileges-required
  • modified-user-interaction
  • modified-scope
  • modified-confidentiality
  • modified-integrity
  • modified-availability
  • confidentiality-requirement
  • integrity-requirement
  • availability-requirement
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Facet/@System + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet/@system) | . |
  • http://fedramp.gov
  • http://fedramp.gov/ns/oscal
  • http://csrc.nist.gov/ns/oscal
  • http://csrc.nist.gov/ns/oscal/unknown
  • http://cve.mitre.org
  • http://www.first.org/cvss/v2.0
  • http://www.first.org/cvss/v3.0
  • http://www.first.org/cvss/v3.1
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Facet/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='access-vector']/@value |
  • local
  • adjacent-network
  • network
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='access-complexity']/@value |
  • high
  • medium
  • low
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='authentication']/@value |
  • multiple
  • single
  • none
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name=('confidentiality-impact', 'integrity-impact', 'availability-impact')]/@value |
  • none
  • partial
  • complete
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='exploitability']/@value |
  • unproven
  • proof-of-concept
  • functional
  • high
  • not-defined
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='remediation-level']/@value |
  • official-fix
  • temporary-fix
  • workaround
  • unavailable
  • not-defined
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='report-confidence']/@value |
  • unconfirmed
  • uncorroborated
  • confirmed
  • not-defined
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='collateral-damage-potential']/@value |
  • none
  • low
  • low-medium
  • medium-high
  • high
  • not-defined
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name=('target-distribution', 'confidentiality-requirement', 'integrity-requirement', 'availability-requirement')]/@value |
  • none
  • low
  • medium
  • high
  • not-defined
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='access-vector']/@value |
  • network
  • adjacent
  • local
  • physical
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='access-complexity']/@value |
  • high
  • low
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name=('privileges-required', 'confidentiality-impact', 'integrity-impact', 'availability-impact')]/@value |
  • none
  • low
  • high
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='user-interaction']/@value |
  • none
  • required
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='scope']/@value |
  • unchanged
  • changed
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='exploit-code-maturity']/@value |
  • not-defined
  • unproven
  • proof-of-concept
  • functional
  • high
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='remediation-level']/@value |
  • not-defined
  • official-fix
  • temporary-fix
  • workaround
  • unavailable
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='report-confidence']/@value |
  • not-defined
  • unknown
  • reasonable
  • confirmed
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name=('confidentiality-requirement', 'integrity-requirement', 'availability-requirement')]/@value |
  • not-defined
  • low
  • medium
  • high
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='modified-attack-vector']/@value |
  • not-defined
  • network
  • adjacent
  • local
  • physical
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='modified-attack-complexity']/@value |
  • not-defined
  • high
  • low
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name=('modified-privileges-required', 'modified-confidentiality', 'modified-integrity', 'modified-availability')]/@value |
  • not-defined
  • none
  • low
  • high
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='modified-user-interaction']/@value |
  • not-defined
  • none
  • required
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='modified-scope']/@value |
  • not-defined
  • unchanged
  • changed
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Facet/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Facet/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • state
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Facet/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='state']/@value |
  • initial
  • adjusted
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Origin/Actor/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Origin/Actor/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/actor/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Origin/Actor/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Characterization/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Mitigating Factor/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/mitigating-factor/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Mitigating Factor/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/mitigating-factor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Mitigating Factor/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/mitigating-factor/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Mitigating Factor/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/mitigating-factor/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Mitigating Factor/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/mitigating-factor/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Origin/Actor/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Origin/Actor/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/actor/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Origin/Actor/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Origin/Related Task/Identified Subject/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Origin/Related Task/Identified Subject/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Origin/Related Task/Identified Subject/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Origin/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Origin/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Origin/Related Task/Identified Subject/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Origin/Related Task/Identified Subject/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Origin/Related Task/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Origin/Related Task/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Origin/Related Task/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Origin/Related Task/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Origin/Related Task/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Origin/Related Task/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Origin/Related Task/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Origin/Related Task/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Origin/Related Task/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Origin/Related Task/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Origin/Related Task/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Origin/Related Task/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Origin/Related Task/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • false-positive
  • accepted
  • risk-adjusted
  • priority
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Response/@Lifecycle + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/@lifecycle) | . |
  • recommendation
  • planned
  • completed
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Origin/Actor/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Origin/Actor/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/actor/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Origin/Actor/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Identified Subject/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Identified Subject/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Identified Subject/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Identified Subject/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Identified Subject/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • avoid
  • mitigate
  • transfer
  • accept
  • share
  • contingency
  • none
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Required Asset/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/required-asset/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Required Asset/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/required-asset/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Required Asset/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/required-asset/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Required Asset/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/required-asset/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Required Asset/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/required-asset/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Task/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/@type) | . |
  • milestone
  • action
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Task/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Task/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Task/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Task/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Task/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Task/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Task/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Task/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Task/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Task/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Task/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Task/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Task/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Response/Task/Timing/At Frequency/@Unit + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/timing/at-frequency/@unit) | . |
  • seconds
  • minutes
  • hours
  • days
  • months
  • years
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • vendor-check-in
  • status-update
  • milestone-complete
  • mitigation
  • remediated
  • closed
  • dr-submission
  • dr-updated
  • dr-approved
  • dr-rejected
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Exclude Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Exclude Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Exclude Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Include Subject/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Include Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Include Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Status Change + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/status-change) | . |
  • open
  • investigating
  • remediating
  • deviation-requested
  • deviation-approved
  • closed
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Status + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/status) | . |
  • open
  • investigating
  • remediating
  • deviation-requested
  • deviation-approved
  • closed
| True | builtin | + +### /Plan Of Action And Milestones/Risk/Threat Id/@System + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/risk/threat-id/@system) | . |
  • http://fedramp.gov
  • http://fedramp.gov/ns/oscal
| True | builtin | + +### /Plan Of Action And Milestones/System Id/@Identifier Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/plan-of-action-and-milestones/system-id/@identifier-type) | . |
  • https://fedramp.gov
  • http://fedramp.gov/ns/oscal
  • https://ietf.org/rfc/rfc4122
  • http://ietf.org/rfc/rfc4122
| True | builtin | + +### /Profile/Back Matter/Resource/Citation/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/back-matter/resource/citation/link/@rel) | . |
  • reference
| True | builtin | + +### /Profile/Back Matter/Resource/Citation/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/back-matter/resource/citation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Profile/Back Matter/Resource/Document Id/@Scheme + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/back-matter/resource/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | + +### /Profile/Back Matter/Resource/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
  • version
  • published
| False | builtin | +| allowed-values | [Location](/profile/back-matter/resource/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Profile/Back Matter/Resource/Prop/@Value + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | attachment-type | [Location](/profile) | back-matter/resource/prop[@name='type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • law
  • regulation
  • standard
  • guidance
  • policy
  • procedure
  • guide
  • rules-of-behavior
  • plan
  • system-security-plan
  • artifact
  • evidence
  • screen-shot
  • image
  • tool-report
  • raw-tool-output
  • interview-notes
  • questionnaire
  • report
  • fedramp-citations
  • fedramp-acronyms
  • fedramp-logo
  • separation-of-duties-matrix
  • logo
  • personally-identifiable-information
  • agreement
  • isa-agreement
  • incident-response-plan
  • information-security-policies-and-procedures
  • users-guide
  • privacy-impact-assessment
  • information-system-contingency-plan
  • configuration-management-plan
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| allowed-values | | [Location](/profile/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • logo
  • image
  • screen-shot
  • law
  • regulation
  • standard
  • external-guidance
  • acronyms
  • citation
  • policy
  • procedure
  • system-guide
  • users-guide
  • administrators-guide
  • rules-of-behavior
  • plan
  • artifact
  • evidence
  • tool-output
  • raw-data
  • interview-notes
  • questionnaire
  • report
  • agreement
| False | builtin | + +### /Profile/Back Matter/Resource/Rlink/Hash/@Algorithm + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/back-matter/resource/rlink/hash/@algorithm) | . |
  • SHA-224
  • SHA-256
  • SHA-384
  • SHA-512
  • SHA3-224
  • SHA3-256
  • SHA3-384
  • SHA3-512
| True | builtin | + +### /Profile/Import/Exclude Controls/@With Child Controls + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/import/exclude-controls/@with-child-controls) | . |
  • yes
  • no
| False | builtin | + +### /Profile/Import/Include Controls/@With Child Controls + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/import/include-controls/@with-child-controls) | . |
  • yes
  • no
| False | builtin | + +### /Profile/Merge/Combine/@Method + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/merge/combine/@method) | . |
  • use-first
  • merge
  • keep
| False | builtin | + +### /Profile/Merge/Custom/Group/Insert Controls/@Order + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/merge/custom/group/insert-controls/@order) | . |
  • keep
  • ascending
  • descending
| False | builtin | + +### /Profile/Merge/Custom/Group/Insert Controls/Exclude Controls/@With Child Controls + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/merge/custom/group/insert-controls/exclude-controls/@with-child-controls) | . |
  • yes
  • no
| False | builtin | + +### /Profile/Merge/Custom/Group/Insert Controls/Include Controls/@With Child Controls + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/merge/custom/group/insert-controls/include-controls/@with-child-controls) | . |
  • yes
  • no
| False | builtin | + +### /Profile/Merge/Custom/Group/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/merge/custom/group/link/@rel) | . |
  • reference
| True | builtin | + +### /Profile/Merge/Custom/Group/Param/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/merge/custom/group/param/link/@rel) | . |
  • reference
| True | builtin | + +### /Profile/Merge/Custom/Group/Param/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/merge/custom/group/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
  • alt-label
| False | builtin | +| allowed-values | [Location](/profile/merge/custom/group/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/rmf')]/@name |
  • aggregates
| False | builtin | +| allowed-values | [Location](/profile/merge/custom/group/param/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Profile/Merge/Custom/Group/Param/Select/@How Many + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/merge/custom/group/param/select/@how-many) | . |
  • one
  • one-or-more
| False | builtin | + +### /Profile/Merge/Custom/Group/Part/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/merge/custom/group/part/link/@rel) | . |
  • reference
| True | builtin | + +### /Profile/Merge/Custom/Group/Part/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/merge/custom/group/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | +| allowed-values | [Location](/profile/merge/custom/group/part/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| allowed-values | [Location](/profile/merge/custom/group/part/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | + +### /Profile/Merge/Custom/Group/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/merge/custom/group/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Profile/Merge/Custom/Insert Controls/@Order + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/merge/custom/insert-controls/@order) | . |
  • keep
  • ascending
  • descending
| False | builtin | + +### /Profile/Merge/Custom/Insert Controls/Exclude Controls/@With Child Controls + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/merge/custom/insert-controls/exclude-controls/@with-child-controls) | . |
  • yes
  • no
| False | builtin | + +### /Profile/Merge/Custom/Insert Controls/Include Controls/@With Child Controls + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/merge/custom/insert-controls/include-controls/@with-child-controls) | . |
  • yes
  • no
| False | builtin | + +### /Profile/Metadata/Action/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/metadata/action/link/@rel) | . |
  • reference
| True | builtin | + +### /Profile/Metadata/Action/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/metadata/action/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Profile/Metadata/Action/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/metadata/action/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Profile/Metadata/Action/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/metadata/action/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Profile/Metadata/Document Id/@Scheme + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/metadata/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | + +### /Profile/Metadata/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/metadata) | link/@rel |
  • canonical
  • alternate
  • latest-version
  • predecessor-version
  • successor-version
| True | builtin | +| allowed-values | [Location](/profile/metadata/link/@rel) | . |
  • reference
| True | builtin | + +### /Profile/Metadata/Location/Address/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/metadata/location/address/@type) | . |
  • home
  • work
| True | builtin | + +### /Profile/Metadata/Location/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/metadata/location/link/@rel) | . |
  • reference
| True | builtin | + +### /Profile/Metadata/Location/Prop/@Class + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type' and @value='data-center']/@class |
  • primary
  • alternate
| False | builtin | + +### /Profile/Metadata/Location/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | +| allowed-values | [Location](/profile/metadata/location/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Profile/Metadata/Location/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • data-center
| False | builtin | + +### /Profile/Metadata/Location/Telephone Number/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/metadata/location/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | + +### /Profile/Metadata/Party/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/metadata/party/@type) | . |
  • person
  • organization
| False | builtin | + +### /Profile/Metadata/Party/Address/@Type + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | address-type | [Location](/profile) | metadata/party/address/@type |
  • work
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| allowed-values | | [Location](/profile/metadata/party/address/@type) | . |
  • home
  • work
| True | builtin | + +### /Profile/Metadata/Party/External Id/@Scheme + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/metadata/party/external-id/@scheme) | . |
  • http://orcid.org/
| True | builtin | + +### /Profile/Metadata/Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/metadata/party/link/@rel) | . |
  • reference
| True | builtin | + +### /Profile/Metadata/Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/metadata/party) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • mail-stop
  • office
  • job-title
| False | builtin | +| allowed-values | [Location](/profile/metadata/party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Profile/Metadata/Party/Telephone Number/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/metadata/party/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | + +### /Profile/Metadata/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/metadata) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • keywords
| False | builtin | +| allowed-values | [Location](/profile/metadata/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Profile/Metadata/Responsible Party/@Role Id + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | allowed-metadata-responsibe-party-role-ids | [Location](/profile/metadata) | responsible-party/@role-id |
  • creator
  • prepared-by
  • prepared-for
  • content-approver
  • contact
| True | builtin | + +### /Profile/Metadata/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/metadata/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /Profile/Metadata/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/metadata/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Profile/Metadata/Revision/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/metadata/revision) | link/@rel |
  • canonical
  • alternate
  • predecessor-version
  • successor-version
  • version-history
| True | builtin | +| allowed-values | [Location](/profile/metadata/revision/link/@rel) | . |
  • reference
| True | builtin | + +### /Profile/Metadata/Revision/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/metadata/revision/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Profile/Metadata/Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/metadata/role/link/@rel) | . |
  • reference
| True | builtin | + +### /Profile/Metadata/Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/metadata/role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Profile/Modify/Alter/Add/@Position + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/modify/alter/add/@position) | . |
  • before
  • after
  • starting
  • ending
| False | builtin | + +### /Profile/Modify/Alter/Add/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/modify/alter/add/link/@rel) | . |
  • reference
| True | builtin | + +### /Profile/Modify/Alter/Add/Param/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/modify/alter/add/param/link/@rel) | . |
  • reference
| True | builtin | + +### /Profile/Modify/Alter/Add/Param/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/modify/alter/add/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
  • alt-label
| False | builtin | +| allowed-values | [Location](/profile/modify/alter/add/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/rmf')]/@name |
  • aggregates
| False | builtin | +| allowed-values | [Location](/profile/modify/alter/add/param/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Profile/Modify/Alter/Add/Param/Select/@How Many + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/modify/alter/add/param/select/@how-many) | . |
  • one
  • one-or-more
| False | builtin | + +### /Profile/Modify/Alter/Add/Part/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/modify/alter/add/part/link/@rel) | . |
  • reference
| True | builtin | + +### /Profile/Modify/Alter/Add/Part/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/modify/alter/add/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | +| allowed-values | [Location](/profile/modify/alter/add/part/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| allowed-values | [Location](/profile/modify/alter/add/part/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | + +### /Profile/Modify/Alter/Add/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/modify/alter/add) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | +| allowed-values | [Location](/profile/modify/alter/add/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Profile/Modify/Alter/Remove/@By Item Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/modify/alter/remove/@by-item-name) | . |
  • param
  • prop
  • link
  • part
  • mapping
  • map
| False | builtin | + +### /Profile/Modify/Set Parameter/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/modify/set-parameter/link/@rel) | . |
  • reference
| True | builtin | + +### /Profile/Modify/Set Parameter/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/modify/set-parameter/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /Profile/Modify/Set Parameter/Select/@How Many + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/profile/modify/set-parameter/select/@how-many) | . |
  • one
  • one-or-more
| False | builtin | + +### /System Security Plan/Back Matter/Resource/Citation/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/back-matter/resource/citation/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Back Matter/Resource/Citation/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/back-matter/resource/citation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Back Matter/Resource/Document Id/@Scheme + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/back-matter/resource/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | + +### /System Security Plan/Back Matter/Resource/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
  • version
  • published
| False | builtin | +| allowed-values | [Location](/system-security-plan/back-matter/resource/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Back Matter/Resource/Prop/@Value + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | attachment-type | [Location](/system-security-plan) | back-matter/resource/prop[@name='type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • law
  • regulation
  • standard
  • guidance
  • policy
  • procedure
  • guide
  • rules-of-behavior
  • plan
  • system-security-plan
  • artifact
  • evidence
  • screen-shot
  • image
  • tool-report
  • raw-tool-output
  • interview-notes
  • questionnaire
  • report
  • fedramp-citations
  • fedramp-acronyms
  • fedramp-logo
  • separation-of-duties-matrix
  • logo
  • personally-identifiable-information
  • agreement
  • isa-agreement
  • incident-response-plan
  • information-security-policies-and-procedures
  • users-guide
  • privacy-impact-assessment
  • information-system-contingency-plan
  • configuration-management-plan
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| allowed-values | | [Location](/system-security-plan/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • logo
  • image
  • screen-shot
  • law
  • regulation
  • standard
  • external-guidance
  • acronyms
  • citation
  • policy
  • procedure
  • system-guide
  • users-guide
  • administrators-guide
  • rules-of-behavior
  • plan
  • artifact
  • evidence
  • tool-output
  • raw-data
  • interview-notes
  • questionnaire
  • report
  • agreement
| False | builtin | + +### /System Security Plan/Back Matter/Resource/Rlink/Hash/@Algorithm + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/back-matter/resource/rlink/hash/@algorithm) | . |
  • SHA-224
  • SHA-256
  • SHA-384
  • SHA-512
  • SHA3-224
  • SHA3-256
  • SHA3-384
  • SHA3-512
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/export/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/export/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Provided/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/export/provided/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Provided/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/export/provided/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Provided/Responsible Role/@Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component) | [Target](.//responsible-role/@role-id) |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Provided/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/export/provided/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Provided/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/export/provided/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Responsibility/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/export/responsibility/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Responsibility/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/export/responsibility/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Responsibility/Responsible Role/@Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component) | [Target](.//responsible-role/@role-id) |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Responsibility/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/export/responsibility/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Responsibility/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/export/responsibility/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Implementation Status/@State + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/implementation-status/@state) | . |
  • implemented
  • partial
  • planned
  • alternative
  • not-applicable
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Inherited/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/inherited/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Inherited/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/inherited/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Inherited/Responsible Role/@Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component) | [Target](.//responsible-role/@role-id) |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Inherited/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/inherited/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Inherited/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/inherited/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component) | link/@rel |
  • imported-from
| True | builtin | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component) | link/@rel |
  • provided-by
| True | builtin | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement) | (.|statement|.//by-component)/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • control-origination
| False | builtin | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Prop/@Value + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | control-implementation-status | [Location](/system-security-plan) | control-implementation/implemented-requirement/by-component/prop[@name='implementation-status']/@value |
  • implemented
  • partial
  • planned
  • alternative
  • not-applicable
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| allowed-values | | [Location](/system-security-plan/control-implementation/implemented-requirement) | (.|statement|.//by-component)/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='control-origination']/@value |
  • organization
  • system-specific
  • customer-configured
  • customer-provided
  • inherited
| False | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Responsible Role/@Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component) | [Target](.//responsible-role/@role-id) |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Satisfied/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/satisfied/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Satisfied/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/satisfied/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Satisfied/Responsible Role/@Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component) | [Target](.//responsible-role/@role-id) |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Satisfied/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/satisfied/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Satisfied/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/satisfied/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement) | (.|statement|.//by-component)/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • control-origination
| False | builtin | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement) | (.|statement|.//by-component)/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='control-origination']/@value |
  • organization
  • system-specific
  • customer-configured
  • customer-provided
  • inherited
| False | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Responsible Role/@Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement) | responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/export/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/export/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Provided/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/export/provided/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Provided/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/export/provided/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Provided/Responsible Role/@Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component) | [Target](.//responsible-role/@role-id) |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Provided/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/export/provided/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Provided/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/export/provided/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Responsibility/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/export/responsibility/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Responsibility/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/export/responsibility/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Responsibility/Responsible Role/@Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component) | [Target](.//responsible-role/@role-id) |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Responsibility/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/export/responsibility/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Responsibility/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/export/responsibility/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Implementation Status/@State + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/implementation-status/@state) | . |
  • implemented
  • partial
  • planned
  • alternative
  • not-applicable
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Inherited/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/inherited/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Inherited/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/inherited/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Inherited/Responsible Role/@Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component) | [Target](.//responsible-role/@role-id) |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Inherited/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/inherited/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Inherited/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/inherited/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component) | link/@rel |
  • imported-from
| True | builtin | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component) | link/@rel |
  • provided-by
| True | builtin | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement) | (.|statement|.//by-component)/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • control-origination
| False | builtin | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement) | (.|statement|.//by-component)/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='control-origination']/@value |
  • organization
  • system-specific
  • customer-configured
  • customer-provided
  • inherited
| False | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Responsible Role/@Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component) | [Target](.//responsible-role/@role-id) |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Satisfied/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/satisfied/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Satisfied/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/satisfied/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Satisfied/Responsible Role/@Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component) | [Target](.//responsible-role/@role-id) |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Satisfied/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/satisfied/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Satisfied/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/satisfied/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement) | (.|statement|.//by-component)/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • control-origination
| False | builtin | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement) | (.|statement|.//by-component)/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='control-origination']/@value |
  • organization
  • system-specific
  • customer-configured
  • customer-provided
  • inherited
| False | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/Responsible Role/@Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement) | responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Control Implementation/Implemented Requirement/Statement/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Metadata/Action/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/metadata/action/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Metadata/Action/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/metadata/action/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Metadata/Action/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/metadata/action/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Metadata/Action/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/metadata/action/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Metadata/Document Id/@Scheme + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/metadata/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | + +### /System Security Plan/Metadata/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/metadata) | link/@rel |
  • canonical
  • alternate
  • latest-version
  • predecessor-version
  • successor-version
| True | builtin | +| allowed-values | [Location](/system-security-plan/metadata/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Metadata/Location/Address/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/metadata/location/address/@type) | . |
  • home
  • work
| True | builtin | + +### /System Security Plan/Metadata/Location/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/metadata/location/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Metadata/Location/Prop/@Class + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type' and @value='data-center']/@class |
  • primary
  • alternate
| False | builtin | + +### /System Security Plan/Metadata/Location/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | +| allowed-values | [Location](/system-security-plan/metadata/location/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Metadata/Location/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • data-center
| False | builtin | + +### /System Security Plan/Metadata/Location/Telephone Number/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/metadata/location/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | + +### /System Security Plan/Metadata/Party/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/metadata/party/@type) | . |
  • person
  • organization
| False | builtin | + +### /System Security Plan/Metadata/Party/Address/@Type + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | address-type | [Location](/system-security-plan) | metadata/party/address/@type |
  • work
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| allowed-values | | [Location](/system-security-plan/metadata/party/address/@type) | . |
  • home
  • work
| True | builtin | + +### /System Security Plan/Metadata/Party/External Id/@Scheme + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/metadata/party/external-id/@scheme) | . |
  • http://orcid.org/
| True | builtin | + +### /System Security Plan/Metadata/Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/metadata/party/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Metadata/Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/metadata/party) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • mail-stop
  • office
  • job-title
| False | builtin | +| allowed-values | [Location](/system-security-plan/metadata/party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Metadata/Party/Telephone Number/@Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/metadata/party/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | + +### /System Security Plan/Metadata/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/metadata) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • keywords
| False | builtin | +| allowed-values | [Location](/system-security-plan/metadata/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Metadata/Responsible Party/@Role Id + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | allowed-metadata-responsibe-party-role-ids | [Location](/system-security-plan/metadata) | responsible-party/@role-id |
  • creator
  • prepared-by
  • prepared-for
  • content-approver
  • contact
| True | builtin | + +### /System Security Plan/Metadata/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/metadata/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Metadata/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/metadata/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Metadata/Revision/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/metadata/revision) | link/@rel |
  • canonical
  • alternate
  • predecessor-version
  • successor-version
  • version-history
| True | builtin | +| allowed-values | [Location](/system-security-plan/metadata/revision/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Metadata/Revision/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/metadata/revision/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/Metadata/Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/metadata/role/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/Metadata/Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/metadata/role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/System Characteristics/Authorization Boundary/Diagram/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/authorization-boundary/diagram) | link/@rel |
  • diagram
| True | builtin | +| allowed-values | [Location](/system-security-plan/system-characteristics/authorization-boundary/diagram/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/System Characteristics/Authorization Boundary/Diagram/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/authorization-boundary/diagram/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/System Characteristics/Authorization Boundary/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/authorization-boundary/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/System Characteristics/Authorization Boundary/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/authorization-boundary/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/System Characteristics/Data Flow/Diagram/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/data-flow/diagram) | link/@rel |
  • diagram
| True | builtin | +| allowed-values | [Location](/system-security-plan/system-characteristics/data-flow/diagram/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/System Characteristics/Data Flow/Diagram/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/data-flow/diagram/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/System Characteristics/Data Flow/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/data-flow/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/System Characteristics/Data Flow/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/data-flow/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/System Characteristics/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/System Characteristics/Network Architecture/Diagram/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/network-architecture/diagram) | link/@rel |
  • diagram
| True | builtin | +| allowed-values | [Location](/system-security-plan/system-characteristics/network-architecture/diagram/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/System Characteristics/Network Architecture/Diagram/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/network-architecture/diagram/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/System Characteristics/Network Architecture/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/network-architecture/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/System Characteristics/Network Architecture/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/network-architecture/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/System Characteristics/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • identity-assurance-level
  • authenticator-assurance-level
  • federation-assurance-level
| False | builtin | +| allowed-values | [Location](/system-security-plan/system-characteristics) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • cloud-deployment-model
  • cloud-service-model
| False | builtin | +| allowed-values | [Location](/system-security-plan/system-characteristics/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/System Characteristics/Prop/@Value + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | authorization-type | [Location](/system-security-plan) | system-characteristics/prop[@name='authorization-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • fedramp-jab
  • fedramp-agency
  • fedramp-li-saas
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| allowed-values | deployment-model | [Location](/system-security-plan) | system-characteristics/prop[@name='cloud-deployment-model'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • public-cloud
  • private-cloud
  • government-only-cloud
  • hybrid-cloud
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| allowed-values | authorization-type | [Location](/system-security-plan) | system-characteristics/prop[@name='authorization-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • fedramp-jab
  • fedramp-agency
  • fedramp-li-saas
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| allowed-values | cloud-service-model | [Location](/system-security-plan) | system-characteristics/prop[@name='cloud-service-model'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • iaas
  • paas
  • saas
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| allowed-values | | [Location](/system-security-plan/system-characteristics) | prop[@name=('identity-assurance-level','authenticator-assurance-level','federation-assurance-level')]/@value |
  • 1
  • 2
  • 3
| False | builtin | +| allowed-values | | [Location](/system-security-plan/system-characteristics) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='cloud-deployment-model']/@value |
  • public-cloud
  • private-cloud
  • community-cloud
  • hybrid-cloud
  • government-only-cloud
  • other
| False | builtin | +| allowed-values | | [Location](/system-security-plan/system-characteristics) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='cloud-service-model']/@value |
  • saas
  • paas
  • iaas
  • other
| False | builtin | + +### /System Security Plan/System Characteristics/Responsible Party/@Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics) | responsible-party/@role-id |
  • authorizing-official
  • authorizing-official-poc
  • system-owner
  • system-poc-management
  • system-poc-technical
  • system-poc-other
  • information-system-security-officer
  • privacy-poc
| True | builtin | + +### /System Security Plan/System Characteristics/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/System Characteristics/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/System Characteristics/Status/@State + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/status/@state) | . |
  • operational
  • under-development
  • under-major-modification
  • disposition
  • other
| False | builtin | + +### /System Security Plan/System Characteristics/System Id/@Identifier Type + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/system-id/@identifier-type) | . |
  • https://fedramp.gov
  • http://fedramp.gov/ns/oscal
  • https://ietf.org/rfc/rfc4122
  • http://ietf.org/rfc/rfc4122
| True | builtin | + +### /System Security Plan/System Characteristics/System Information/Information Type/Availability Impact/Base + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/system-information) | information-type/(confidentiality-impact|integrity-impact|availability-impact)/(base|selected) |
  • fips-199-low
  • fips-199-moderate
  • fips-199-high
| True | builtin | + +### /System Security Plan/System Characteristics/System Information/Information Type/Availability Impact/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/system-information/information-type/availability-impact/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/System Characteristics/System Information/Information Type/Availability Impact/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/system-information/information-type/availability-impact/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/System Characteristics/System Information/Information Type/Availability Impact/Selected + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/system-information) | information-type/(confidentiality-impact|integrity-impact|availability-impact)/(base|selected) |
  • fips-199-low
  • fips-199-moderate
  • fips-199-high
| True | builtin | + +### /System Security Plan/System Characteristics/System Information/Information Type/Categorization/@System + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | information-type-system | [Location](/system-security-plan) | system-characteristics/system-information/information-type/categorization/@system |
  • https://doi.org/10.6028/NIST.SP.800-60v2r1
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| allowed-values | | [Location](/system-security-plan/system-characteristics/system-information/information-type/categorization/@system) | . |
  • http://doi.org/10.6028/NIST.SP.800-60v2r1
| True | builtin | + +### /System Security Plan/System Characteristics/System Information/Information Type/Confidentiality Impact/Base + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/system-information) | information-type/(confidentiality-impact|integrity-impact|availability-impact)/(base|selected) |
  • fips-199-low
  • fips-199-moderate
  • fips-199-high
| True | builtin | + +### /System Security Plan/System Characteristics/System Information/Information Type/Confidentiality Impact/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/system-information/information-type/confidentiality-impact/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/System Characteristics/System Information/Information Type/Confidentiality Impact/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/system-information/information-type/confidentiality-impact/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/System Characteristics/System Information/Information Type/Confidentiality Impact/Selected + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/system-information) | information-type/(confidentiality-impact|integrity-impact|availability-impact)/(base|selected) |
  • fips-199-low
  • fips-199-moderate
  • fips-199-high
| True | builtin | + +### /System Security Plan/System Characteristics/System Information/Information Type/Integrity Impact/Base + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/system-information) | information-type/(confidentiality-impact|integrity-impact|availability-impact)/(base|selected) |
  • fips-199-low
  • fips-199-moderate
  • fips-199-high
| True | builtin | + +### /System Security Plan/System Characteristics/System Information/Information Type/Integrity Impact/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/system-information/information-type/integrity-impact/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/System Characteristics/System Information/Information Type/Integrity Impact/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/system-information/information-type/integrity-impact/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/System Characteristics/System Information/Information Type/Integrity Impact/Selected + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/system-information) | information-type/(confidentiality-impact|integrity-impact|availability-impact)/(base|selected) |
  • fips-199-low
  • fips-199-moderate
  • fips-199-high
| True | builtin | + +### /System Security Plan/System Characteristics/System Information/Information Type/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/system-information/information-type/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/System Characteristics/System Information/Information Type/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/system-information/information-type/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/System Characteristics/System Information/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/system-information) | link/@rel |
  • privacy-impact-assessment
| True | builtin | +| allowed-values | [Location](/system-security-plan/system-characteristics/system-information/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/System Characteristics/System Information/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/system-information) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • privacy-designation
| False | builtin | +| allowed-values | [Location](/system-security-plan/system-characteristics/system-information/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/System Characteristics/System Information/Prop/@Value + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-characteristics/system-information) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='privacy-designation']/@value |
  • yes
  • no
| False | builtin | + +### /System Security Plan/System Implementation/Component/@Type + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | component-type | [Location](/system-security-plan) | system-implementation/component/@type |
  • interconnection
  • software
  • hardware
  • service
  • policy
  • physical
  • process-procedure
  • plan
  • guidance
  • standard
  • validation
  • this-system
  • system
  • network
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| allowed-values | | [Location](/system-security-plan/system-implementation/component/@type) | . |
  • this-system
  • system
  • interconnection
  • software
  • hardware
  • service
  • policy
  • physical
  • process-procedure
  • plan
  • guidance
  • standard
  • validation
  • network
| True | builtin | + +### /System Security Plan/System Implementation/Component/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-implementation/component) | link/@rel |
  • depends-on
  • validation
  • proof-of-compliance
  • baseline-template
  • uses-service
  • system-security-plan
  • uses-network
  • imported-from
| True | builtin | +| allowed-values | [Location](/system-security-plan/system-implementation/component) | (.)[@type='validation']/link/@rel |
  • validation-details
| True | builtin | +| allowed-values | [Location](/system-security-plan/system-implementation/component) | (.)[@type='service']/link/@rel |
  • provided-by
  • used-by
| True | builtin | +| allowed-values | [Location](/system-security-plan/system-implementation/component) | (.)[@type='interconnection']/link/@rel |
  • isa-agreement
| True | builtin | +| allowed-values | [Location](/system-security-plan/system-implementation/component/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/System Implementation/Component/Prop/@Class + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-implementation/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('ipv4-address','ipv6-address')]/@class |
  • local
  • remote
| False | builtin | + +### /System Security Plan/System Implementation/Component/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-implementation/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • implementation-point
  • leveraged-authorization-uuid
  • inherited-uuid
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
| False | builtin | +| allowed-values | [Location](/system-security-plan/system-implementation/component) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | +| allowed-values | [Location](/system-security-plan/system-implementation/component) | (.)[@type='software']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • software-identifier
| False | builtin | +| allowed-values | [Location](/system-security-plan/system-implementation/component) | (.)[@type='interconnection']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • isa-title
  • isa-date
  • isa-remote-system-name
  • ipv4-address
  • ipv6-address
  • direction
| False | builtin | +| allowed-values | [Location](/system-security-plan/system-implementation/component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/System Implementation/Component/Prop/@Value + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | interconnection-direction | [Location](/system-security-plan) | system-implementation/component[@type='interconnection']/prop[@name='interconnection-direction'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • in
  • out
  • in/out
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| allowed-values | interconnection-security | [Location](/system-security-plan) | system-implementation/component[@type='interconnection']/prop[@name='interconnection-security'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • ipsec
  • vpn
  • tls
  • dtls
  • certificate
  • secure-file-transfer
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| allowed-values | scan-type | [Location](/system-security-plan) | system-implementation//prop[@name='scan-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • infrastructure
  • database
  • web
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| allowed-values | | [Location](/system-security-plan/system-implementation) | (component | inventory-item)/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='allows-authenticated-scan']/@value |
  • yes
  • no
| False | builtin | +| allowed-values | | [Location](/system-security-plan/system-implementation/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | +| allowed-values | | [Location](/system-security-plan/system-implementation/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='allows-authenticated-scan']/@value |
  • yes
  • no
| False | builtin | +| allowed-values | | [Location](/system-security-plan/system-implementation/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='public']/@value |
  • yes
  • no
| False | builtin | +| allowed-values | | [Location](/system-security-plan/system-implementation/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='virtual']/@value |
  • yes
  • no
| False | builtin | +| allowed-values | | [Location](/system-security-plan/system-implementation/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='implementation-point']/@value |
  • internal
  • external
| False | builtin | +| allowed-values | | [Location](/system-security-plan/system-implementation/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='direction']/@value |
  • incoming
  • outgoing
| False | builtin | + +### /System Security Plan/System Implementation/Component/Protocol/Port Range/@Transport + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-implementation/component/protocol/port-range/@transport) | . |
  • TCP
  • UDP
| False | builtin | + +### /System Security Plan/System Implementation/Component/Responsible Role/@Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-implementation/component) | responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | +| allowed-values | [Location](/system-security-plan/system-implementation/component) | (.)[@type='interconnection']/responsible-role/@role-id |
  • isa-poc-local
  • isa-poc-remote
  • isa-authorizing-official-local
  • isa-authorizing-official-remote
| True | builtin | + +### /System Security Plan/System Implementation/Component/Responsible Role/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-implementation/component/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/System Implementation/Component/Responsible Role/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-implementation/component/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/System Implementation/Component/Responsible Role/Prop/@Value + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | scan-type | [Location](/system-security-plan) | system-implementation//prop[@name='scan-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • infrastructure
  • database
  • web
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | + +### /System Security Plan/System Implementation/Component/Status/@State + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-implementation/component/status/@state) | . |
  • under-development
  • operational
  • disposition
  • other
| False | builtin | + +### /System Security Plan/System Implementation/Inventory Item/Implemented Component/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-implementation/inventory-item/implemented-component/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/System Implementation/Inventory Item/Implemented Component/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-implementation/inventory-item/implemented-component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
| False | builtin | +| allowed-values | [Location](/system-security-plan/system-implementation/inventory-item/implemented-component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/System Implementation/Inventory Item/Implemented Component/Prop/@Value + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | scan-type | [Location](/system-security-plan) | system-implementation//prop[@name='scan-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • infrastructure
  • database
  • web
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | + +### /System Security Plan/System Implementation/Inventory Item/Implemented Component/Responsible Party/@Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-implementation/inventory-item/implemented-component) | responsible-party/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
| True | builtin | + +### /System Security Plan/System Implementation/Inventory Item/Implemented Component/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-implementation/inventory-item/implemented-component/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/System Implementation/Inventory Item/Implemented Component/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-implementation/inventory-item/implemented-component/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/System Implementation/Inventory Item/Implemented Component/Responsible Party/Prop/@Value + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | scan-type | [Location](/system-security-plan) | system-implementation//prop[@name='scan-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • infrastructure
  • database
  • web
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | + +### /System Security Plan/System Implementation/Inventory Item/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-implementation/inventory-item) | link/@rel |
  • baseline-template
| True | builtin | +| allowed-values | [Location](/system-security-plan/system-implementation/inventory-item/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/System Implementation/Inventory Item/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-implementation/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • ipv4-address
  • ipv6-address
  • fqdn
  • uri
  • serial-number
  • netbios-name
  • mac-address
  • physical-location
  • is-scanned
  • hardware-model
  • os-name
  • os-version
  • software-name
  • software-version
  • software-patch-level
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
| False | builtin | +| allowed-values | [Location](/system-security-plan/system-implementation/inventory-item) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | +| allowed-values | [Location](/system-security-plan/system-implementation/inventory-item/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/System Implementation/Inventory Item/Prop/@Value + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | scan-type | [Location](/system-security-plan) | system-implementation//prop[@name='scan-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • infrastructure
  • database
  • web
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| allowed-values | | [Location](/system-security-plan/system-implementation) | (component | inventory-item)/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='allows-authenticated-scan']/@value |
  • yes
  • no
| False | builtin | +| allowed-values | | [Location](/system-security-plan/system-implementation/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | +| allowed-values | | [Location](/system-security-plan/system-implementation/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='is-scanned']/@value |
  • yes
  • no
| False | builtin | + +### /System Security Plan/System Implementation/Inventory Item/Responsible Party/@Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-implementation/inventory-item) | responsible-party/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | + +### /System Security Plan/System Implementation/Inventory Item/Responsible Party/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-implementation/inventory-item/responsible-party/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/System Implementation/Inventory Item/Responsible Party/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-implementation/inventory-item/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/System Implementation/Inventory Item/Responsible Party/Prop/@Value + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | scan-type | [Location](/system-security-plan) | system-implementation//prop[@name='scan-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • infrastructure
  • database
  • web
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | + +### /System Security Plan/System Implementation/Leveraged Authorization/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-implementation/leveraged-authorization) | link/@rel |
  • system-security-plan
| True | builtin | +| allowed-values | [Location](/system-security-plan/system-implementation/leveraged-authorization/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/System Implementation/Leveraged Authorization/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-implementation/leveraged-authorization/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/System Implementation/Leveraged Authorization/Prop/@Value + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | scan-type | [Location](/system-security-plan) | system-implementation//prop[@name='scan-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • infrastructure
  • database
  • web
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | + +### /System Security Plan/System Implementation/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-implementation/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/System Implementation/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-implementation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/System Implementation/Prop/@Value + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | scan-type | [Location](/system-security-plan) | system-implementation//prop[@name='scan-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • infrastructure
  • database
  • web
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | + +### /System Security Plan/System Implementation/User/Link/@Rel + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-implementation/user/link/@rel) | . |
  • reference
| True | builtin | + +### /System Security Plan/System Implementation/User/Prop/@Name + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-implementation/user) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
  • privilege-level
| False | builtin | +| allowed-values | [Location](/system-security-plan/system-implementation/user/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +### /System Security Plan/System Implementation/User/Prop/@Value + +| Type | Identifier | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | --- | +| allowed-values | scan-type | [Location](/system-security-plan) | system-implementation//prop[@name='scan-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • infrastructure
  • database
  • web
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| allowed-values | user-type | [Location](/system-security-plan) | system-implementation/user/prop[@name='type']/@value |
  • internal
  • external
  • privileged
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| allowed-values | privilege-level | [Location](/system-security-plan) | system-implementation/user/prop[@name='privilege-level']/@value |
  • read
  • read-write
  • write
  • no-access
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| allowed-values | | [Location](/system-security-plan/system-implementation/user) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • internal
  • external
  • general-public
| False | builtin | +| allowed-values | | [Location](/system-security-plan/system-implementation/user) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='privilege-level']/@value |
  • privileged
  • non-privileged
  • no-logical-access
| False | builtin | + +### /System Security Plan/System Implementation/User/Role Id + +| Type | Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | --- | +| allowed-values | [Location](/system-security-plan/system-implementation/user) | role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
| True | builtin | From cc30a02bedc81776b09563351c47ea0bb3481009 Mon Sep 17 00:00:00 2001 From: Rene Tshiteya Date: Sun, 13 Oct 2024 05:32:53 -0400 Subject: [PATCH 13/14] Add list of FedRAMP extensions --- ...-fedramp-extensions-and-accepted-values.md | 909 +++++++++++++++++- 1 file changed, 907 insertions(+), 2 deletions(-) diff --git a/content/documentation/general-concepts/3-fedramp-extensions-and-accepted-values.md b/content/documentation/general-concepts/3-fedramp-extensions-and-accepted-values.md index 6942a4a..d5ae906 100644 --- a/content/documentation/general-concepts/3-fedramp-extensions-and-accepted-values.md +++ b/content/documentation/general-concepts/3-fedramp-extensions-and-accepted-values.md @@ -116,8 +116,913 @@ All FedRAMP extensions will appear as: assembly to be used for extensions. This is not currently the case for the OSCAL SSP, SAP, SAR, or POA&M. -**FedRAMP extensions are cited in relevant portions of this document and -summarized in the FedRAMP OSCAL Registry.** +--- + +## Summary of FedRAMP Extensions + +FedRAMP extensions are cited in relevant portions of this documentation site and +summarized below. + +### Assessment Type + +| | | +|----|----| +| ID | assessment-type | +| Description | The type of assessment (e.g., initial authorization, annual assessment, assessment for a significant change, or another type of assessment). | +| Allowed Values | "initial","annual","significant-change", and "other" | +| Status | Active | +| Remarks | Extension added to align with information in FedRAMP rev 5 templates. | + +### Asset Type + +| | | +|----|----| +| ID | asset-type | +| Description | Identifies the type of asset. | +| Allowed Values | Unrestricted | +| Status | Deprecated in version 1.0.2 | +| Remarks | Deprecated. The value may be locally defined using the "http://csrc.nist.gov/ns/oscal" namespace values for this prop. | + +### Authentication Method + +| | | +|----|----| +| ID | authentication-method | +| Description | The authentication method(s) for users of a leveraged service or external interconnection. Refer to for authentication methods NIST 800-63B (https://pages.nist.gov/800-63-3/sp800-63b.html) for authentication methods | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Extension added to align with information in FedRAMP rev 5 templates. | + +### Authorization Date + +| | | +|----|----| +| ID | authorization-date | +| Description | The date the system was authorized. Omit or leave blank for an initial authorization. | +| Allowed Values | Unrestricted | +| Status | Deprecated in version 1.0.2 | +| Remarks | Deprecated. This information should be obtained from the imported SSP's date-authorized. | + +### Authorization Recommendation + +| | | +|----|----| +| ID | authorization-recommendation | +| Description | Indicates whether the assessor recommends the system be authorized by the authorizing official. | +| Allowed Values | Unrestricted | +| Status | Deprecated in version 1.0.2 | +| Remarks | Deprecated. Use "recommend-authorization" FedRAMP extension prop instead. | + +### Authorization Type + +| | | +|----------------|-----------------------------------------------------| +| ID | authorization-type | +| Description | Identifies the FedRAMP authorization type. | +| Allowed Values | "fedramp-agency" | +| Status | Active | +| Remarks | The "fedramp-jab" authorization type is deprecated. | + +### Authorized Users + +| | | +|----|----| +| ID | authorized-users | +| Description | The users or roles that can access the leveraged service or external interconnection. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Extension added to align with information in FedRAMP rev 5 templates. | + +### Circuit Service Processor + +| | | +|----|----| +| ID | circuit | +| Description | A circuit used for the communication. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | E.g., a circuit ID. To provide a general reference for a service processor, use the "service-processor" FedRAMP extension instead. | + +### Control Implementation Status + +| | | +|----|----| +| ID | control-implementation-status | +| Description | Indicates the implementation status of the control. | +| Allowed Values | Unrestricted | +| Status | Deprecated in version 1.0.2 | +| Remarks | Deprecated. Use "http://csrc.nist.gov/ns/oscal" namespace values prop instead. | + +### Objective Implementation Status + +| | | +|----|----| +| ID | control-objective-implementation-status | +| Description | Indicates the implementation status of the control objective. | +| Allowed Values | Unrestricted | +| Status | Deprecated in version 1.0.2 | +| Remarks | Deprecated. Use "http://csrc.nist.gov/ns/oscal" namespace values prop instead. | + +### Control Origination + +| | | +|----|----| +| ID | control-origination | +| Description | The point(s) from which the control satisfaction originates. | +| Allowed Values | Unrestricted | +| Status | Deprecated in version 1.0.2 | +| Remarks | Deprecated. Use "http://csrc.nist.gov/ns/oscal" namespace values prop instead. | + +### Core Control + +| | | +|----|----| +| ID | CORE | +| Description | Identifies a control that must be included in every FedRAMP assessment. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Core controls must be assessed every year, and are often subject to additional scrutiny by assessors and adjudication reviewers. | + +### Cryptographic Module Usage + +| | | +|----|----| +| ID | cryptographic-module-usage | +| Description | The cryptographic module is used for data at rest (DAT) or data in transit (DIT). | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Extension added to align with information in FedRAMP rev 5 templates. | + +### CSP Validated + +| | | +|----|----| +| ID | csp-validated | +| Description | The CSP ensured the independent assessor team roles are appropriately filled. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Extension added to align with information in FedRAMP rev 5 templates. | + +### Description + +| | | +|----------------|------------------------------------| +| ID | description | +| Description | A brief description of the system. | +| Allowed Values | Unrestricted | +| Status | Deprecated in version 1.0.2 | +| Remarks | Deprecated. | + +### Discrepancies + +| | | +|----|----| +| ID | discrepancies | +| Description | Any discrepancies between inventory that was in scope for the planned assessment and the assets in the assessment results. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Extension added to align with information in FedRAMP rev 5 templates. | + +### Discrepancies Reason + +| | | +|----|----| +| ID | discrepencies-reason | +| Description | The justification or reason for any discrepancies between inventory that was in scope for the planned assessment and the assets in the assessment results. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Extension added to align with information in FedRAMP rev 5 templates. | + +### False Positive + +| | | +|----------------|---------------------------------------------------| +| ID | false-positive | +| Description | The risk was found to be a false positive report. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | No remarks | + +### Fully Operational Date + +| | | +|----|----| +| ID | fully-operational-date | +| Description | The date when security control implementations for the appropriate control baseline was completed. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Extension added to align with information in FedRAMP rev 5 templates. “Fully operational” means there are no “gaps” in the security control baseline implementations for the system. The CSP attests that the security controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting established security requirements. | + +### IA Manual Review + +| | | +|----|----| +| ID | ia-manual-review | +| Description | Confirmation that the independent assessor performed a manual review of (scan) configuration files to analyze for existing vulnerabilities. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Extension added to align with information in FedRAMP rev 5 templates. | + +### IA Validated + +| | | +|----|----| +| ID | ia-validated | +| Description | The independent assessor ensured the assessment team roles are appropriately filled. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Extension added to align with information in FedRAMP rev 5 templates. | + +### Impact Level + +| | | +|----|----| +| ID | impact-level | +| Description | The impact level of a leveraged authorization. | +| Allowed Values | "fips-199-high", "fips-199-moderate", and "fips-199-low". | +| Status | Active | +| Remarks | Extension added to align with information in FedRAMP rev 5 templates. | + +### Information Transmitted + +| | | +|----|----| +| ID | information | +| Description | Describes the information transmitted over the interconnection. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | No remarks | + +### Interconnection Compliance + +| | | +|----|----| +| ID | interconnection-compliance | +| Description | Any (security) compliance certifications the third party external service has (e.g., PCI SOC 2, CSA STAR Level 2, etc.). | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Extension added to align with information in FedRAMP rev 5 templates. | + +### Interconnection Data Categorization + +| | | +|----|----| +| ID | interconnection-data-categorization | +| Description | The security impact level of the data (Low, Moderate, High), processed by or stored in the external service, in accordance with FIPS 199 & NIST 800-60 Vol. 2. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Extension added to align with information in FedRAMP rev 5 templates. | + +### Interconnection Data Type + +| | | +|----|----| +| ID | interconnection-data-type | +| Description | The type of data / information processed by or stored in the external service, in accordance with NIST 800-60 Vol. 2. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Extension added to align with information in FedRAMP rev 5 templates. | + +### Interconnection Direction + +| | | +|----|----| +| ID | interconnection-direction | +| Description | Identifies the direction of information flow for the interconnection. | +| Allowed Values | Unrestricted | +| Status | Deprecated in version 1.0.2 | +| Remarks | Deprecated. Use core OSCAL "direction" prop instead. | + +### Interconnection Hosting Environment + +| | | +|----|----| +| ID | interconnection-hosting-environment | +| Description | A description of the hosting environment (e.g., corporate network, IaaS, or self-hosted) for the external service. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Extension added to align with information in FedRAMP rev 5 templates. | + +### Interconnection Risk + +| | | +|----|----| +| ID | interconnection-risk | +| Description | A description of the potential risks introduced by the external system/service and impact to the CSO or federal data if the confidentiality, integrity, and availability (CIA) of the system/service is compromised. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Extension added to align with information in FedRAMP rev 5 templates. | + +### Interconnection Security + +| | | +|----|----| +| ID | interconnection-security | +| Description | Identifies the mechanisms/protocol(s) used to secure the communication. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Renamed from "connection-security" to "interconnection-security". | + +### Interconnection Type + +| | | +|----|----| +| ID | interconnection-type | +| Description | Numeric indicator of the type of interconnection, where 1 = Non-FedRAMP Authorized Cloud Services, 2 = Corporate Shared Services, and 3 = Update Services for In-Boundary Software/Services. | +| Allowed Values | "1", "2", or "3" | +| Status | Active | +| Remarks | Extension added to align with information in FedRAMP rev 5 templates. May specify "4" if none of the other types apply. | + +### Inventory Item State. + +| | | +|----|----| +| ID | inventory-item-state | +| Description | Different states of inventory items: public, private, et cetera | +| Allowed Values | Unrestricted | +| Status | Deprecated in version 1.0.2 | +| Remarks | Deprecated. | + +### IPv4 Address + +| | | +|----|----| +| ID | ipv4-address | +| Description | The IP address of a component, inventory item, or other asset. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Extension added to align with information in FedRAMP rev 5 templates. Core OSCAL has an "ipv4-address" prop which can be used for specific component types and for inventory items. This extension can be used instead, and is also applicable for other assemblies such as assessment-platform. | + +### IPv4 Subnet + +| | | +|----|----| +| ID | ipv4-subnet | +| Description | The subnet for a component of inventory item. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Extension added to align with information in FedRAMP rev 5 templates. | + +### ISO/IEC 17020 Identifier + +| | | +|----|----| +| ID | iso-iec-17020-identifier | +| Description | The ISO/IEC-17020 identifier assigned to the assessor related to their status as an A2LA Accredited Third Party Assessment Organization. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | No remarks | + +### KEV Catalog + +| | | +|----|----| +| ID | kev-catalog | +| Description | Indicates if this vulnerability is on the CISA Known Exploited Vulnerabilities (KEV) Catalog. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Extension added to align with information in FedRAMP rev 5 templates. In accordance with Binding Operational Directive (BOD) 22-01, CSPs must track their vulnerabilities against the KEV catalog. | + +### KEV Due Date + +| | | +|----|----| +| ID | kev-due-date | +| Description | The KEV catalog specified due date by which the vulnerability must be remediated. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Extension added to align with information in FedRAMP rev 5 templates. In accordance with Binding Operational Directive (BOD) 22-01, CSPs must track their vulnerabilities against the KEV catalog. | + +### Label - Test ID + +| | | +|----|----| +| ID | label | +| Description | The test ID for the manual test method. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Extension added to align with information in FedRAMP rev 5 templates. | + +### Leveraged Authorization + +| | | +|----|----| +| ID | leveraged-authorization | +| Description | Indicates a leveraged authorization used for this control. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | This is for legacy SSP conversion to OSCAL. The preferred approach is to specify the leveraged system as a component and reference it in the control using by-component. | + +### Leveraged System Identifier + +| | | +|----|----| +| ID | leveraged-system-identifier | +| Description | The identifier corresponding to the FedRAMP package ID. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Extension added to align with information in FedRAMP rev 5 templates. | + +### Likelihood + +| | | +|----------------|------------------------------| +| ID | likelihood | +| Description | The likelihood of a risk. | +| Allowed Values | "high", "moderate", or "low" | +| Status | Active | +| Remarks | No remarks | + +### Login ID + +| | | +|----------------|-------------------------------------------------------| +| ID | login-id | +| Description | The login ID used to assess the web application. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Extension renamed from "task-login-id" to "login-id". | + +### Login URL + +| | | +|----------------|---------------------------------------------------------| +| ID | login-url | +| Description | The login URL for a web application. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Extension renamed from "task-login-url" to "login-url". | + +### Name + +| | | +|----|----| +| ID | name | +| Description | The product or tool name for a component or inventory item. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Extension added to align with information in FedRAMP rev 5 templates. For local defi | + +### Nature of Agreement + +| | | +|----|----| +| ID | nature-of-agreement | +| Description | Any type of agreement between a CSP and the leveraged CSP vendors who support products (e.g., End User Licensing Agreement (EULA), Service-Level Agreement (SLA), App License Agreement, Contract, etc.). | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Extension added to align with information in FedRAMP rev 5 templates. | + +### Referenced Authorization Date + +| | | +|----------------|---------------------------------------------------------| +| ID | no-oscal-ssp-authorization-date | +| Description | The date of the system's initial FedRAMP authorization. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | No remarks | + +### Relevant Baseline + +| | | +|----|----| +| ID | no-oscal-ssp-import-profile | +| Description | Identifies the relevant OSCAL baseline. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | As with all URIs in OSCAL, this may contain a URI fragment, which identifies the local resource containing the relevant profile. Only use when an OSCAL SSP cannot be referenced. | + +### Short System Name + +| | | +|----------------|-----------------------------------------| +| ID | no-oscal-ssp-purpose | +| Description | The FedRAMP-assigned system identifier. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | No remarks | + +### Short System Name + +| | | +|----------------|-----------------------------------------| +| ID | no-oscal-ssp-system-id | +| Description | The FedRAMP-assigned system identifier. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | No remarks | + +### Short System Name + +| | | +|----------------|----------------------------------------------------------| +| ID | no-oscal-ssp-title-short | +| Description | The abbreviated name for the system, such as an acronym. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | No remarks | + +### Operational Requirement + +| | | +|----|----| +| ID | operational-requirement | +| Description | Use to indicate that risk cannot be remediated without impact to the system and must be accepted. | +| Allowed Values | "investigating", "pending", "approved" | +| Status | Active | +| Remarks | No remarks | + +### Planned Completion Date + +| | | +|----|----| +| ID | planned-completion-date | +| Description | Provides the date the control expects to be implemented. Must be present when Implementation Status is "Planned" | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | No remarks | + +### Plugin Identifier + +| | | +|----|----| +| ID | plugin-identifier | +| Description | A tool assigned Plugin ID. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Some vulnerability scanners provide a plug-in ID for a given vulnerability, which should be reported in the POA&M. | + +### POA&M ID + +| | | +|----------------|----------------------------------| +| ID | poam-id | +| Description | A CSP-assigned POA&M identifier. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | No remarks | + +### Impacted Control + +| | | +|----|----| +| ID | poam-impacted-control | +| Description | A control impacted by this POA&M item. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Impacted control is required in the POA&M and optional in the SAR. It is allowed in the SAR in anticipation of duplicating open risks from the SAR to the POA&M. | + +### Privacy Designation + +| | | +|----------------|-----------------------------------------------------| +| ID | privacy-designation | +| Description | Indicates whether this system is privacy sensitive. | +| Allowed Values | Unrestricted | +| Status | Deprecated in version 1.0.2 | +| Remarks | Deprecated. | + +### Privacy Threshold Analysis Q1 + +| | | +|----|----| +| ID | privacy-threshold-analysis-q1 | +| Description | Does the ISA collect, maintain, or share PII in any identifiable form? | +| Allowed Values | Unrestricted | +| Status | Deprecated in version 1.0.2 | +| Remarks | Deprecated. | + +### Privacy Threshold Analysis Q2 + +| | | +|----|----| +| ID | privacy-threshold-analysis-q2 | +| Description | Does the ISA collect, maintain, or share PII from or about the public? | +| Allowed Values | Unrestricted | +| Status | Deprecated in version 1.0.2 | +| Remarks | Deprecated. | + +### Privacy Threshold Analysis Q3 + +| | | +|----|----| +| ID | privacy-threshold-analysis-q3 | +| Description | Has a Privacy Impact Assessment (PIA) ever been performed for the ISA? | +| Allowed Values | Unrestricted | +| Status | Deprecated in version 1.0.2 | +| Remarks | Deprecated. | + +### Privacy Threshold Analysis Q4 + +| | | +|----|----| +| ID | privacy-threshold-analysis-q4 | +| Description | Is there a Privacy Act System of Records Notice (SORN) for this ISA system? | +| Allowed Values | Unrestricted | +| Status | Deprecated in version 1.0.2 | +| Remarks | Deprecated. | + +### Purpose + +| | | +|----------------|----------------------------------------------------| +| ID | purpose | +| Description | Explains the system's purpose. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | May be used to provide prose for the SAP or POA&M. | + +### Assessor's Authorization Recommendation + +| | | +|----|----| +| ID | recommend-authorization | +| Description | Indicates the assessor's recommendation for initial or continued authorization. | +| Allowed Values | "yes" or "no" | +| Status | Active | +| Remarks | No remarks | + +### Resolution Resource + +| | | +|----|----| +| ID | resolution-resource | +| Description | The back-matter resource reference used to determine which FedRAMP validation rule sets apply. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Extension added to align with information in FedRAMP rev 5 templates. | + +### Response Point + +| | | +|----|----| +| ID | response-point | +| Description | A property whose presence indicates its parent part is a required point of response for FedRAMP stakeholders. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | This appears in FedRAMP profiles and resolved profile catalogs. For control statements, it signals to the CSP which statements require a response in the SSP. For control objectives, it signals to the assessor which control objectives must appear in the assessment results, which aligns with the FedRAMP test case workbook. | + +### Party Identifier + +| | | +|----------------|--------------------------------------------------| +| ID | revision-history-party-uuid | +| Description | Identifies the party who authored this revision. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | No remarks | + +### Risk Adjustment + +| | | +|----|----| +| ID | risk-adjustment | +| Description | Use to indicate that mitigating factors were identified or implemented, reducing the likelihood or impact of the risk. | +| Allowed Values | "investigating", "pending", "approved" | +| Status | Active | +| Remarks | No remarks | + +### Sampling + +| | | +|----|----| +| ID | sampling | +| Description | Indicates whether a sampling methodology was used instead of assessing the entire system. | +| Allowed Values | "yes" or "no" | +| Status | Active | +| Remarks | No remarks | + +### Risk Priority + +| | | +|----|----| +| ID | sar-risk-priority | +| Description | Assessor's recommended risk priority. Lower numbers are higher priority. One (1) is highest priority. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | No remarks | + +### Scan Percentage + +| | | +|----|----| +| ID | scan-percentage | +| Description | The scan coverage | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Extension added to align with information in FedRAMP rev 5 templates. | + +### Scan Type + +| | | +|----|----| +| ID | scan-type | +| Description | Identifies the type(s) of scans to be performed on this inventory-item or component. | +| Allowed Values | "infrastructure", "database", "web", or "other" | +| Status | Active | +| Remarks | No remarks | + +### eAuth Level (OVERALL) + +| | | +|----|----| +| ID | security-cia-level | +| Description | The overall electronic authentication (eAuth) level applied to the system. | +| Allowed Values | Unrestricted | +| Status | Deprecated in version 1.0.2 | +| Remarks | Deprecated. | + +### Service Processor + +| | | +|----------------|------------------------------------------------| +| ID | service-processor | +| Description | Name of the interconnection service processor. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | No remarks | + +### Service Used By + +| | | +|----------------|-----------------------------------| +| ID | service-used-by | +| Description | Identifies what uses the service. | +| Allowed Values | Unrestricted | +| Status | Deprecated in version 1.0.2 | +| Remarks | Use rel set to "used-by" instead. | + +### Significant Changes Scope + +| | | +|----|----| +| ID | significant-changes-scope | +| Description | The general quantity of significant change(s) in scope. | +| Allowed Values | "none", "one" or "many" | +| Status | Active | +| Remarks | Extension added to align with information in FedRAMP rev 5 templates. | + +### SORN ID + +| | | +|----|----| +| ID | sorn-id | +| Description | An assigned System of Records Notice (SORN) identifier for this system. | +| Allowed Values | Unrestricted | +| Status | Deprecated in version 1.0.2 | +| Remarks | Deprecated. | + +### Sort ID + +| | | +|----|----| +| ID | sort-id | +| Description | Identifier for sort ordering content. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Core OSCAL has a "sort-id" prop, however this "sort-id" extension can be applied to any assembly that provided information which may need to be rendered in a specific order. The step assembly is an example of this. | + +### Still Supported + +| | | +|----|----| +| ID | still-supported | +| Description | Specify if the product / component is still supported by the vendor / manufacturer. | +| Allowed Values | "yes" or "no" | +| Status | Active | +| Remarks | Extension added to align with information in FedRAMP rev 5 templates. | + +### System Identifier + +| | | +|----------------|------------------------------------------------------------| +| ID | system-id | +| Description | The FedRAMP-assigned identifier for this system. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Use this extension when an OSCAL SSP cannot be referenced. | + +### Test Type + +| | | +|----------------|-----------------------------------------------------| +| ID | task-test-type | +| Description | Indicates the type of test represented by the task. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | No remarks | + +### User Identifier + +| | | +|----------------|-----------------------------------------------------| +| ID | task-user-uuid | +| Description | Cites the SSP defined user role to use for testing. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | No remarks | + +### Short Title + +| | | +|----------------|------------------------------------------------------------| +| ID | title-short | +| Description | The short name for the system represented in the resource. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | No remarks | + +### Type + +| | | +|----|----| +| ID | type | +| Description | The "type" of back-matter resource. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Extension added to align with information in FedRAMP rev 5 templates. For locally defined resource types. | + +### User Sensitivity Level + +| | | +|----|----| +| ID | user-sensitivity-level | +| Description | Defines the sensitivity level of the identified user type. | +| Allowed Values | Unrestricted | +| Status | Deprecated in version 1.0.2 | +| Remarks | Values are as required by FedRAMP for packages based on NIST 800-53, Revision 4. Authoritative source: OPM Position Designation (Page 18). | + +### External Users + +| | | +|----------------|-----------------------------------------------------------| +| ID | users-external | +| Description | The current number of users external to the organization. | +| Allowed Values | Unrestricted | +| Status | Deprecated in version 1.0.2 | +| Remarks | No remarks | + +### Future External Users + +| | | +|----|----| +| ID | users-external-future | +| Description | The anticipated number of users external to the organization in one year. | +| Allowed Values | Unrestricted | +| Status | Deprecated in version 1.0.2 | +| Remarks | No remarks | + +### Internal Users + +| | | +|----------------|-----------------------------------------------------------| +| ID | users-internal | +| Description | The current number of users internal to the organization. | +| Allowed Values | Unrestricted | +| Status | Deprecated in version 1.0.2 | +| Remarks | No remarks | + +### Future Internal Users + +| | | +|----|----| +| ID | users-internal-future | +| Description | The anticipated number of users internal to the organization in one year. | +| Allowed Values | Unrestricted | +| Status | Deprecated in version 1.0.2 | +| Remarks | No remarks | + +### Vendor Dependency + +| | | +|----------------|--------------------------------------------------------| +| ID | vendor-dependency | +| Description | A vendor resolution is pending, but not yet available. | +| Allowed Values | "investigating", "pending", "approved" | +| Status | Active | +| Remarks | No remarks | + +### Vendor Name + +| | | +|----|----| +| ID | vendor-name | +| Description | The vendor or manufacturer of a component or inventory item. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | Extension added to align with information in FedRAMP rev 5 templates. | + +### Vulnerability Identifier + +| | | +|----------------|-----------------------------------| +| ID | vulnerability-identifier | +| Description | A tool assigned vulnerability ID. | +| Allowed Values | Unrestricted | +| Status | Active | +| Remarks | No remarks | + From c7363b48df37baf971411e21dbd5ccfd3211c5ee Mon Sep 17 00:00:00 2001 From: Rene Tshiteya Date: Sun, 13 Oct 2024 05:33:17 -0400 Subject: [PATCH 14/14] Update FedRAMP allowed values --- .../fedramp-allowed-values.md | 10294 ++++++++-------- 1 file changed, 5161 insertions(+), 5133 deletions(-) diff --git a/content/documentation/general-concepts/fedramp-allowed-values.md b/content/documentation/general-concepts/fedramp-allowed-values.md index 5fdf3f9..7d6b4c7 100644 --- a/content/documentation/general-concepts/fedramp-allowed-values.md +++ b/content/documentation/general-concepts/fedramp-allowed-values.md @@ -2,7 +2,7 @@ title: FedRAMP Allowed Values weight: 150 --- -# OSCAL and FedRAMP Allowed Values +# FedRAMP Allowed Values To facilitate consistent processing, the value for property names, annotation names, and some field values is limited to a list of @@ -17,7548 +17,7576 @@ For example, every control requires an implementation status. FedRAMP only accepts one of five possible responses for this status, which must be provided using one of the specified choices. -**FedRAMP allowed values are cited in relevant portions of the online documentation and summarized in this section.** - ## Allowed Value Constraints -### /Assessment Plan/Assessment Assets/Assessment Platform/Link/@Rel - -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/assessment-assets/assessment-platform/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Assessment Assets/Assessment Platform/Prop/@Name +FedRAMP allowed values are cited in relevant portions of the online documentation and summarized in these sub-sections: +- [SSP Allowed Values](#ssp-allowed-values) +- [SAP Allowed Values](#sap-allowed-values) +- [SAR Allowed Values](#sar-allowed-values) +- [POA&M Allowed Values](#poam-allowed-values) +- [Other Allowed Values](#other-allowed-values) -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/assessment-assets/assessment-platform/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +### SSP Allowed Values -### /Assessment Plan/Assessment Assets/Assessment Platform/Uses Component/Link/@Rel +#### /System Security Plan/Back Matter/Resource/Citation/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/assessment-assets/assessment-platform/uses-component/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/back-matter/resource/citation/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Assessment Assets/Assessment Platform/Uses Component/Prop/@Name +#### /System Security Plan/Back Matter/Resource/Citation/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/assessment-assets/assessment-platform/uses-component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/back-matter/resource/citation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Assessment Assets/Assessment Platform/Uses Component/Responsible Party/Link/@Rel +#### /System Security Plan/Back Matter/Resource/Document Id/@Scheme -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/assessment-assets/assessment-platform/uses-component/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/back-matter/resource/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | -### /Assessment Plan/Assessment Assets/Assessment Platform/Uses Component/Responsible Party/Prop/@Name +#### /System Security Plan/Back Matter/Resource/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/assessment-assets/assessment-platform/uses-component/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
  • version
  • published
| False | builtin | +| [Location](/system-security-plan/back-matter/resource/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Assessment Assets/Component/@Type +#### /System Security Plan/Back Matter/Resource/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/assessment-assets/component/@type) | . |
  • this-system
  • system
  • interconnection
  • software
  • hardware
  • service
  • policy
  • physical
  • process-procedure
  • plan
  • guidance
  • standard
  • validation
  • network
| True | builtin | +| attachment-type | [Location](/system-security-plan) | back-matter/resource/prop[@name='type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • law
  • regulation
  • standard
  • guidance
  • policy
  • procedure
  • guide
  • rules-of-behavior
  • plan
  • system-security-plan
  • artifact
  • evidence
  • screen-shot
  • image
  • tool-report
  • raw-tool-output
  • interview-notes
  • questionnaire
  • report
  • fedramp-citations
  • fedramp-acronyms
  • fedramp-logo
  • separation-of-duties-matrix
  • logo
  • personally-identifiable-information
  • agreement
  • isa-agreement
  • incident-response-plan
  • information-security-policies-and-procedures
  • users-guide
  • privacy-impact-assessment
  • information-system-contingency-plan
  • configuration-management-plan
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| | [Location](/system-security-plan/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • logo
  • image
  • screen-shot
  • law
  • regulation
  • standard
  • external-guidance
  • acronyms
  • citation
  • policy
  • procedure
  • system-guide
  • users-guide
  • administrators-guide
  • rules-of-behavior
  • plan
  • artifact
  • evidence
  • tool-output
  • raw-data
  • interview-notes
  • questionnaire
  • report
  • agreement
| False | builtin | -### /Assessment Plan/Assessment Assets/Component/Link/@Rel +#### /System Security Plan/Back Matter/Resource/Rlink/Hash/@Algorithm -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/assessment-assets/component) | link/@rel |
  • depends-on
  • validation
  • proof-of-compliance
  • baseline-template
  • uses-service
  • system-security-plan
  • uses-network
  • imported-from
| True | builtin | -| allowed-values | [Location](/assessment-plan/assessment-assets/component) | (.)[@type='validation']/link/@rel |
  • validation-details
| True | builtin | -| allowed-values | [Location](/assessment-plan/assessment-assets/component) | (.)[@type='service']/link/@rel |
  • provided-by
  • used-by
| True | builtin | -| allowed-values | [Location](/assessment-plan/assessment-assets/component) | (.)[@type='interconnection']/link/@rel |
  • isa-agreement
| True | builtin | -| allowed-values | [Location](/assessment-plan/assessment-assets/component/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/back-matter/resource/rlink/hash/@algorithm) | . |
  • SHA-224
  • SHA-256
  • SHA-384
  • SHA-512
  • SHA3-224
  • SHA3-256
  • SHA3-384
  • SHA3-512
| True | builtin | -### /Assessment Plan/Assessment Assets/Component/Prop/@Class +#### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('ipv4-address','ipv6-address')]/@class |
  • local
  • remote
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/export/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Assessment Assets/Component/Prop/@Name +#### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • implementation-point
  • leveraged-authorization-uuid
  • inherited-uuid
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
| False | builtin | -| allowed-values | [Location](/assessment-plan/assessment-assets/component) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | -| allowed-values | [Location](/assessment-plan/assessment-assets/component) | (.)[@type='software']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • software-identifier
| False | builtin | -| allowed-values | [Location](/assessment-plan/assessment-assets/component) | (.)[@type='interconnection']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • isa-title
  • isa-date
  • isa-remote-system-name
  • ipv4-address
  • ipv6-address
  • direction
| False | builtin | -| allowed-values | [Location](/assessment-plan/assessment-assets/component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/export/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Assessment Assets/Component/Prop/@Value +#### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Provided/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | -| allowed-values | [Location](/assessment-plan/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='allows-authenticated-scan']/@value |
  • yes
  • no
| False | builtin | -| allowed-values | [Location](/assessment-plan/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='public']/@value |
  • yes
  • no
| False | builtin | -| allowed-values | [Location](/assessment-plan/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='virtual']/@value |
  • yes
  • no
| False | builtin | -| allowed-values | [Location](/assessment-plan/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='implementation-point']/@value |
  • internal
  • external
| False | builtin | -| allowed-values | [Location](/assessment-plan/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='direction']/@value |
  • incoming
  • outgoing
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/export/provided/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Assessment Assets/Component/Protocol/Port Range/@Transport +#### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Provided/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/assessment-assets/component/protocol/port-range/@transport) | . |
  • TCP
  • UDP
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/export/provided/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Assessment Assets/Component/Responsible Role/@Role Id +#### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Provided/Responsible Role/@Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/assessment-assets/component) | responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | -| allowed-values | [Location](/assessment-plan/assessment-assets/component) | (.)[@type='interconnection']/responsible-role/@role-id |
  • isa-poc-local
  • isa-poc-remote
  • isa-authorizing-official-local
  • isa-authorizing-official-remote
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/by-component) | [Target](.//responsible-role/@role-id) |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | -### /Assessment Plan/Assessment Assets/Component/Responsible Role/Link/@Rel +#### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Provided/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/assessment-assets/component/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/export/provided/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Assessment Assets/Component/Responsible Role/Prop/@Name +#### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Provided/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/assessment-assets/component/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/export/provided/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Assessment Assets/Component/Status/@State +#### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Responsibility/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/assessment-assets/component/status/@state) | . |
  • under-development
  • operational
  • disposition
  • other
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/export/responsibility/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Assessment Subject/@Type +#### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Responsibility/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/assessment-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/export/responsibility/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Assessment Subject/Exclude Subject/@Type +#### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Responsibility/Responsible Role/@Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/assessment-subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/by-component) | [Target](.//responsible-role/@role-id) |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | -### /Assessment Plan/Assessment Subject/Exclude Subject/Link/@Rel +#### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Responsibility/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/assessment-subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/export/responsibility/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Assessment Subject/Exclude Subject/Prop/@Name +#### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Responsibility/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/assessment-subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/export/responsibility/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Assessment Subject/Include Subject/@Type +#### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Implementation Status/@State -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/assessment-subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/implementation-status/@state) | . |
  • implemented
  • partial
  • planned
  • alternative
  • not-applicable
| True | builtin | -### /Assessment Plan/Assessment Subject/Include Subject/Link/@Rel +#### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Inherited/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/assessment-subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/inherited/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Assessment Subject/Include Subject/Prop/@Name +#### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Inherited/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/assessment-subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/inherited/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Assessment Subject/Link/@Rel +#### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Inherited/Responsible Role/@Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/assessment-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/by-component) | [Target](.//responsible-role/@role-id) |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | -### /Assessment Plan/Assessment Subject/Prop/@Name +#### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Inherited/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/assessment-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/inherited/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Back Matter/Resource/Citation/Link/@Rel +#### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Inherited/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/back-matter/resource/citation/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/inherited/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Back Matter/Resource/Citation/Prop/@Name +#### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/back-matter/resource/citation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/by-component) | link/@rel |
  • imported-from
| True | builtin | +| [Location](/system-security-plan/control-implementation/implemented-requirement/by-component) | link/@rel |
  • provided-by
| True | builtin | +| [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Back Matter/Resource/Document Id/@Scheme +#### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/back-matter/resource/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement) | (.|statement|.//by-component)/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • control-origination
| False | builtin | +| [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Back Matter/Resource/Prop/@Name +#### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
  • version
  • published
| False | builtin | -| allowed-values | [Location](/assessment-plan/back-matter/resource/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| control-implementation-status | [Location](/system-security-plan) | control-implementation/implemented-requirement/by-component/prop[@name='implementation-status']/@value |
  • implemented
  • partial
  • planned
  • alternative
  • not-applicable
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| | [Location](/system-security-plan/control-implementation/implemented-requirement) | (.|statement|.//by-component)/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='control-origination']/@value |
  • organization
  • system-specific
  • customer-configured
  • customer-provided
  • inherited
| False | builtin | -### /Assessment Plan/Back Matter/Resource/Prop/@Value +#### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Responsible Role/@Role Id -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | attachment-type | [Location](/assessment-plan) | back-matter/resource/prop[@name='type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • law
  • regulation
  • standard
  • guidance
  • policy
  • procedure
  • guide
  • rules-of-behavior
  • plan
  • system-security-plan
  • artifact
  • evidence
  • screen-shot
  • image
  • tool-report
  • raw-tool-output
  • interview-notes
  • questionnaire
  • report
  • fedramp-citations
  • fedramp-acronyms
  • fedramp-logo
  • separation-of-duties-matrix
  • logo
  • personally-identifiable-information
  • agreement
  • isa-agreement
  • incident-response-plan
  • information-security-policies-and-procedures
  • users-guide
  • privacy-impact-assessment
  • information-system-contingency-plan
  • configuration-management-plan
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -| allowed-values | | [Location](/assessment-plan/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • logo
  • image
  • screen-shot
  • law
  • regulation
  • standard
  • external-guidance
  • acronyms
  • citation
  • policy
  • procedure
  • system-guide
  • users-guide
  • administrators-guide
  • rules-of-behavior
  • plan
  • artifact
  • evidence
  • tool-output
  • raw-data
  • interview-notes
  • questionnaire
  • report
  • agreement
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/by-component) | [Target](.//responsible-role/@role-id) |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | -### /Assessment Plan/Back Matter/Resource/Rlink/Hash/@Algorithm +#### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/back-matter/resource/rlink/hash/@algorithm) | . |
  • SHA-224
  • SHA-256
  • SHA-384
  • SHA-512
  • SHA3-224
  • SHA3-256
  • SHA3-384
  • SHA3-512
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Local Definitions/Activity/Link/@Rel +#### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/activity/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Local Definitions/Activity/Prop/@Name +#### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Satisfied/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/activity) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • method
| False | builtin | -| allowed-values | [Location](/assessment-plan/local-definitions/activity/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/satisfied/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Local Definitions/Activity/Prop/@Value +#### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Satisfied/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/activity) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='method']/@value |
  • INTERVIEW
  • EXAMINE
  • TEST
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/satisfied/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Local Definitions/Activity/Related Controls/Control Objective Selection/Link/@Rel +#### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Satisfied/Responsible Role/@Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/activity/related-controls/control-objective-selection/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/by-component) | [Target](.//responsible-role/@role-id) |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | -### /Assessment Plan/Local Definitions/Activity/Related Controls/Control Objective Selection/Prop/@Name +#### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Satisfied/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/activity/related-controls/control-objective-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/satisfied/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Local Definitions/Activity/Related Controls/Control Selection/Link/@Rel +#### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Satisfied/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/activity/related-controls/control-selection/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/satisfied/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Local Definitions/Activity/Related Controls/Control Selection/Prop/@Name +#### /System Security Plan/Control Implementation/Implemented Requirement/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/activity/related-controls/control-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Local Definitions/Activity/Related Controls/Link/@Rel +#### /System Security Plan/Control Implementation/Implemented Requirement/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/activity/related-controls/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement) | (.|statement|.//by-component)/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • control-origination
| False | builtin | +| [Location](/system-security-plan/control-implementation/implemented-requirement/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Local Definitions/Activity/Related Controls/Prop/@Name +#### /System Security Plan/Control Implementation/Implemented Requirement/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/activity/related-controls/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement) | (.|statement|.//by-component)/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='control-origination']/@value |
  • organization
  • system-specific
  • customer-configured
  • customer-provided
  • inherited
| False | builtin | -### /Assessment Plan/Local Definitions/Activity/Responsible Role/Link/@Rel +#### /System Security Plan/Control Implementation/Implemented Requirement/Responsible Role/@Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/activity/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement) | responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
| True | builtin | -### /Assessment Plan/Local Definitions/Activity/Responsible Role/Prop/@Name +#### /System Security Plan/Control Implementation/Implemented Requirement/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/activity/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Local Definitions/Activity/Step/Link/@Rel +#### /System Security Plan/Control Implementation/Implemented Requirement/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/activity/step/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Local Definitions/Activity/Step/Prop/@Name +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/activity/step/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/export/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Local Definitions/Activity/Step/Responsible Role/Link/@Rel +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/activity/step/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/export/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Local Definitions/Activity/Step/Responsible Role/Prop/@Name +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Provided/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/activity/step/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/export/provided/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Local Definitions/Activity/Step/Reviewed Controls/Control Objective Selection/Link/@Rel +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Provided/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/activity/step/reviewed-controls/control-objective-selection/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/export/provided/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Local Definitions/Activity/Step/Reviewed Controls/Control Objective Selection/Prop/@Name +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Provided/Responsible Role/@Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/activity/step/reviewed-controls/control-objective-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component) | [Target](.//responsible-role/@role-id) |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | -### /Assessment Plan/Local Definitions/Activity/Step/Reviewed Controls/Control Selection/Link/@Rel +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Provided/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/activity/step/reviewed-controls/control-selection/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/export/provided/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Local Definitions/Activity/Step/Reviewed Controls/Control Selection/Prop/@Name +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Provided/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/activity/step/reviewed-controls/control-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/export/provided/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Local Definitions/Activity/Step/Reviewed Controls/Link/@Rel +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Responsibility/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/activity/step/reviewed-controls/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/export/responsibility/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Local Definitions/Activity/Step/Reviewed Controls/Prop/@Name +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Responsibility/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/activity/step/reviewed-controls/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/export/responsibility/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Local Definitions/Component/@Type +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Responsibility/Responsible Role/@Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/component/@type) | . |
  • this-system
  • system
  • interconnection
  • software
  • hardware
  • service
  • policy
  • physical
  • process-procedure
  • plan
  • guidance
  • standard
  • validation
  • network
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component) | [Target](.//responsible-role/@role-id) |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | -### /Assessment Plan/Local Definitions/Component/Link/@Rel +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Responsibility/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/component) | link/@rel |
  • depends-on
  • validation
  • proof-of-compliance
  • baseline-template
  • uses-service
  • system-security-plan
  • uses-network
  • imported-from
| True | builtin | -| allowed-values | [Location](/assessment-plan/local-definitions/component) | (.)[@type='validation']/link/@rel |
  • validation-details
| True | builtin | -| allowed-values | [Location](/assessment-plan/local-definitions/component) | (.)[@type='service']/link/@rel |
  • provided-by
  • used-by
| True | builtin | -| allowed-values | [Location](/assessment-plan/local-definitions/component) | (.)[@type='interconnection']/link/@rel |
  • isa-agreement
| True | builtin | -| allowed-values | [Location](/assessment-plan/local-definitions/component/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/export/responsibility/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Local Definitions/Component/Prop/@Class +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Responsibility/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('ipv4-address','ipv6-address')]/@class |
  • local
  • remote
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/export/responsibility/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Local Definitions/Component/Prop/@Name +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Implementation Status/@State -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • implementation-point
  • leveraged-authorization-uuid
  • inherited-uuid
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
| False | builtin | -| allowed-values | [Location](/assessment-plan/local-definitions/component) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | -| allowed-values | [Location](/assessment-plan/local-definitions/component) | (.)[@type='software']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • software-identifier
| False | builtin | -| allowed-values | [Location](/assessment-plan/local-definitions/component) | (.)[@type='interconnection']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • isa-title
  • isa-date
  • isa-remote-system-name
  • ipv4-address
  • ipv6-address
  • direction
| False | builtin | -| allowed-values | [Location](/assessment-plan/local-definitions/component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/implementation-status/@state) | . |
  • implemented
  • partial
  • planned
  • alternative
  • not-applicable
| True | builtin | -### /Assessment Plan/Local Definitions/Component/Prop/@Value +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Inherited/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | -| allowed-values | [Location](/assessment-plan/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='allows-authenticated-scan']/@value |
  • yes
  • no
| False | builtin | -| allowed-values | [Location](/assessment-plan/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='public']/@value |
  • yes
  • no
| False | builtin | -| allowed-values | [Location](/assessment-plan/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='virtual']/@value |
  • yes
  • no
| False | builtin | -| allowed-values | [Location](/assessment-plan/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='implementation-point']/@value |
  • internal
  • external
| False | builtin | -| allowed-values | [Location](/assessment-plan/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='direction']/@value |
  • incoming
  • outgoing
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/inherited/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Local Definitions/Component/Protocol/Port Range/@Transport +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Inherited/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/component/protocol/port-range/@transport) | . |
  • TCP
  • UDP
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/inherited/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Local Definitions/Component/Responsible Role/@Role Id +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Inherited/Responsible Role/@Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/component) | responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | -| allowed-values | [Location](/assessment-plan/local-definitions/component) | (.)[@type='interconnection']/responsible-role/@role-id |
  • isa-poc-local
  • isa-poc-remote
  • isa-authorizing-official-local
  • isa-authorizing-official-remote
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component) | [Target](.//responsible-role/@role-id) |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | -### /Assessment Plan/Local Definitions/Component/Responsible Role/Link/@Rel +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Inherited/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/component/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/inherited/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Local Definitions/Component/Responsible Role/Prop/@Name +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Inherited/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/component/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/inherited/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Local Definitions/Component/Status/@State +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/component/status/@state) | . |
  • under-development
  • operational
  • disposition
  • other
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component) | link/@rel |
  • imported-from
| True | builtin | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component) | link/@rel |
  • provided-by
| True | builtin | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Local Definitions/Inventory Item/Implemented Component/Link/@Rel +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item/implemented-component/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement) | (.|statement|.//by-component)/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • control-origination
| False | builtin | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Local Definitions/Inventory Item/Implemented Component/Prop/@Name +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item/implemented-component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
| False | builtin | -| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item/implemented-component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement) | (.|statement|.//by-component)/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='control-origination']/@value |
  • organization
  • system-specific
  • customer-configured
  • customer-provided
  • inherited
| False | builtin | -### /Assessment Plan/Local Definitions/Inventory Item/Implemented Component/Responsible Party/@Role Id +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Responsible Role/@Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item/implemented-component) | responsible-party/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component) | [Target](.//responsible-role/@role-id) |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | -### /Assessment Plan/Local Definitions/Inventory Item/Implemented Component/Responsible Party/Link/@Rel +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item/implemented-component/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Local Definitions/Inventory Item/Implemented Component/Responsible Party/Prop/@Name +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item/implemented-component/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Local Definitions/Inventory Item/Link/@Rel +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Satisfied/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item) | link/@rel |
  • baseline-template
| True | builtin | -| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/satisfied/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Local Definitions/Inventory Item/Prop/@Name +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Satisfied/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • ipv4-address
  • ipv6-address
  • fqdn
  • uri
  • serial-number
  • netbios-name
  • mac-address
  • physical-location
  • is-scanned
  • hardware-model
  • os-name
  • os-version
  • software-name
  • software-version
  • software-patch-level
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
| False | builtin | -| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | -| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/satisfied/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Local Definitions/Inventory Item/Prop/@Value +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Satisfied/Responsible Role/@Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | -| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='is-scanned']/@value |
  • yes
  • no
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component) | [Target](.//responsible-role/@role-id) |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | -### /Assessment Plan/Local Definitions/Inventory Item/Responsible Party/@Role Id +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Satisfied/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item) | responsible-party/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/satisfied/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Local Definitions/Inventory Item/Responsible Party/Link/@Rel +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Satisfied/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/satisfied/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Local Definitions/Inventory Item/Responsible Party/Prop/@Name +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/inventory-item/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Local Definitions/Objectives And Methods/Link/@Rel +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/objectives-and-methods/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement) | (.|statement|.//by-component)/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • control-origination
| False | builtin | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Local Definitions/Objectives And Methods/Part/@Name +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/objectives-and-methods) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • objective
  • assessment
  • assessment-objective
  • assessment-method
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement) | (.|statement|.//by-component)/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='control-origination']/@value |
  • organization
  • system-specific
  • customer-configured
  • customer-provided
  • inherited
| False | builtin | -### /Assessment Plan/Local Definitions/Objectives And Methods/Part/Link/@Rel +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/Responsible Role/@Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/objectives-and-methods/part/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement) | responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
| True | builtin | -### /Assessment Plan/Local Definitions/Objectives And Methods/Part/Prop/@Name +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/objectives-and-methods/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | -| allowed-values | [Location](/assessment-plan/local-definitions/objectives-and-methods/part/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -| allowed-values | [Location](/assessment-plan/local-definitions/objectives-and-methods/part/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Local Definitions/Objectives And Methods/Prop/@Name +#### /System Security Plan/Control Implementation/Implemented Requirement/Statement/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/objectives-and-methods/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/control-implementation/implemented-requirement/statement/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Local Definitions/User/Link/@Rel +#### /System Security Plan/Metadata/Action/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/user/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/metadata/action/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Local Definitions/User/Prop/@Name +#### /System Security Plan/Metadata/Action/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/user) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
  • privilege-level
| False | builtin | -| allowed-values | [Location](/assessment-plan/local-definitions/user/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/metadata/action/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Local Definitions/User/Prop/@Value +#### /System Security Plan/Metadata/Action/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/user) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • internal
  • external
  • general-public
| False | builtin | -| allowed-values | [Location](/assessment-plan/local-definitions/user) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='privilege-level']/@value |
  • privileged
  • non-privileged
  • no-logical-access
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/metadata/action/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Local Definitions/User/Role Id +#### /System Security Plan/Metadata/Action/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/local-definitions/user) | role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/metadata/action/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Metadata/Action/Link/@Rel +#### /System Security Plan/Metadata/Document Id/@Scheme -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/metadata/action/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/metadata/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | -### /Assessment Plan/Metadata/Action/Prop/@Name +#### /System Security Plan/Metadata/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/metadata/action/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/metadata) | link/@rel |
  • canonical
  • alternate
  • latest-version
  • predecessor-version
  • successor-version
| True | builtin | +| [Location](/system-security-plan/metadata/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Metadata/Action/Responsible Party/Link/@Rel +#### /System Security Plan/Metadata/Location/Address/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/metadata/action/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/metadata/location/address/@type) | . |
  • home
  • work
| True | builtin | -### /Assessment Plan/Metadata/Action/Responsible Party/Prop/@Name +#### /System Security Plan/Metadata/Location/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/metadata/action/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/metadata/location/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Metadata/Document Id/@Scheme +#### /System Security Plan/Metadata/Location/Prop/@Class -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/metadata/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type' and @value='data-center']/@class |
  • primary
  • alternate
| False | builtin | -### /Assessment Plan/Metadata/Link/@Rel +#### /System Security Plan/Metadata/Location/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/metadata) | link/@rel |
  • canonical
  • alternate
  • latest-version
  • predecessor-version
  • successor-version
| True | builtin | -| allowed-values | [Location](/assessment-plan/metadata/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | +| [Location](/system-security-plan/metadata/location/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Metadata/Location/Address/@Type +#### /System Security Plan/Metadata/Location/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/metadata/location/address/@type) | . |
  • home
  • work
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • data-center
| False | builtin | -### /Assessment Plan/Metadata/Location/Link/@Rel +#### /System Security Plan/Metadata/Location/Telephone Number/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/metadata/location/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/metadata/location/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | -### /Assessment Plan/Metadata/Location/Prop/@Class +#### /System Security Plan/Metadata/Party/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type' and @value='data-center']/@class |
  • primary
  • alternate
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/metadata/party/@type) | . |
  • person
  • organization
| False | builtin | -### /Assessment Plan/Metadata/Location/Prop/@Name +#### /System Security Plan/Metadata/Party/Address/@Type -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | -| allowed-values | [Location](/assessment-plan/metadata/location/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| address-type | [Location](/system-security-plan) | metadata/party/address/@type |
  • work
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| | [Location](/system-security-plan/metadata/party/address/@type) | . |
  • home
  • work
| True | builtin | -### /Assessment Plan/Metadata/Location/Prop/@Value +#### /System Security Plan/Metadata/Party/External Id/@Scheme -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • data-center
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/metadata/party/external-id/@scheme) | . |
  • http://orcid.org/
| True | builtin | -### /Assessment Plan/Metadata/Location/Telephone Number/@Type +#### /System Security Plan/Metadata/Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/metadata/location/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/metadata/party/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Metadata/Party/@Type +#### /System Security Plan/Metadata/Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/metadata/party/@type) | . |
  • person
  • organization
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/metadata/party) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • mail-stop
  • office
  • job-title
| False | builtin | +| [Location](/system-security-plan/metadata/party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Metadata/Party/Address/@Type +#### /System Security Plan/Metadata/Party/Telephone Number/@Type -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | address-type | [Location](/assessment-plan) | metadata/party/address/@type |
  • work
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -| allowed-values | | [Location](/assessment-plan/metadata/party/address/@type) | . |
  • home
  • work
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/metadata/party/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | -### /Assessment Plan/Metadata/Party/External Id/@Scheme +#### /System Security Plan/Metadata/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/metadata/party/external-id/@scheme) | . |
  • http://orcid.org/
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/metadata) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • keywords
| False | builtin | +| [Location](/system-security-plan/metadata/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Metadata/Party/Link/@Rel +#### /System Security Plan/Metadata/Responsible Party/@Role Id -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/metadata/party/link/@rel) | . |
  • reference
| True | builtin | +| allowed-metadata-responsibe-party-role-ids | [Location](/system-security-plan/metadata) | responsible-party/@role-id |
  • creator
  • prepared-by
  • prepared-for
  • content-approver
  • contact
| True | builtin | -### /Assessment Plan/Metadata/Party/Prop/@Name +#### /System Security Plan/Metadata/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/metadata/party) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • mail-stop
  • office
  • job-title
| False | builtin | -| allowed-values | [Location](/assessment-plan/metadata/party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/metadata/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Metadata/Party/Telephone Number/@Type +#### /System Security Plan/Metadata/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/metadata/party/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/metadata/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Metadata/Prop/@Name +#### /System Security Plan/Metadata/Revision/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/metadata) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • keywords
| False | builtin | -| allowed-values | [Location](/assessment-plan/metadata/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/metadata/revision) | link/@rel |
  • canonical
  • alternate
  • predecessor-version
  • successor-version
  • version-history
| True | builtin | +| [Location](/system-security-plan/metadata/revision/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Metadata/Responsible Party/@Role Id +#### /System Security Plan/Metadata/Revision/Prop/@Name -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | allowed-metadata-responsibe-party-role-ids | [Location](/assessment-plan/metadata) | responsible-party/@role-id |
  • creator
  • prepared-by
  • prepared-for
  • content-approver
  • contact
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/metadata/revision/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Metadata/Responsible Party/Link/@Rel +#### /System Security Plan/Metadata/Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/metadata/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/metadata/role/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Metadata/Responsible Party/Prop/@Name +#### /System Security Plan/Metadata/Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/metadata/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/metadata/role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Metadata/Revision/Link/@Rel +#### /System Security Plan/System Characteristics/Authorization Boundary/Diagram/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/metadata/revision) | link/@rel |
  • canonical
  • alternate
  • predecessor-version
  • successor-version
  • version-history
| True | builtin | -| allowed-values | [Location](/assessment-plan/metadata/revision/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/authorization-boundary/diagram) | link/@rel |
  • diagram
| True | builtin | +| [Location](/system-security-plan/system-characteristics/authorization-boundary/diagram/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Metadata/Revision/Prop/@Name +#### /System Security Plan/System Characteristics/Authorization Boundary/Diagram/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/metadata/revision/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/authorization-boundary/diagram/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Metadata/Role/Link/@Rel +#### /System Security Plan/System Characteristics/Authorization Boundary/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/metadata/role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/authorization-boundary/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Metadata/Role/Prop/@Name +#### /System Security Plan/System Characteristics/Authorization Boundary/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/metadata/role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/authorization-boundary/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Reviewed Controls/Control Objective Selection/Link/@Rel +#### /System Security Plan/System Characteristics/Data Flow/Diagram/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/reviewed-controls/control-objective-selection/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/data-flow/diagram) | link/@rel |
  • diagram
| True | builtin | +| [Location](/system-security-plan/system-characteristics/data-flow/diagram/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Reviewed Controls/Control Objective Selection/Prop/@Name +#### /System Security Plan/System Characteristics/Data Flow/Diagram/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/reviewed-controls/control-objective-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/data-flow/diagram/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Reviewed Controls/Control Selection/Link/@Rel +#### /System Security Plan/System Characteristics/Data Flow/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/reviewed-controls/control-selection/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/data-flow/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Reviewed Controls/Control Selection/Prop/@Name +#### /System Security Plan/System Characteristics/Data Flow/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/reviewed-controls/control-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/data-flow/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Reviewed Controls/Link/@Rel +#### /System Security Plan/System Characteristics/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/reviewed-controls/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Reviewed Controls/Prop/@Name +#### /System Security Plan/System Characteristics/Network Architecture/Diagram/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/reviewed-controls/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/network-architecture/diagram) | link/@rel |
  • diagram
| True | builtin | +| [Location](/system-security-plan/system-characteristics/network-architecture/diagram/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Task/@Type +#### /System Security Plan/System Characteristics/Network Architecture/Diagram/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/task/@type) | . |
  • milestone
  • action
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/network-architecture/diagram/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Task/Associated Activity/Link/@Rel +#### /System Security Plan/System Characteristics/Network Architecture/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/task/associated-activity/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/network-architecture/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Task/Associated Activity/Prop/@Name +#### /System Security Plan/System Characteristics/Network Architecture/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/task/associated-activity/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/network-architecture/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Task/Associated Activity/Responsible Role/Link/@Rel +#### /System Security Plan/System Characteristics/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/task/associated-activity/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • identity-assurance-level
  • authenticator-assurance-level
  • federation-assurance-level
| False | builtin | +| [Location](/system-security-plan/system-characteristics) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • cloud-deployment-model
  • cloud-service-model
| False | builtin | +| [Location](/system-security-plan/system-characteristics/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Task/Associated Activity/Responsible Role/Prop/@Name +#### /System Security Plan/System Characteristics/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/task/associated-activity/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| authorization-type | [Location](/system-security-plan) | system-characteristics/prop[@name='authorization-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • fedramp-jab
  • fedramp-agency
  • fedramp-li-saas
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| deployment-model | [Location](/system-security-plan) | system-characteristics/prop[@name='cloud-deployment-model'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • public-cloud
  • private-cloud
  • government-only-cloud
  • hybrid-cloud
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| authorization-type | [Location](/system-security-plan) | system-characteristics/prop[@name='authorization-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • fedramp-jab
  • fedramp-agency
  • fedramp-li-saas
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| cloud-service-model | [Location](/system-security-plan) | system-characteristics/prop[@name='cloud-service-model'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • iaas
  • paas
  • saas
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| | [Location](/system-security-plan/system-characteristics) | prop[@name=('identity-assurance-level','authenticator-assurance-level','federation-assurance-level')]/@value |
  • 1
  • 2
  • 3
| False | builtin | +| | [Location](/system-security-plan/system-characteristics) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='cloud-deployment-model']/@value |
  • public-cloud
  • private-cloud
  • community-cloud
  • hybrid-cloud
  • government-only-cloud
  • other
| False | builtin | +| | [Location](/system-security-plan/system-characteristics) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='cloud-service-model']/@value |
  • saas
  • paas
  • iaas
  • other
| False | builtin | -### /Assessment Plan/Task/Associated Activity/Subject/@Type +#### /System Security Plan/System Characteristics/Responsible Party/@Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/task/associated-activity/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics) | responsible-party/@role-id |
  • authorizing-official
  • authorizing-official-poc
  • system-owner
  • system-poc-management
  • system-poc-technical
  • system-poc-other
  • information-system-security-officer
  • privacy-poc
| True | builtin | -### /Assessment Plan/Task/Associated Activity/Subject/Exclude Subject/@Type +#### /System Security Plan/System Characteristics/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/task/associated-activity/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Task/Associated Activity/Subject/Exclude Subject/Link/@Rel +#### /System Security Plan/System Characteristics/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/task/associated-activity/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Task/Associated Activity/Subject/Exclude Subject/Prop/@Name +#### /System Security Plan/System Characteristics/Status/@State -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/task/associated-activity/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/status/@state) | . |
  • operational
  • under-development
  • under-major-modification
  • disposition
  • other
| False | builtin | -### /Assessment Plan/Task/Associated Activity/Subject/Include Subject/@Type +#### /System Security Plan/System Characteristics/System Id/@Identifier Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/task/associated-activity/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/system-id/@identifier-type) | . |
  • https://fedramp.gov
  • http://fedramp.gov/ns/oscal
  • https://ietf.org/rfc/rfc4122
  • http://ietf.org/rfc/rfc4122
| True | builtin | -### /Assessment Plan/Task/Associated Activity/Subject/Include Subject/Link/@Rel +#### /System Security Plan/System Characteristics/System Information/Information Type/Availability Impact/Base -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/task/associated-activity/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/system-information) | information-type/(confidentiality-impact|integrity-impact|availability-impact)/(base|selected) |
  • fips-199-low
  • fips-199-moderate
  • fips-199-high
| True | builtin | -### /Assessment Plan/Task/Associated Activity/Subject/Include Subject/Prop/@Name +#### /System Security Plan/System Characteristics/System Information/Information Type/Availability Impact/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/task/associated-activity/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/system-information/information-type/availability-impact/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Task/Associated Activity/Subject/Link/@Rel +#### /System Security Plan/System Characteristics/System Information/Information Type/Availability Impact/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/task/associated-activity/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/system-information/information-type/availability-impact/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Task/Associated Activity/Subject/Prop/@Name +#### /System Security Plan/System Characteristics/System Information/Information Type/Availability Impact/Selected -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/task/associated-activity/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/system-information) | information-type/(confidentiality-impact|integrity-impact|availability-impact)/(base|selected) |
  • fips-199-low
  • fips-199-moderate
  • fips-199-high
| True | builtin | -### /Assessment Plan/Task/Link/@Rel +#### /System Security Plan/System Characteristics/System Information/Information Type/Categorization/@System -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/task/link/@rel) | . |
  • reference
| True | builtin | +| information-type-system | [Location](/system-security-plan) | system-characteristics/system-information/information-type/categorization/@system |
  • https://doi.org/10.6028/NIST.SP.800-60v2r1
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| | [Location](/system-security-plan/system-characteristics/system-information/information-type/categorization/@system) | . |
  • http://doi.org/10.6028/NIST.SP.800-60v2r1
| True | builtin | -### /Assessment Plan/Task/Prop/@Name +#### /System Security Plan/System Characteristics/System Information/Information Type/Confidentiality Impact/Base -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/system-information) | information-type/(confidentiality-impact|integrity-impact|availability-impact)/(base|selected) |
  • fips-199-low
  • fips-199-moderate
  • fips-199-high
| True | builtin | -### /Assessment Plan/Task/Responsible Role/Link/@Rel +#### /System Security Plan/System Characteristics/System Information/Information Type/Confidentiality Impact/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/task/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/system-information/information-type/confidentiality-impact/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Task/Responsible Role/Prop/@Name +#### /System Security Plan/System Characteristics/System Information/Information Type/Confidentiality Impact/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/task/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/system-information/information-type/confidentiality-impact/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Task/Subject/@Type +#### /System Security Plan/System Characteristics/System Information/Information Type/Confidentiality Impact/Selected -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/system-information) | information-type/(confidentiality-impact|integrity-impact|availability-impact)/(base|selected) |
  • fips-199-low
  • fips-199-moderate
  • fips-199-high
| True | builtin | -### /Assessment Plan/Task/Subject/Exclude Subject/@Type +#### /System Security Plan/System Characteristics/System Information/Information Type/Integrity Impact/Base -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/system-information) | information-type/(confidentiality-impact|integrity-impact|availability-impact)/(base|selected) |
  • fips-199-low
  • fips-199-moderate
  • fips-199-high
| True | builtin | -### /Assessment Plan/Task/Subject/Exclude Subject/Link/@Rel +#### /System Security Plan/System Characteristics/System Information/Information Type/Integrity Impact/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/system-information/information-type/integrity-impact/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Task/Subject/Exclude Subject/Prop/@Name +#### /System Security Plan/System Characteristics/System Information/Information Type/Integrity Impact/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/system-information/information-type/integrity-impact/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Task/Subject/Include Subject/@Type +#### /System Security Plan/System Characteristics/System Information/Information Type/Integrity Impact/Selected -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/system-information) | information-type/(confidentiality-impact|integrity-impact|availability-impact)/(base|selected) |
  • fips-199-low
  • fips-199-moderate
  • fips-199-high
| True | builtin | -### /Assessment Plan/Task/Subject/Include Subject/Link/@Rel +#### /System Security Plan/System Characteristics/System Information/Information Type/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/system-information/information-type/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Task/Subject/Include Subject/Prop/@Name +#### /System Security Plan/System Characteristics/System Information/Information Type/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/system-information/information-type/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Task/Subject/Link/@Rel +#### /System Security Plan/System Characteristics/System Information/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/task/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/system-information) | link/@rel |
  • privacy-impact-assessment
| True | builtin | +| [Location](/system-security-plan/system-characteristics/system-information/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Task/Subject/Prop/@Name +#### /System Security Plan/System Characteristics/System Information/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/system-information) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • privacy-designation
| False | builtin | +| [Location](/system-security-plan/system-characteristics/system-information/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Plan/Task/Timing/At Frequency/@Unit +#### /System Security Plan/System Characteristics/System Information/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/task/timing/at-frequency/@unit) | . |
  • seconds
  • minutes
  • hours
  • days
  • months
  • years
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-characteristics/system-information) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='privacy-designation']/@value |
  • yes
  • no
| False | builtin | -### /Assessment Plan/Terms And Conditions/Part/@Name +#### /System Security Plan/System Implementation/Component/@Type -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/terms-and-conditions) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • rules-of-engagement
  • disclosures
  • assessment-inclusions
  • assessment-exclusions
  • results-delivery
  • assumptions
  • methodology
| False | builtin | -| allowed-values | [Location](/assessment-plan/terms-and-conditions/part/@name) | . |
  • asset
  • method
  • objective
| True | builtin | +| component-type | [Location](/system-security-plan) | system-implementation/component/@type |
  • interconnection
  • software
  • hardware
  • service
  • policy
  • physical
  • process-procedure
  • plan
  • guidance
  • standard
  • validation
  • this-system
  • system
  • network
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| | [Location](/system-security-plan/system-implementation/component/@type) | . |
  • this-system
  • system
  • interconnection
  • software
  • hardware
  • service
  • policy
  • physical
  • process-procedure
  • plan
  • guidance
  • standard
  • validation
  • network
| True | builtin | -### /Assessment Plan/Terms And Conditions/Part/Link/@Rel +#### /System Security Plan/System Implementation/Component/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/terms-and-conditions/part/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-implementation/component) | link/@rel |
  • depends-on
  • validation
  • proof-of-compliance
  • baseline-template
  • uses-service
  • system-security-plan
  • uses-network
  • imported-from
| True | builtin | +| [Location](/system-security-plan/system-implementation/component) | (.)[@type='validation']/link/@rel |
  • validation-details
| True | builtin | +| [Location](/system-security-plan/system-implementation/component) | (.)[@type='service']/link/@rel |
  • provided-by
  • used-by
| True | builtin | +| [Location](/system-security-plan/system-implementation/component) | (.)[@type='interconnection']/link/@rel |
  • isa-agreement
| True | builtin | +| [Location](/system-security-plan/system-implementation/component/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Plan/Terms And Conditions/Part/Prop/@Name +#### /System Security Plan/System Implementation/Component/Prop/@Class -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/terms-and-conditions/part) | .[@name='objective']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • method
| False | builtin | -| allowed-values | [Location](/assessment-plan/terms-and-conditions/part/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -| allowed-values | [Location](/assessment-plan/terms-and-conditions/part/part) | .[@name='objective']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • method
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-implementation/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('ipv4-address','ipv6-address')]/@class |
  • local
  • remote
| False | builtin | -### /Assessment Plan/Terms And Conditions/Part/Prop/@Value +#### /System Security Plan/System Implementation/Component/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-plan/terms-and-conditions/part) | .[@name='objective']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='method']/@value |
  • INTERVIEW
  • EXAMINE
  • TEST
| False | builtin | -| allowed-values | [Location](/assessment-plan/terms-and-conditions/part/part) | .[@name='objective']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='method']/@value |
  • INTERVIEW
  • EXAMINE
  • TEST
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-implementation/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • implementation-point
  • leveraged-authorization-uuid
  • inherited-uuid
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
| False | builtin | +| [Location](/system-security-plan/system-implementation/component) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | +| [Location](/system-security-plan/system-implementation/component) | (.)[@type='software']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • software-identifier
| False | builtin | +| [Location](/system-security-plan/system-implementation/component) | (.)[@type='interconnection']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • isa-title
  • isa-date
  • isa-remote-system-name
  • ipv4-address
  • ipv6-address
  • direction
| False | builtin | +| [Location](/system-security-plan/system-implementation/component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Back Matter/Resource/Citation/Link/@Rel +#### /System Security Plan/System Implementation/Component/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/back-matter/resource/citation/link/@rel) | . |
  • reference
| True | builtin | +| interconnection-direction | [Location](/system-security-plan) | system-implementation/component[@type='interconnection']/prop[@name='interconnection-direction'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • in
  • out
  • in/out
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| interconnection-security | [Location](/system-security-plan) | system-implementation/component[@type='interconnection']/prop[@name='interconnection-security'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • ipsec
  • vpn
  • tls
  • dtls
  • certificate
  • secure-file-transfer
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| scan-type | [Location](/system-security-plan) | system-implementation//prop[@name='scan-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • infrastructure
  • database
  • web
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| | [Location](/system-security-plan/system-implementation) | (component | inventory-item)/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='allows-authenticated-scan']/@value |
  • yes
  • no
| False | builtin | +| | [Location](/system-security-plan/system-implementation/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | +| | [Location](/system-security-plan/system-implementation/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='allows-authenticated-scan']/@value |
  • yes
  • no
| False | builtin | +| | [Location](/system-security-plan/system-implementation/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='public']/@value |
  • yes
  • no
| False | builtin | +| | [Location](/system-security-plan/system-implementation/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='virtual']/@value |
  • yes
  • no
| False | builtin | +| | [Location](/system-security-plan/system-implementation/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='implementation-point']/@value |
  • internal
  • external
| False | builtin | +| | [Location](/system-security-plan/system-implementation/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='direction']/@value |
  • incoming
  • outgoing
| False | builtin | -### /Assessment Results/Back Matter/Resource/Citation/Prop/@Name +#### /System Security Plan/System Implementation/Component/Protocol/Port Range/@Transport -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/back-matter/resource/citation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-implementation/component/protocol/port-range/@transport) | . |
  • TCP
  • UDP
| False | builtin | -### /Assessment Results/Back Matter/Resource/Document Id/@Scheme +#### /System Security Plan/System Implementation/Component/Responsible Role/@Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/back-matter/resource/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-implementation/component) | responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | +| [Location](/system-security-plan/system-implementation/component) | (.)[@type='interconnection']/responsible-role/@role-id |
  • isa-poc-local
  • isa-poc-remote
  • isa-authorizing-official-local
  • isa-authorizing-official-remote
| True | builtin | -### /Assessment Results/Back Matter/Resource/Prop/@Name +#### /System Security Plan/System Implementation/Component/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
  • version
  • published
| False | builtin | -| allowed-values | [Location](/assessment-results/back-matter/resource/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-implementation/component/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Back Matter/Resource/Prop/@Value +#### /System Security Plan/System Implementation/Component/Responsible Role/Prop/@Name -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | attachment-type | [Location](/assessment-results) | back-matter/resource/prop[@name='type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • law
  • regulation
  • standard
  • guidance
  • policy
  • procedure
  • guide
  • rules-of-behavior
  • plan
  • system-security-plan
  • artifact
  • evidence
  • screen-shot
  • image
  • tool-report
  • raw-tool-output
  • interview-notes
  • questionnaire
  • report
  • fedramp-citations
  • fedramp-acronyms
  • fedramp-logo
  • separation-of-duties-matrix
  • logo
  • personally-identifiable-information
  • agreement
  • isa-agreement
  • incident-response-plan
  • information-security-policies-and-procedures
  • users-guide
  • privacy-impact-assessment
  • information-system-contingency-plan
  • configuration-management-plan
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -| allowed-values | | [Location](/assessment-results/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • logo
  • image
  • screen-shot
  • law
  • regulation
  • standard
  • external-guidance
  • acronyms
  • citation
  • policy
  • procedure
  • system-guide
  • users-guide
  • administrators-guide
  • rules-of-behavior
  • plan
  • artifact
  • evidence
  • tool-output
  • raw-data
  • interview-notes
  • questionnaire
  • report
  • agreement
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-implementation/component/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Back Matter/Resource/Rlink/Hash/@Algorithm +#### /System Security Plan/System Implementation/Component/Responsible Role/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/back-matter/resource/rlink/hash/@algorithm) | . |
  • SHA-224
  • SHA-256
  • SHA-384
  • SHA-512
  • SHA3-224
  • SHA3-256
  • SHA3-384
  • SHA3-512
| True | builtin | +| scan-type | [Location](/system-security-plan) | system-implementation//prop[@name='scan-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • infrastructure
  • database
  • web
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -### /Assessment Results/Local Definitions/Activity/Link/@Rel +#### /System Security Plan/System Implementation/Component/Status/@State -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/local-definitions/activity/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-implementation/component/status/@state) | . |
  • under-development
  • operational
  • disposition
  • other
| False | builtin | -### /Assessment Results/Local Definitions/Activity/Prop/@Name +#### /System Security Plan/System Implementation/Inventory Item/Implemented Component/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/local-definitions/activity) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • method
| False | builtin | -| allowed-values | [Location](/assessment-results/local-definitions/activity/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-implementation/inventory-item/implemented-component/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Local Definitions/Activity/Prop/@Value +#### /System Security Plan/System Implementation/Inventory Item/Implemented Component/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/local-definitions/activity) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='method']/@value |
  • INTERVIEW
  • EXAMINE
  • TEST
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-implementation/inventory-item/implemented-component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
| False | builtin | +| [Location](/system-security-plan/system-implementation/inventory-item/implemented-component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Local Definitions/Activity/Related Controls/Control Objective Selection/Link/@Rel +#### /System Security Plan/System Implementation/Inventory Item/Implemented Component/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/local-definitions/activity/related-controls/control-objective-selection/link/@rel) | . |
  • reference
| True | builtin | +| scan-type | [Location](/system-security-plan) | system-implementation//prop[@name='scan-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • infrastructure
  • database
  • web
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -### /Assessment Results/Local Definitions/Activity/Related Controls/Control Objective Selection/Prop/@Name +#### /System Security Plan/System Implementation/Inventory Item/Implemented Component/Responsible Party/@Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/local-definitions/activity/related-controls/control-objective-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-implementation/inventory-item/implemented-component) | responsible-party/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
| True | builtin | -### /Assessment Results/Local Definitions/Activity/Related Controls/Control Selection/Link/@Rel +#### /System Security Plan/System Implementation/Inventory Item/Implemented Component/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/local-definitions/activity/related-controls/control-selection/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-implementation/inventory-item/implemented-component/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Local Definitions/Activity/Related Controls/Control Selection/Prop/@Name +#### /System Security Plan/System Implementation/Inventory Item/Implemented Component/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/local-definitions/activity/related-controls/control-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-implementation/inventory-item/implemented-component/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Local Definitions/Activity/Related Controls/Link/@Rel +#### /System Security Plan/System Implementation/Inventory Item/Implemented Component/Responsible Party/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/local-definitions/activity/related-controls/link/@rel) | . |
  • reference
| True | builtin | +| scan-type | [Location](/system-security-plan) | system-implementation//prop[@name='scan-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • infrastructure
  • database
  • web
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -### /Assessment Results/Local Definitions/Activity/Related Controls/Prop/@Name +#### /System Security Plan/System Implementation/Inventory Item/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/local-definitions/activity/related-controls/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-implementation/inventory-item) | link/@rel |
  • baseline-template
| True | builtin | +| [Location](/system-security-plan/system-implementation/inventory-item/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Local Definitions/Activity/Responsible Role/Link/@Rel +#### /System Security Plan/System Implementation/Inventory Item/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/local-definitions/activity/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-implementation/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • ipv4-address
  • ipv6-address
  • fqdn
  • uri
  • serial-number
  • netbios-name
  • mac-address
  • physical-location
  • is-scanned
  • hardware-model
  • os-name
  • os-version
  • software-name
  • software-version
  • software-patch-level
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
| False | builtin | +| [Location](/system-security-plan/system-implementation/inventory-item) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | +| [Location](/system-security-plan/system-implementation/inventory-item/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Local Definitions/Activity/Responsible Role/Prop/@Name +#### /System Security Plan/System Implementation/Inventory Item/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/local-definitions/activity/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| scan-type | [Location](/system-security-plan) | system-implementation//prop[@name='scan-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • infrastructure
  • database
  • web
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| | [Location](/system-security-plan/system-implementation) | (component | inventory-item)/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='allows-authenticated-scan']/@value |
  • yes
  • no
| False | builtin | +| | [Location](/system-security-plan/system-implementation/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | +| | [Location](/system-security-plan/system-implementation/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='is-scanned']/@value |
  • yes
  • no
| False | builtin | -### /Assessment Results/Local Definitions/Activity/Step/Link/@Rel +#### /System Security Plan/System Implementation/Inventory Item/Responsible Party/@Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/local-definitions/activity/step/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-implementation/inventory-item) | responsible-party/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | -### /Assessment Results/Local Definitions/Activity/Step/Prop/@Name +#### /System Security Plan/System Implementation/Inventory Item/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/local-definitions/activity/step/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-implementation/inventory-item/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Local Definitions/Activity/Step/Responsible Role/Link/@Rel +#### /System Security Plan/System Implementation/Inventory Item/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/local-definitions/activity/step/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-implementation/inventory-item/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Local Definitions/Activity/Step/Responsible Role/Prop/@Name +#### /System Security Plan/System Implementation/Inventory Item/Responsible Party/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/local-definitions/activity/step/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| scan-type | [Location](/system-security-plan) | system-implementation//prop[@name='scan-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • infrastructure
  • database
  • web
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -### /Assessment Results/Local Definitions/Activity/Step/Reviewed Controls/Control Objective Selection/Link/@Rel +#### /System Security Plan/System Implementation/Leveraged Authorization/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/local-definitions/activity/step/reviewed-controls/control-objective-selection/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-implementation/leveraged-authorization) | link/@rel |
  • system-security-plan
| True | builtin | +| [Location](/system-security-plan/system-implementation/leveraged-authorization/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Local Definitions/Activity/Step/Reviewed Controls/Control Objective Selection/Prop/@Name +#### /System Security Plan/System Implementation/Leveraged Authorization/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/local-definitions/activity/step/reviewed-controls/control-objective-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-implementation/leveraged-authorization/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Local Definitions/Activity/Step/Reviewed Controls/Control Selection/Link/@Rel +#### /System Security Plan/System Implementation/Leveraged Authorization/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/local-definitions/activity/step/reviewed-controls/control-selection/link/@rel) | . |
  • reference
| True | builtin | +| scan-type | [Location](/system-security-plan) | system-implementation//prop[@name='scan-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • infrastructure
  • database
  • web
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -### /Assessment Results/Local Definitions/Activity/Step/Reviewed Controls/Control Selection/Prop/@Name +#### /System Security Plan/System Implementation/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/local-definitions/activity/step/reviewed-controls/control-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-implementation/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Local Definitions/Activity/Step/Reviewed Controls/Link/@Rel +#### /System Security Plan/System Implementation/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/local-definitions/activity/step/reviewed-controls/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-implementation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Local Definitions/Activity/Step/Reviewed Controls/Prop/@Name +#### /System Security Plan/System Implementation/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/local-definitions/activity/step/reviewed-controls/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| scan-type | [Location](/system-security-plan) | system-implementation//prop[@name='scan-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • infrastructure
  • database
  • web
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -### /Assessment Results/Local Definitions/Objectives And Methods/Link/@Rel +#### /System Security Plan/System Implementation/User/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/local-definitions/objectives-and-methods/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-implementation/user/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Local Definitions/Objectives And Methods/Part/@Name +#### /System Security Plan/System Implementation/User/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/local-definitions/objectives-and-methods) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • objective
  • assessment
  • assessment-objective
  • assessment-method
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-implementation/user) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
  • privilege-level
| False | builtin | +| [Location](/system-security-plan/system-implementation/user/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Local Definitions/Objectives And Methods/Part/Link/@Rel +#### /System Security Plan/System Implementation/User/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/local-definitions/objectives-and-methods/part/link/@rel) | . |
  • reference
| True | builtin | +| scan-type | [Location](/system-security-plan) | system-implementation//prop[@name='scan-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • infrastructure
  • database
  • web
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| user-type | [Location](/system-security-plan) | system-implementation/user/prop[@name='type']/@value |
  • internal
  • external
  • privileged
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| privilege-level | [Location](/system-security-plan) | system-implementation/user/prop[@name='privilege-level']/@value |
  • read
  • read-write
  • write
  • no-access
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| | [Location](/system-security-plan/system-implementation/user) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • internal
  • external
  • general-public
| False | builtin | +| | [Location](/system-security-plan/system-implementation/user) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='privilege-level']/@value |
  • privileged
  • non-privileged
  • no-logical-access
| False | builtin | -### /Assessment Results/Local Definitions/Objectives And Methods/Part/Prop/@Name +#### /System Security Plan/System Implementation/User/Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/local-definitions/objectives-and-methods/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | -| allowed-values | [Location](/assessment-results/local-definitions/objectives-and-methods/part/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -| allowed-values | [Location](/assessment-results/local-definitions/objectives-and-methods/part/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/system-security-plan/system-implementation/user) | role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
| True | builtin | -### /Assessment Results/Local Definitions/Objectives And Methods/Prop/@Name +--- -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/local-definitions/objectives-and-methods/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +### SAP Allowed Values -### /Assessment Results/Metadata/Action/Link/@Rel +#### /Assessment Plan/Assessment Assets/Assessment Platform/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/metadata/action/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/assessment-assets/assessment-platform/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Metadata/Action/Prop/@Name +#### /Assessment Plan/Assessment Assets/Assessment Platform/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/metadata/action/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/assessment-assets/assessment-platform/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Metadata/Action/Responsible Party/Link/@Rel +#### /Assessment Plan/Assessment Assets/Assessment Platform/Uses Component/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/metadata/action/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/assessment-assets/assessment-platform/uses-component/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Metadata/Action/Responsible Party/Prop/@Name +#### /Assessment Plan/Assessment Assets/Assessment Platform/Uses Component/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/metadata/action/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/assessment-assets/assessment-platform/uses-component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Metadata/Document Id/@Scheme +#### /Assessment Plan/Assessment Assets/Assessment Platform/Uses Component/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/metadata/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/assessment-assets/assessment-platform/uses-component/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Metadata/Link/@Rel +#### /Assessment Plan/Assessment Assets/Assessment Platform/Uses Component/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/metadata) | link/@rel |
  • canonical
  • alternate
  • latest-version
  • predecessor-version
  • successor-version
| True | builtin | -| allowed-values | [Location](/assessment-results/metadata/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/assessment-assets/assessment-platform/uses-component/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Metadata/Location/Address/@Type +#### /Assessment Plan/Assessment Assets/Component/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/metadata/location/address/@type) | . |
  • home
  • work
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/assessment-assets/component/@type) | . |
  • this-system
  • system
  • interconnection
  • software
  • hardware
  • service
  • policy
  • physical
  • process-procedure
  • plan
  • guidance
  • standard
  • validation
  • network
| True | builtin | -### /Assessment Results/Metadata/Location/Link/@Rel +#### /Assessment Plan/Assessment Assets/Component/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/metadata/location/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/assessment-assets/component) | link/@rel |
  • depends-on
  • validation
  • proof-of-compliance
  • baseline-template
  • uses-service
  • system-security-plan
  • uses-network
  • imported-from
| True | builtin | +| [Location](/assessment-plan/assessment-assets/component) | (.)[@type='validation']/link/@rel |
  • validation-details
| True | builtin | +| [Location](/assessment-plan/assessment-assets/component) | (.)[@type='service']/link/@rel |
  • provided-by
  • used-by
| True | builtin | +| [Location](/assessment-plan/assessment-assets/component) | (.)[@type='interconnection']/link/@rel |
  • isa-agreement
| True | builtin | +| [Location](/assessment-plan/assessment-assets/component/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Metadata/Location/Prop/@Class +#### /Assessment Plan/Assessment Assets/Component/Prop/@Class -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type' and @value='data-center']/@class |
  • primary
  • alternate
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('ipv4-address','ipv6-address')]/@class |
  • local
  • remote
| False | builtin | -### /Assessment Results/Metadata/Location/Prop/@Name +#### /Assessment Plan/Assessment Assets/Component/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | -| allowed-values | [Location](/assessment-results/metadata/location/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • implementation-point
  • leveraged-authorization-uuid
  • inherited-uuid
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
| False | builtin | +| [Location](/assessment-plan/assessment-assets/component) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | +| [Location](/assessment-plan/assessment-assets/component) | (.)[@type='software']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • software-identifier
| False | builtin | +| [Location](/assessment-plan/assessment-assets/component) | (.)[@type='interconnection']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • isa-title
  • isa-date
  • isa-remote-system-name
  • ipv4-address
  • ipv6-address
  • direction
| False | builtin | +| [Location](/assessment-plan/assessment-assets/component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Metadata/Location/Prop/@Value +#### /Assessment Plan/Assessment Assets/Component/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • data-center
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | +| [Location](/assessment-plan/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='allows-authenticated-scan']/@value |
  • yes
  • no
| False | builtin | +| [Location](/assessment-plan/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='public']/@value |
  • yes
  • no
| False | builtin | +| [Location](/assessment-plan/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='virtual']/@value |
  • yes
  • no
| False | builtin | +| [Location](/assessment-plan/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='implementation-point']/@value |
  • internal
  • external
| False | builtin | +| [Location](/assessment-plan/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='direction']/@value |
  • incoming
  • outgoing
| False | builtin | -### /Assessment Results/Metadata/Location/Telephone Number/@Type +#### /Assessment Plan/Assessment Assets/Component/Protocol/Port Range/@Transport -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/metadata/location/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/assessment-assets/component/protocol/port-range/@transport) | . |
  • TCP
  • UDP
| False | builtin | -### /Assessment Results/Metadata/Party/@Type +#### /Assessment Plan/Assessment Assets/Component/Responsible Role/@Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/metadata/party/@type) | . |
  • person
  • organization
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/assessment-assets/component) | responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | +| [Location](/assessment-plan/assessment-assets/component) | (.)[@type='interconnection']/responsible-role/@role-id |
  • isa-poc-local
  • isa-poc-remote
  • isa-authorizing-official-local
  • isa-authorizing-official-remote
| True | builtin | -### /Assessment Results/Metadata/Party/Address/@Type +#### /Assessment Plan/Assessment Assets/Component/Responsible Role/Link/@Rel -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | address-type | [Location](/assessment-results) | metadata/party/address/@type |
  • work
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -| allowed-values | | [Location](/assessment-results/metadata/party/address/@type) | . |
  • home
  • work
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/assessment-assets/component/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Metadata/Party/External Id/@Scheme +#### /Assessment Plan/Assessment Assets/Component/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/metadata/party/external-id/@scheme) | . |
  • http://orcid.org/
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/assessment-assets/component/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Metadata/Party/Link/@Rel +#### /Assessment Plan/Assessment Assets/Component/Status/@State -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/metadata/party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/assessment-assets/component/status/@state) | . |
  • under-development
  • operational
  • disposition
  • other
| False | builtin | -### /Assessment Results/Metadata/Party/Prop/@Name +#### /Assessment Plan/Assessment Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/metadata/party) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • mail-stop
  • office
  • job-title
| False | builtin | -| allowed-values | [Location](/assessment-results/metadata/party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/assessment-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Assessment Results/Metadata/Party/Telephone Number/@Type +#### /Assessment Plan/Assessment Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/metadata/party/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/assessment-subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Assessment Results/Metadata/Prop/@Name +#### /Assessment Plan/Assessment Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/metadata) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • keywords
| False | builtin | -| allowed-values | [Location](/assessment-results/metadata/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/assessment-subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Metadata/Responsible Party/@Role Id +#### /Assessment Plan/Assessment Subject/Exclude Subject/Prop/@Name -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | allowed-metadata-responsibe-party-role-ids | [Location](/assessment-results/metadata) | responsible-party/@role-id |
  • creator
  • prepared-by
  • prepared-for
  • content-approver
  • contact
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/assessment-subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Metadata/Responsible Party/Link/@Rel +#### /Assessment Plan/Assessment Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/metadata/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/assessment-subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Assessment Results/Metadata/Responsible Party/Prop/@Name +#### /Assessment Plan/Assessment Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/metadata/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/assessment-subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Metadata/Revision/Link/@Rel +#### /Assessment Plan/Assessment Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/metadata/revision) | link/@rel |
  • canonical
  • alternate
  • predecessor-version
  • successor-version
  • version-history
| True | builtin | -| allowed-values | [Location](/assessment-results/metadata/revision/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/assessment-subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Metadata/Revision/Prop/@Name +#### /Assessment Plan/Assessment Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/metadata/revision/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/assessment-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Metadata/Role/Link/@Rel +#### /Assessment Plan/Assessment Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/metadata/role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/assessment-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Metadata/Role/Prop/@Name +#### /Assessment Plan/Back Matter/Resource/Citation/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/metadata/role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/back-matter/resource/citation/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Assessment Log/Entry/Link/@Rel +#### /Assessment Plan/Back Matter/Resource/Citation/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/assessment-log/entry/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/back-matter/resource/citation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Assessment Log/Entry/Prop/@Name +#### /Assessment Plan/Back Matter/Resource/Document Id/@Scheme -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/assessment-log/entry/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/back-matter/resource/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | -### /Assessment Results/Result/Assessment Log/Entry/Related Task/Identified Subject/Subject/@Type +#### /Assessment Plan/Back Matter/Resource/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
  • version
  • published
| False | builtin | +| [Location](/assessment-plan/back-matter/resource/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Assessment Log/Entry/Related Task/Identified Subject/Subject/Exclude Subject/@Type +#### /Assessment Plan/Back Matter/Resource/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| attachment-type | [Location](/assessment-plan) | back-matter/resource/prop[@name='type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • law
  • regulation
  • standard
  • guidance
  • policy
  • procedure
  • guide
  • rules-of-behavior
  • plan
  • system-security-plan
  • artifact
  • evidence
  • screen-shot
  • image
  • tool-report
  • raw-tool-output
  • interview-notes
  • questionnaire
  • report
  • fedramp-citations
  • fedramp-acronyms
  • fedramp-logo
  • separation-of-duties-matrix
  • logo
  • personally-identifiable-information
  • agreement
  • isa-agreement
  • incident-response-plan
  • information-security-policies-and-procedures
  • users-guide
  • privacy-impact-assessment
  • information-system-contingency-plan
  • configuration-management-plan
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| | [Location](/assessment-plan/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • logo
  • image
  • screen-shot
  • law
  • regulation
  • standard
  • external-guidance
  • acronyms
  • citation
  • policy
  • procedure
  • system-guide
  • users-guide
  • administrators-guide
  • rules-of-behavior
  • plan
  • artifact
  • evidence
  • tool-output
  • raw-data
  • interview-notes
  • questionnaire
  • report
  • agreement
| False | builtin | -### /Assessment Results/Result/Assessment Log/Entry/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel +#### /Assessment Plan/Back Matter/Resource/Rlink/Hash/@Algorithm -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/back-matter/resource/rlink/hash/@algorithm) | . |
  • SHA-224
  • SHA-256
  • SHA-384
  • SHA-512
  • SHA3-224
  • SHA3-256
  • SHA3-384
  • SHA3-512
| True | builtin | -### /Assessment Results/Result/Assessment Log/Entry/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name +#### /Assessment Plan/Local Definitions/Activity/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/activity/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Assessment Log/Entry/Related Task/Identified Subject/Subject/Include Subject/@Type +#### /Assessment Plan/Local Definitions/Activity/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/activity) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • method
| False | builtin | +| [Location](/assessment-plan/local-definitions/activity/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Assessment Log/Entry/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel +#### /Assessment Plan/Local Definitions/Activity/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/activity) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='method']/@value |
  • INTERVIEW
  • EXAMINE
  • TEST
| False | builtin | -### /Assessment Results/Result/Assessment Log/Entry/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name +#### /Assessment Plan/Local Definitions/Activity/Related Controls/Control Objective Selection/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/activity/related-controls/control-objective-selection/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Assessment Log/Entry/Related Task/Identified Subject/Subject/Link/@Rel +#### /Assessment Plan/Local Definitions/Activity/Related Controls/Control Objective Selection/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/activity/related-controls/control-objective-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Assessment Log/Entry/Related Task/Identified Subject/Subject/Prop/@Name +#### /Assessment Plan/Local Definitions/Activity/Related Controls/Control Selection/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/activity/related-controls/control-selection/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Assessment Log/Entry/Related Task/Link/@Rel +#### /Assessment Plan/Local Definitions/Activity/Related Controls/Control Selection/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/activity/related-controls/control-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Assessment Log/Entry/Related Task/Prop/@Name +#### /Assessment Plan/Local Definitions/Activity/Related Controls/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/activity/related-controls/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Assessment Log/Entry/Related Task/Responsible Party/Link/@Rel +#### /Assessment Plan/Local Definitions/Activity/Related Controls/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/activity/related-controls/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Assessment Log/Entry/Related Task/Responsible Party/Prop/@Name +#### /Assessment Plan/Local Definitions/Activity/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/activity/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Assessment Log/Entry/Related Task/Subject/@Type +#### /Assessment Plan/Local Definitions/Activity/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/activity/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Assessment Log/Entry/Related Task/Subject/Exclude Subject/@Type +#### /Assessment Plan/Local Definitions/Activity/Step/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/activity/step/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Assessment Log/Entry/Related Task/Subject/Exclude Subject/Link/@Rel +#### /Assessment Plan/Local Definitions/Activity/Step/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/activity/step/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Assessment Log/Entry/Related Task/Subject/Exclude Subject/Prop/@Name +#### /Assessment Plan/Local Definitions/Activity/Step/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/activity/step/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Assessment Log/Entry/Related Task/Subject/Include Subject/@Type +#### /Assessment Plan/Local Definitions/Activity/Step/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/activity/step/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Assessment Log/Entry/Related Task/Subject/Include Subject/Link/@Rel +#### /Assessment Plan/Local Definitions/Activity/Step/Reviewed Controls/Control Objective Selection/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/activity/step/reviewed-controls/control-objective-selection/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Assessment Log/Entry/Related Task/Subject/Include Subject/Prop/@Name +#### /Assessment Plan/Local Definitions/Activity/Step/Reviewed Controls/Control Objective Selection/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/activity/step/reviewed-controls/control-objective-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Assessment Log/Entry/Related Task/Subject/Link/@Rel +#### /Assessment Plan/Local Definitions/Activity/Step/Reviewed Controls/Control Selection/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/activity/step/reviewed-controls/control-selection/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Assessment Log/Entry/Related Task/Subject/Prop/@Name +#### /Assessment Plan/Local Definitions/Activity/Step/Reviewed Controls/Control Selection/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/assessment-log/entry/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/activity/step/reviewed-controls/control-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Attestation/Part/@Name +#### /Assessment Plan/Local Definitions/Activity/Step/Reviewed Controls/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/attestation/part/@name) | . |
  • asset
  • method
  • objective
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/activity/step/reviewed-controls/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Attestation/Part/Link/@Rel +#### /Assessment Plan/Local Definitions/Activity/Step/Reviewed Controls/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/attestation/part/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/activity/step/reviewed-controls/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Attestation/Part/Prop/@Name +#### /Assessment Plan/Local Definitions/Component/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/attestation/part) | .[@name='objective']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • method
| False | builtin | -| allowed-values | [Location](/assessment-results/result/attestation/part/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -| allowed-values | [Location](/assessment-results/result/attestation/part/part) | .[@name='objective']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • method
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/component/@type) | . |
  • this-system
  • system
  • interconnection
  • software
  • hardware
  • service
  • policy
  • physical
  • process-procedure
  • plan
  • guidance
  • standard
  • validation
  • network
| True | builtin | -### /Assessment Results/Result/Attestation/Part/Prop/@Value +#### /Assessment Plan/Local Definitions/Component/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/attestation/part) | .[@name='objective']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='method']/@value |
  • INTERVIEW
  • EXAMINE
  • TEST
| False | builtin | -| allowed-values | [Location](/assessment-results/result/attestation/part/part) | .[@name='objective']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='method']/@value |
  • INTERVIEW
  • EXAMINE
  • TEST
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/component) | link/@rel |
  • depends-on
  • validation
  • proof-of-compliance
  • baseline-template
  • uses-service
  • system-security-plan
  • uses-network
  • imported-from
| True | builtin | +| [Location](/assessment-plan/local-definitions/component) | (.)[@type='validation']/link/@rel |
  • validation-details
| True | builtin | +| [Location](/assessment-plan/local-definitions/component) | (.)[@type='service']/link/@rel |
  • provided-by
  • used-by
| True | builtin | +| [Location](/assessment-plan/local-definitions/component) | (.)[@type='interconnection']/link/@rel |
  • isa-agreement
| True | builtin | +| [Location](/assessment-plan/local-definitions/component/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Attestation/Responsible Party/Link/@Rel +#### /Assessment Plan/Local Definitions/Component/Prop/@Class -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/attestation/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('ipv4-address','ipv6-address')]/@class |
  • local
  • remote
| False | builtin | -### /Assessment Results/Result/Attestation/Responsible Party/Prop/@Name +#### /Assessment Plan/Local Definitions/Component/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/attestation/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • implementation-point
  • leveraged-authorization-uuid
  • inherited-uuid
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
| False | builtin | +| [Location](/assessment-plan/local-definitions/component) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | +| [Location](/assessment-plan/local-definitions/component) | (.)[@type='software']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • software-identifier
| False | builtin | +| [Location](/assessment-plan/local-definitions/component) | (.)[@type='interconnection']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • isa-title
  • isa-date
  • isa-remote-system-name
  • ipv4-address
  • ipv6-address
  • direction
| False | builtin | +| [Location](/assessment-plan/local-definitions/component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Finding/Link/@Rel +#### /Assessment Plan/Local Definitions/Component/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | +| [Location](/assessment-plan/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='allows-authenticated-scan']/@value |
  • yes
  • no
| False | builtin | +| [Location](/assessment-plan/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='public']/@value |
  • yes
  • no
| False | builtin | +| [Location](/assessment-plan/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='virtual']/@value |
  • yes
  • no
| False | builtin | +| [Location](/assessment-plan/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='implementation-point']/@value |
  • internal
  • external
| False | builtin | +| [Location](/assessment-plan/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='direction']/@value |
  • incoming
  • outgoing
| False | builtin | -### /Assessment Results/Result/Finding/Origin/Actor/@Type +#### /Assessment Plan/Local Definitions/Component/Protocol/Port Range/@Transport -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/component/protocol/port-range/@transport) | . |
  • TCP
  • UDP
| False | builtin | -### /Assessment Results/Result/Finding/Origin/Actor/Link/@Rel +#### /Assessment Plan/Local Definitions/Component/Responsible Role/@Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/origin/actor/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/component) | responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | +| [Location](/assessment-plan/local-definitions/component) | (.)[@type='interconnection']/responsible-role/@role-id |
  • isa-poc-local
  • isa-poc-remote
  • isa-authorizing-official-local
  • isa-authorizing-official-remote
| True | builtin | -### /Assessment Results/Result/Finding/Origin/Actor/Prop/@Name +#### /Assessment Plan/Local Definitions/Component/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/component/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Finding/Origin/Related Task/Identified Subject/Subject/@Type +#### /Assessment Plan/Local Definitions/Component/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/component/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Finding/Origin/Related Task/Identified Subject/Subject/Exclude Subject/@Type +#### /Assessment Plan/Local Definitions/Component/Status/@State -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/component/status/@state) | . |
  • under-development
  • operational
  • disposition
  • other
| False | builtin | -### /Assessment Results/Result/Finding/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel +#### /Assessment Plan/Local Definitions/Inventory Item/Implemented Component/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/inventory-item/implemented-component/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Finding/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name +#### /Assessment Plan/Local Definitions/Inventory Item/Implemented Component/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/inventory-item/implemented-component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
| False | builtin | +| [Location](/assessment-plan/local-definitions/inventory-item/implemented-component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Finding/Origin/Related Task/Identified Subject/Subject/Include Subject/@Type +#### /Assessment Plan/Local Definitions/Inventory Item/Implemented Component/Responsible Party/@Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/inventory-item/implemented-component) | responsible-party/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
| True | builtin | -### /Assessment Results/Result/Finding/Origin/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel +#### /Assessment Plan/Local Definitions/Inventory Item/Implemented Component/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/inventory-item/implemented-component/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Finding/Origin/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name +#### /Assessment Plan/Local Definitions/Inventory Item/Implemented Component/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/inventory-item/implemented-component/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Finding/Origin/Related Task/Identified Subject/Subject/Link/@Rel +#### /Assessment Plan/Local Definitions/Inventory Item/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/inventory-item) | link/@rel |
  • baseline-template
| True | builtin | +| [Location](/assessment-plan/local-definitions/inventory-item/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Finding/Origin/Related Task/Identified Subject/Subject/Prop/@Name +#### /Assessment Plan/Local Definitions/Inventory Item/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • ipv4-address
  • ipv6-address
  • fqdn
  • uri
  • serial-number
  • netbios-name
  • mac-address
  • physical-location
  • is-scanned
  • hardware-model
  • os-name
  • os-version
  • software-name
  • software-version
  • software-patch-level
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
| False | builtin | +| [Location](/assessment-plan/local-definitions/inventory-item) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | +| [Location](/assessment-plan/local-definitions/inventory-item/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Finding/Origin/Related Task/Link/@Rel +#### /Assessment Plan/Local Definitions/Inventory Item/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | +| [Location](/assessment-plan/local-definitions/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='is-scanned']/@value |
  • yes
  • no
| False | builtin | -### /Assessment Results/Result/Finding/Origin/Related Task/Prop/@Name +#### /Assessment Plan/Local Definitions/Inventory Item/Responsible Party/@Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/inventory-item) | responsible-party/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | -### /Assessment Results/Result/Finding/Origin/Related Task/Responsible Party/Link/@Rel +#### /Assessment Plan/Local Definitions/Inventory Item/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/inventory-item/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Finding/Origin/Related Task/Responsible Party/Prop/@Name +#### /Assessment Plan/Local Definitions/Inventory Item/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/inventory-item/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Finding/Origin/Related Task/Subject/@Type +#### /Assessment Plan/Local Definitions/Objectives And Methods/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/objectives-and-methods/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Finding/Origin/Related Task/Subject/Exclude Subject/@Type +#### /Assessment Plan/Local Definitions/Objectives And Methods/Part/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/objectives-and-methods) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • objective
  • assessment
  • assessment-objective
  • assessment-method
| False | builtin | -### /Assessment Results/Result/Finding/Origin/Related Task/Subject/Exclude Subject/Link/@Rel +#### /Assessment Plan/Local Definitions/Objectives And Methods/Part/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/objectives-and-methods/part/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Finding/Origin/Related Task/Subject/Exclude Subject/Prop/@Name +#### /Assessment Plan/Local Definitions/Objectives And Methods/Part/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/objectives-and-methods/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | +| [Location](/assessment-plan/local-definitions/objectives-and-methods/part/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| [Location](/assessment-plan/local-definitions/objectives-and-methods/part/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | -### /Assessment Results/Result/Finding/Origin/Related Task/Subject/Include Subject/@Type +#### /Assessment Plan/Local Definitions/Objectives And Methods/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/objectives-and-methods/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Finding/Origin/Related Task/Subject/Include Subject/Link/@Rel +#### /Assessment Plan/Local Definitions/User/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/user/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Finding/Origin/Related Task/Subject/Include Subject/Prop/@Name +#### /Assessment Plan/Local Definitions/User/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/user) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
  • privilege-level
| False | builtin | +| [Location](/assessment-plan/local-definitions/user/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Finding/Origin/Related Task/Subject/Link/@Rel +#### /Assessment Plan/Local Definitions/User/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/user) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • internal
  • external
  • general-public
| False | builtin | +| [Location](/assessment-plan/local-definitions/user) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='privilege-level']/@value |
  • privileged
  • non-privileged
  • no-logical-access
| False | builtin | -### /Assessment Results/Result/Finding/Origin/Related Task/Subject/Prop/@Name +#### /Assessment Plan/Local Definitions/User/Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/origin/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/local-definitions/user) | role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
| True | builtin | -### /Assessment Results/Result/Finding/Prop/@Name +#### /Assessment Plan/Metadata/Action/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/metadata/action/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Finding/Target/@Type +#### /Assessment Plan/Metadata/Action/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/target/@type) | . |
  • statement-id
  • objective-id
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/metadata/action/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Finding/Target/Implementation Status/@State +#### /Assessment Plan/Metadata/Action/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/target/implementation-status/@state) | . |
  • implemented
  • partial
  • planned
  • alternative
  • not-applicable
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/metadata/action/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Finding/Target/Link/@Rel +#### /Assessment Plan/Metadata/Action/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/target/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/metadata/action/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Finding/Target/Prop/@Name +#### /Assessment Plan/Metadata/Document Id/@Scheme -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/target/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/metadata/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | -### /Assessment Results/Result/Finding/Target/Status/@Reason +#### /Assessment Plan/Metadata/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/target/status/@reason) | . |
  • pass
  • fail
  • other
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/metadata) | link/@rel |
  • canonical
  • alternate
  • latest-version
  • predecessor-version
  • successor-version
| True | builtin | +| [Location](/assessment-plan/metadata/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Finding/Target/Status/@State +#### /Assessment Plan/Metadata/Location/Address/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/finding/target/status/@state) | . |
  • satisfied
  • not-satisfied
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/metadata/location/address/@type) | . |
  • home
  • work
| True | builtin | -### /Assessment Results/Result/Link/@Rel +#### /Assessment Plan/Metadata/Location/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/metadata/location/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Assets/Assessment Platform/Link/@Rel +#### /Assessment Plan/Metadata/Location/Prop/@Class -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/assessment-platform/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type' and @value='data-center']/@class |
  • primary
  • alternate
| False | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Assets/Assessment Platform/Prop/@Name +#### /Assessment Plan/Metadata/Location/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/assessment-platform/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | +| [Location](/assessment-plan/metadata/location/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Assets/Assessment Platform/Uses Component/Link/@Rel +#### /Assessment Plan/Metadata/Location/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/assessment-platform/uses-component/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • data-center
| False | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Assets/Assessment Platform/Uses Component/Prop/@Name +#### /Assessment Plan/Metadata/Location/Telephone Number/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/assessment-platform/uses-component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/metadata/location/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Assets/Assessment Platform/Uses Component/Responsible Party/Link/@Rel +#### /Assessment Plan/Metadata/Party/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/assessment-platform/uses-component/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/metadata/party/@type) | . |
  • person
  • organization
| False | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Assets/Assessment Platform/Uses Component/Responsible Party/Prop/@Name +#### /Assessment Plan/Metadata/Party/Address/@Type -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/assessment-platform/uses-component/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| address-type | [Location](/assessment-plan) | metadata/party/address/@type |
  • work
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| | [Location](/assessment-plan/metadata/party/address/@type) | . |
  • home
  • work
| True | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Assets/Component/@Type +#### /Assessment Plan/Metadata/Party/External Id/@Scheme -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component/@type) | . |
  • this-system
  • system
  • interconnection
  • software
  • hardware
  • service
  • policy
  • physical
  • process-procedure
  • plan
  • guidance
  • standard
  • validation
  • network
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/metadata/party/external-id/@scheme) | . |
  • http://orcid.org/
| True | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Assets/Component/Link/@Rel +#### /Assessment Plan/Metadata/Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | link/@rel |
  • depends-on
  • validation
  • proof-of-compliance
  • baseline-template
  • uses-service
  • system-security-plan
  • uses-network
  • imported-from
| True | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | (.)[@type='validation']/link/@rel |
  • validation-details
| True | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | (.)[@type='service']/link/@rel |
  • provided-by
  • used-by
| True | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | (.)[@type='interconnection']/link/@rel |
  • isa-agreement
| True | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/metadata/party/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Assets/Component/Prop/@Class +#### /Assessment Plan/Metadata/Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('ipv4-address','ipv6-address')]/@class |
  • local
  • remote
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/metadata/party) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • mail-stop
  • office
  • job-title
| False | builtin | +| [Location](/assessment-plan/metadata/party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Assets/Component/Prop/@Name +#### /Assessment Plan/Metadata/Party/Telephone Number/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • implementation-point
  • leveraged-authorization-uuid
  • inherited-uuid
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
| False | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | (.)[@type='software']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • software-identifier
| False | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | (.)[@type='interconnection']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • isa-title
  • isa-date
  • isa-remote-system-name
  • ipv4-address
  • ipv6-address
  • direction
| False | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/metadata/party/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Assets/Component/Prop/@Value +#### /Assessment Plan/Metadata/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='allows-authenticated-scan']/@value |
  • yes
  • no
| False | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='public']/@value |
  • yes
  • no
| False | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='virtual']/@value |
  • yes
  • no
| False | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='implementation-point']/@value |
  • internal
  • external
| False | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='direction']/@value |
  • incoming
  • outgoing
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/metadata) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • keywords
| False | builtin | +| [Location](/assessment-plan/metadata/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Assets/Component/Protocol/Port Range/@Transport +#### /Assessment Plan/Metadata/Responsible Party/@Role Id -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component/protocol/port-range/@transport) | . |
  • TCP
  • UDP
| False | builtin | +| allowed-metadata-responsibe-party-role-ids | [Location](/assessment-plan/metadata) | responsible-party/@role-id |
  • creator
  • prepared-by
  • prepared-for
  • content-approver
  • contact
| True | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Assets/Component/Responsible Role/@Role Id +#### /Assessment Plan/Metadata/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component) | (.)[@type='interconnection']/responsible-role/@role-id |
  • isa-poc-local
  • isa-poc-remote
  • isa-authorizing-official-local
  • isa-authorizing-official-remote
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/metadata/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Assets/Component/Responsible Role/Link/@Rel +#### /Assessment Plan/Metadata/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/metadata/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Assets/Component/Responsible Role/Prop/@Name +#### /Assessment Plan/Metadata/Revision/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/metadata/revision) | link/@rel |
  • canonical
  • alternate
  • predecessor-version
  • successor-version
  • version-history
| True | builtin | +| [Location](/assessment-plan/metadata/revision/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Assets/Component/Status/@State +#### /Assessment Plan/Metadata/Revision/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-assets/component/status/@state) | . |
  • under-development
  • operational
  • disposition
  • other
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/metadata/revision/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Task/@Type +#### /Assessment Plan/Metadata/Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/@type) | . |
  • milestone
  • action
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/metadata/role/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Link/@Rel +#### /Assessment Plan/Metadata/Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/metadata/role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Prop/@Name +#### /Assessment Plan/Reviewed Controls/Control Objective Selection/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/reviewed-controls/control-objective-selection/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Responsible Role/Link/@Rel +#### /Assessment Plan/Reviewed Controls/Control Objective Selection/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/reviewed-controls/control-objective-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Responsible Role/Prop/@Name +#### /Assessment Plan/Reviewed Controls/Control Selection/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/reviewed-controls/control-selection/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Subject/@Type +#### /Assessment Plan/Reviewed Controls/Control Selection/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/reviewed-controls/control-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Subject/Exclude Subject/@Type +#### /Assessment Plan/Reviewed Controls/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/reviewed-controls/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Subject/Exclude Subject/Link/@Rel +#### /Assessment Plan/Reviewed Controls/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/reviewed-controls/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Subject/Exclude Subject/Prop/@Name +#### /Assessment Plan/Task/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/task/@type) | . |
  • milestone
  • action
| True | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Subject/Include Subject/@Type +#### /Assessment Plan/Task/Associated Activity/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/task/associated-activity/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Subject/Include Subject/Link/@Rel +#### /Assessment Plan/Task/Associated Activity/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/task/associated-activity/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Subject/Include Subject/Prop/@Name +#### /Assessment Plan/Task/Associated Activity/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/task/associated-activity/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Subject/Link/@Rel +#### /Assessment Plan/Task/Associated Activity/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/task/associated-activity/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Subject/Prop/@Name +#### /Assessment Plan/Task/Associated Activity/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/task/associated-activity/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Task/Link/@Rel +#### /Assessment Plan/Task/Associated Activity/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/task/associated-activity/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Task/Prop/@Name +#### /Assessment Plan/Task/Associated Activity/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/task/associated-activity/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Task/Responsible Role/Link/@Rel +#### /Assessment Plan/Task/Associated Activity/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/task/associated-activity/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Task/Responsible Role/Prop/@Name +#### /Assessment Plan/Task/Associated Activity/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/task/associated-activity/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Task/Subject/@Type +#### /Assessment Plan/Task/Associated Activity/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/task/associated-activity/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Task/Subject/Exclude Subject/@Type +#### /Assessment Plan/Task/Associated Activity/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/task/associated-activity/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Task/Subject/Exclude Subject/Link/@Rel +#### /Assessment Plan/Task/Associated Activity/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/task/associated-activity/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Task/Subject/Exclude Subject/Prop/@Name +#### /Assessment Plan/Task/Associated Activity/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/task/associated-activity/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Task/Subject/Include Subject/@Type +#### /Assessment Plan/Task/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/task/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Task/Subject/Include Subject/Link/@Rel +#### /Assessment Plan/Task/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Task/Subject/Include Subject/Prop/@Name +#### /Assessment Plan/Task/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/task/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Task/Subject/Link/@Rel +#### /Assessment Plan/Task/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/task/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Task/Subject/Prop/@Name +#### /Assessment Plan/Task/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Assessment Results/Result/Local Definitions/Assessment Task/Timing/At Frequency/@Unit +#### /Assessment Plan/Task/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/assessment-task/timing/at-frequency/@unit) | . |
  • seconds
  • minutes
  • hours
  • days
  • months
  • years
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Assessment Results/Result/Local Definitions/Component/@Type +#### /Assessment Plan/Task/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/component/@type) | . |
  • this-system
  • system
  • interconnection
  • software
  • hardware
  • service
  • policy
  • physical
  • process-procedure
  • plan
  • guidance
  • standard
  • validation
  • network
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Local Definitions/Component/Link/@Rel +#### /Assessment Plan/Task/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/component) | link/@rel |
  • depends-on
  • validation
  • proof-of-compliance
  • baseline-template
  • uses-service
  • system-security-plan
  • uses-network
  • imported-from
| True | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/component) | (.)[@type='validation']/link/@rel |
  • validation-details
| True | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/component) | (.)[@type='service']/link/@rel |
  • provided-by
  • used-by
| True | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/component) | (.)[@type='interconnection']/link/@rel |
  • isa-agreement
| True | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/component/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Local Definitions/Component/Prop/@Class +#### /Assessment Plan/Task/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('ipv4-address','ipv6-address')]/@class |
  • local
  • remote
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Assessment Results/Result/Local Definitions/Component/Prop/@Name +#### /Assessment Plan/Task/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • implementation-point
  • leveraged-authorization-uuid
  • inherited-uuid
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
| False | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/component) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/component) | (.)[@type='software']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • software-identifier
| False | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/component) | (.)[@type='interconnection']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • isa-title
  • isa-date
  • isa-remote-system-name
  • ipv4-address
  • ipv6-address
  • direction
| False | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Local Definitions/Component/Prop/@Value +#### /Assessment Plan/Task/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='allows-authenticated-scan']/@value |
  • yes
  • no
| False | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='public']/@value |
  • yes
  • no
| False | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='virtual']/@value |
  • yes
  • no
| False | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='implementation-point']/@value |
  • internal
  • external
| False | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='direction']/@value |
  • incoming
  • outgoing
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Local Definitions/Component/Protocol/Port Range/@Transport +#### /Assessment Plan/Task/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/component/protocol/port-range/@transport) | . |
  • TCP
  • UDP
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/task/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Local Definitions/Component/Responsible Role/@Role Id +#### /Assessment Plan/Task/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/component) | responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/component) | (.)[@type='interconnection']/responsible-role/@role-id |
  • isa-poc-local
  • isa-poc-remote
  • isa-authorizing-official-local
  • isa-authorizing-official-remote
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Local Definitions/Component/Responsible Role/Link/@Rel +#### /Assessment Plan/Task/Timing/At Frequency/@Unit -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/component/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/task/timing/at-frequency/@unit) | . |
  • seconds
  • minutes
  • hours
  • days
  • months
  • years
| False | builtin | -### /Assessment Results/Result/Local Definitions/Component/Responsible Role/Prop/@Name +#### /Assessment Plan/Terms And Conditions/Part/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/component/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/terms-and-conditions) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • rules-of-engagement
  • disclosures
  • assessment-inclusions
  • assessment-exclusions
  • results-delivery
  • assumptions
  • methodology
| False | builtin | +| [Location](/assessment-plan/terms-and-conditions/part/@name) | . |
  • asset
  • method
  • objective
| True | builtin | -### /Assessment Results/Result/Local Definitions/Component/Status/@State +#### /Assessment Plan/Terms And Conditions/Part/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/component/status/@state) | . |
  • under-development
  • operational
  • disposition
  • other
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/terms-and-conditions/part/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Local Definitions/Inventory Item/Implemented Component/Link/@Rel +#### /Assessment Plan/Terms And Conditions/Part/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item/implemented-component/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/terms-and-conditions/part) | .[@name='objective']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • method
| False | builtin | +| [Location](/assessment-plan/terms-and-conditions/part/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| [Location](/assessment-plan/terms-and-conditions/part/part) | .[@name='objective']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • method
| False | builtin | -### /Assessment Results/Result/Local Definitions/Inventory Item/Implemented Component/Prop/@Name +#### /Assessment Plan/Terms And Conditions/Part/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item/implemented-component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
| False | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item/implemented-component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-plan/terms-and-conditions/part) | .[@name='objective']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='method']/@value |
  • INTERVIEW
  • EXAMINE
  • TEST
| False | builtin | +| [Location](/assessment-plan/terms-and-conditions/part/part) | .[@name='objective']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='method']/@value |
  • INTERVIEW
  • EXAMINE
  • TEST
| False | builtin | -### /Assessment Results/Result/Local Definitions/Inventory Item/Implemented Component/Responsible Party/@Role Id +--- -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item/implemented-component) | responsible-party/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
| True | builtin | +### SAR Allowed Values -### /Assessment Results/Result/Local Definitions/Inventory Item/Implemented Component/Responsible Party/Link/@Rel +#### /Assessment Results/Back Matter/Resource/Citation/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item/implemented-component/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/back-matter/resource/citation/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Local Definitions/Inventory Item/Implemented Component/Responsible Party/Prop/@Name +#### /Assessment Results/Back Matter/Resource/Citation/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item/implemented-component/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/back-matter/resource/citation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Local Definitions/Inventory Item/Link/@Rel +#### /Assessment Results/Back Matter/Resource/Document Id/@Scheme -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item) | link/@rel |
  • baseline-template
| True | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/back-matter/resource/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | -### /Assessment Results/Result/Local Definitions/Inventory Item/Prop/@Name +#### /Assessment Results/Back Matter/Resource/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • ipv4-address
  • ipv6-address
  • fqdn
  • uri
  • serial-number
  • netbios-name
  • mac-address
  • physical-location
  • is-scanned
  • hardware-model
  • os-name
  • os-version
  • software-name
  • software-version
  • software-patch-level
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
| False | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
  • version
  • published
| False | builtin | +| [Location](/assessment-results/back-matter/resource/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Local Definitions/Inventory Item/Prop/@Value +#### /Assessment Results/Back Matter/Resource/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='is-scanned']/@value |
  • yes
  • no
| False | builtin | +| attachment-type | [Location](/assessment-results) | back-matter/resource/prop[@name='type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • law
  • regulation
  • standard
  • guidance
  • policy
  • procedure
  • guide
  • rules-of-behavior
  • plan
  • system-security-plan
  • artifact
  • evidence
  • screen-shot
  • image
  • tool-report
  • raw-tool-output
  • interview-notes
  • questionnaire
  • report
  • fedramp-citations
  • fedramp-acronyms
  • fedramp-logo
  • separation-of-duties-matrix
  • logo
  • personally-identifiable-information
  • agreement
  • isa-agreement
  • incident-response-plan
  • information-security-policies-and-procedures
  • users-guide
  • privacy-impact-assessment
  • information-system-contingency-plan
  • configuration-management-plan
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| | [Location](/assessment-results/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • logo
  • image
  • screen-shot
  • law
  • regulation
  • standard
  • external-guidance
  • acronyms
  • citation
  • policy
  • procedure
  • system-guide
  • users-guide
  • administrators-guide
  • rules-of-behavior
  • plan
  • artifact
  • evidence
  • tool-output
  • raw-data
  • interview-notes
  • questionnaire
  • report
  • agreement
| False | builtin | -### /Assessment Results/Result/Local Definitions/Inventory Item/Responsible Party/@Role Id +#### /Assessment Results/Back Matter/Resource/Rlink/Hash/@Algorithm -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item) | responsible-party/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/back-matter/resource/rlink/hash/@algorithm) | . |
  • SHA-224
  • SHA-256
  • SHA-384
  • SHA-512
  • SHA3-224
  • SHA3-256
  • SHA3-384
  • SHA3-512
| True | builtin | -### /Assessment Results/Result/Local Definitions/Inventory Item/Responsible Party/Link/@Rel +#### /Assessment Results/Local Definitions/Activity/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/local-definitions/activity/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Local Definitions/Inventory Item/Responsible Party/Prop/@Name +#### /Assessment Results/Local Definitions/Activity/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/inventory-item/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/local-definitions/activity) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • method
| False | builtin | +| [Location](/assessment-results/local-definitions/activity/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Local Definitions/User/Link/@Rel +#### /Assessment Results/Local Definitions/Activity/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/user/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/local-definitions/activity) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='method']/@value |
  • INTERVIEW
  • EXAMINE
  • TEST
| False | builtin | -### /Assessment Results/Result/Local Definitions/User/Prop/@Name +#### /Assessment Results/Local Definitions/Activity/Related Controls/Control Objective Selection/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/user) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
  • privilege-level
| False | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/user/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/local-definitions/activity/related-controls/control-objective-selection/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Local Definitions/User/Prop/@Value +#### /Assessment Results/Local Definitions/Activity/Related Controls/Control Objective Selection/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/user) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • internal
  • external
  • general-public
| False | builtin | -| allowed-values | [Location](/assessment-results/result/local-definitions/user) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='privilege-level']/@value |
  • privileged
  • non-privileged
  • no-logical-access
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/local-definitions/activity/related-controls/control-objective-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Local Definitions/User/Role Id +#### /Assessment Results/Local Definitions/Activity/Related Controls/Control Selection/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/local-definitions/user) | role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/local-definitions/activity/related-controls/control-selection/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Observation/Link/@Rel +#### /Assessment Results/Local Definitions/Activity/Related Controls/Control Selection/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/local-definitions/activity/related-controls/control-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Observation/Method +#### /Assessment Results/Local Definitions/Activity/Related Controls/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/method) | . |
  • EXAMINE
  • INTERVIEW
  • TEST
  • UNKNOWN
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/local-definitions/activity/related-controls/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Observation/Origin/Actor/@Type +#### /Assessment Results/Local Definitions/Activity/Related Controls/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/local-definitions/activity/related-controls/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Observation/Origin/Actor/Link/@Rel +#### /Assessment Results/Local Definitions/Activity/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/origin/actor/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/local-definitions/activity/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Observation/Origin/Actor/Prop/@Name +#### /Assessment Results/Local Definitions/Activity/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/local-definitions/activity/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Observation/Origin/Related Task/Identified Subject/Subject/@Type +#### /Assessment Results/Local Definitions/Activity/Step/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/local-definitions/activity/step/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Observation/Origin/Related Task/Identified Subject/Subject/Exclude Subject/@Type +#### /Assessment Results/Local Definitions/Activity/Step/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/local-definitions/activity/step/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Observation/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel +#### /Assessment Results/Local Definitions/Activity/Step/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/local-definitions/activity/step/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Observation/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name +#### /Assessment Results/Local Definitions/Activity/Step/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/local-definitions/activity/step/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Observation/Origin/Related Task/Identified Subject/Subject/Include Subject/@Type +#### /Assessment Results/Local Definitions/Activity/Step/Reviewed Controls/Control Objective Selection/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/local-definitions/activity/step/reviewed-controls/control-objective-selection/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Observation/Origin/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel +#### /Assessment Results/Local Definitions/Activity/Step/Reviewed Controls/Control Objective Selection/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/local-definitions/activity/step/reviewed-controls/control-objective-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Observation/Origin/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name +#### /Assessment Results/Local Definitions/Activity/Step/Reviewed Controls/Control Selection/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/local-definitions/activity/step/reviewed-controls/control-selection/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Observation/Origin/Related Task/Identified Subject/Subject/Link/@Rel +#### /Assessment Results/Local Definitions/Activity/Step/Reviewed Controls/Control Selection/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/local-definitions/activity/step/reviewed-controls/control-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Observation/Origin/Related Task/Identified Subject/Subject/Prop/@Name +#### /Assessment Results/Local Definitions/Activity/Step/Reviewed Controls/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/local-definitions/activity/step/reviewed-controls/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Observation/Origin/Related Task/Link/@Rel +#### /Assessment Results/Local Definitions/Activity/Step/Reviewed Controls/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/local-definitions/activity/step/reviewed-controls/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Observation/Origin/Related Task/Prop/@Name +#### /Assessment Results/Local Definitions/Objectives And Methods/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/local-definitions/objectives-and-methods/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Observation/Origin/Related Task/Responsible Party/Link/@Rel +#### /Assessment Results/Local Definitions/Objectives And Methods/Part/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/local-definitions/objectives-and-methods) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • objective
  • assessment
  • assessment-objective
  • assessment-method
| False | builtin | -### /Assessment Results/Result/Observation/Origin/Related Task/Responsible Party/Prop/@Name +#### /Assessment Results/Local Definitions/Objectives And Methods/Part/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/local-definitions/objectives-and-methods/part/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Observation/Origin/Related Task/Subject/@Type +#### /Assessment Results/Local Definitions/Objectives And Methods/Part/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/local-definitions/objectives-and-methods/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | +| [Location](/assessment-results/local-definitions/objectives-and-methods/part/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| [Location](/assessment-results/local-definitions/objectives-and-methods/part/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | -### /Assessment Results/Result/Observation/Origin/Related Task/Subject/Exclude Subject/@Type +#### /Assessment Results/Local Definitions/Objectives And Methods/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/local-definitions/objectives-and-methods/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Observation/Origin/Related Task/Subject/Exclude Subject/Link/@Rel +#### /Assessment Results/Metadata/Action/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/metadata/action/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Observation/Origin/Related Task/Subject/Exclude Subject/Prop/@Name +#### /Assessment Results/Metadata/Action/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/metadata/action/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Observation/Origin/Related Task/Subject/Include Subject/@Type +#### /Assessment Results/Metadata/Action/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/metadata/action/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Observation/Origin/Related Task/Subject/Include Subject/Link/@Rel +#### /Assessment Results/Metadata/Action/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/metadata/action/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Observation/Origin/Related Task/Subject/Include Subject/Prop/@Name +#### /Assessment Results/Metadata/Document Id/@Scheme -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/metadata/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | -### /Assessment Results/Result/Observation/Origin/Related Task/Subject/Link/@Rel +#### /Assessment Results/Metadata/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/metadata) | link/@rel |
  • canonical
  • alternate
  • latest-version
  • predecessor-version
  • successor-version
| True | builtin | +| [Location](/assessment-results/metadata/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Observation/Origin/Related Task/Subject/Prop/@Name +#### /Assessment Results/Metadata/Location/Address/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/origin/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/metadata/location/address/@type) | . |
  • home
  • work
| True | builtin | -### /Assessment Results/Result/Observation/Prop/@Name +#### /Assessment Results/Metadata/Location/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/metadata/location/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Observation/Relevant Evidence/Link/@Rel +#### /Assessment Results/Metadata/Location/Prop/@Class -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/relevant-evidence/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type' and @value='data-center']/@class |
  • primary
  • alternate
| False | builtin | -### /Assessment Results/Result/Observation/Relevant Evidence/Prop/@Name +#### /Assessment Results/Metadata/Location/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/relevant-evidence/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | +| [Location](/assessment-results/metadata/location/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Observation/Subject/@Type +#### /Assessment Results/Metadata/Location/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • data-center
| False | builtin | -### /Assessment Results/Result/Observation/Subject/Link/@Rel +#### /Assessment Results/Metadata/Location/Telephone Number/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/metadata/location/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | -### /Assessment Results/Result/Observation/Subject/Prop/@Name +#### /Assessment Results/Metadata/Party/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/metadata/party/@type) | . |
  • person
  • organization
| False | builtin | -### /Assessment Results/Result/Observation/Type +#### /Assessment Results/Metadata/Party/Address/@Type -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/observation/type) | . |
  • ssp-statement-issue
  • control-objective
  • mitigation
  • finding
  • historic
| True | builtin | +| address-type | [Location](/assessment-results) | metadata/party/address/@type |
  • work
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| | [Location](/assessment-results/metadata/party/address/@type) | . |
  • home
  • work
| True | builtin | -### /Assessment Results/Result/Prop/@Name +#### /Assessment Results/Metadata/Party/External Id/@Scheme -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/metadata/party/external-id/@scheme) | . |
  • http://orcid.org/
| True | builtin | -### /Assessment Results/Result/Reviewed Controls/Control Objective Selection/Link/@Rel +#### /Assessment Results/Metadata/Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/reviewed-controls/control-objective-selection/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/metadata/party/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Reviewed Controls/Control Objective Selection/Prop/@Name +#### /Assessment Results/Metadata/Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/reviewed-controls/control-objective-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/metadata/party) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • mail-stop
  • office
  • job-title
| False | builtin | +| [Location](/assessment-results/metadata/party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Reviewed Controls/Control Selection/Link/@Rel +#### /Assessment Results/Metadata/Party/Telephone Number/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/reviewed-controls/control-selection/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/metadata/party/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | -### /Assessment Results/Result/Reviewed Controls/Control Selection/Prop/@Name +#### /Assessment Results/Metadata/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/reviewed-controls/control-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/metadata) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • keywords
| False | builtin | +| [Location](/assessment-results/metadata/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Reviewed Controls/Link/@Rel +#### /Assessment Results/Metadata/Responsible Party/@Role Id -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/reviewed-controls/link/@rel) | . |
  • reference
| True | builtin | +| allowed-metadata-responsibe-party-role-ids | [Location](/assessment-results/metadata) | responsible-party/@role-id |
  • creator
  • prepared-by
  • prepared-for
  • content-approver
  • contact
| True | builtin | -### /Assessment Results/Result/Reviewed Controls/Prop/@Name +#### /Assessment Results/Metadata/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/reviewed-controls/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/metadata/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Characterization/Facet/@Name +#### /Assessment Results/Metadata/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://csrc.nist.gov/ns/oscal']/@name |
  • likelihood
  • impact
  • risk
  • severity
| False | builtin | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://fedramp.gov','http://fedramp.gov/ns/oscal')]/@name |
  • likelihood
  • impact
  • risk
| False | builtin | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://cve.mitre.org']/@name |
  • cve-id
| False | builtin | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0']/@name |
  • access-vector
  • access-complexity
  • authentication
  • confidentiality-impact
  • integrity-impact
  • availability-impact
  • exploitability
  • remediation-level
  • report-confidence
  • collateral-damage-potential
  • target-distribution
  • confidentiality-requirement
  • integrity-requirement
  • availability-requirement
| False | builtin | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1')]/@name |
  • attack-vector
  • access-complexity
  • privileges-required
  • user-interaction
  • scope
  • confidentiality-impact
  • integrity-impact
  • availability-impact
  • exploit-code-maturity
  • remediation-level
  • report-confidence
  • modified-attack-vector
  • modified-attack-complexity
  • modified-privileges-required
  • modified-user-interaction
  • modified-scope
  • modified-confidentiality
  • modified-integrity
  • modified-availability
  • confidentiality-requirement
  • integrity-requirement
  • availability-requirement
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/metadata/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Characterization/Facet/@System +#### /Assessment Results/Metadata/Revision/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet/@system) | . |
  • http://fedramp.gov
  • http://fedramp.gov/ns/oscal
  • http://csrc.nist.gov/ns/oscal
  • http://csrc.nist.gov/ns/oscal/unknown
  • http://cve.mitre.org
  • http://www.first.org/cvss/v2.0
  • http://www.first.org/cvss/v3.0
  • http://www.first.org/cvss/v3.1
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/metadata/revision) | link/@rel |
  • canonical
  • alternate
  • predecessor-version
  • successor-version
  • version-history
| True | builtin | +| [Location](/assessment-results/metadata/revision/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Characterization/Facet/@Value +#### /Assessment Results/Metadata/Revision/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='access-vector']/@value |
  • local
  • adjacent-network
  • network
| False | builtin | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='access-complexity']/@value |
  • high
  • medium
  • low
| False | builtin | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='authentication']/@value |
  • multiple
  • single
  • none
| False | builtin | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name=('confidentiality-impact', 'integrity-impact', 'availability-impact')]/@value |
  • none
  • partial
  • complete
| False | builtin | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='exploitability']/@value |
  • unproven
  • proof-of-concept
  • functional
  • high
  • not-defined
| False | builtin | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='remediation-level']/@value |
  • official-fix
  • temporary-fix
  • workaround
  • unavailable
  • not-defined
| False | builtin | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='report-confidence']/@value |
  • unconfirmed
  • uncorroborated
  • confirmed
  • not-defined
| False | builtin | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='collateral-damage-potential']/@value |
  • none
  • low
  • low-medium
  • medium-high
  • high
  • not-defined
| False | builtin | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name=('target-distribution', 'confidentiality-requirement', 'integrity-requirement', 'availability-requirement')]/@value |
  • none
  • low
  • medium
  • high
  • not-defined
| False | builtin | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='access-vector']/@value |
  • network
  • adjacent
  • local
  • physical
| False | builtin | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='access-complexity']/@value |
  • high
  • low
| False | builtin | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name=('privileges-required', 'confidentiality-impact', 'integrity-impact', 'availability-impact')]/@value |
  • none
  • low
  • high
| False | builtin | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='user-interaction']/@value |
  • none
  • required
| False | builtin | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='scope']/@value |
  • unchanged
  • changed
| False | builtin | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='exploit-code-maturity']/@value |
  • not-defined
  • unproven
  • proof-of-concept
  • functional
  • high
| False | builtin | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='remediation-level']/@value |
  • not-defined
  • official-fix
  • temporary-fix
  • workaround
  • unavailable
| False | builtin | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='report-confidence']/@value |
  • not-defined
  • unknown
  • reasonable
  • confirmed
| False | builtin | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name=('confidentiality-requirement', 'integrity-requirement', 'availability-requirement')]/@value |
  • not-defined
  • low
  • medium
  • high
| False | builtin | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='modified-attack-vector']/@value |
  • not-defined
  • network
  • adjacent
  • local
  • physical
| False | builtin | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='modified-attack-complexity']/@value |
  • not-defined
  • high
  • low
| False | builtin | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name=('modified-privileges-required', 'modified-confidentiality', 'modified-integrity', 'modified-availability')]/@value |
  • not-defined
  • none
  • low
  • high
| False | builtin | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='modified-user-interaction']/@value |
  • not-defined
  • none
  • required
| False | builtin | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='modified-scope']/@value |
  • not-defined
  • unchanged
  • changed
| False | builtin | - -### /Assessment Results/Result/Risk/Characterization/Facet/Link/@Rel - -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/metadata/revision/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Characterization/Facet/Prop/@Name +#### /Assessment Results/Metadata/Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • state
| False | builtin | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/metadata/role/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Characterization/Facet/Prop/@Value +#### /Assessment Results/Metadata/Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/facet) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='state']/@value |
  • initial
  • adjusted
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/metadata/role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Characterization/Link/@Rel +#### /Assessment Results/Result/Assessment Log/Entry/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/assessment-log/entry/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Characterization/Origin/Actor/@Type +#### /Assessment Results/Result/Assessment Log/Entry/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/assessment-log/entry/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Characterization/Origin/Actor/Link/@Rel +#### /Assessment Results/Result/Assessment Log/Entry/Related Task/Identified Subject/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/actor/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/assessment-log/entry/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Assessment Results/Result/Risk/Characterization/Origin/Actor/Prop/@Name +#### /Assessment Results/Result/Assessment Log/Entry/Related Task/Identified Subject/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/assessment-log/entry/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/@Type +#### /Assessment Results/Result/Assessment Log/Entry/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/assessment-log/entry/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Exclude Subject/@Type +#### /Assessment Results/Result/Assessment Log/Entry/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/assessment-log/entry/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel +#### /Assessment Results/Result/Assessment Log/Entry/Related Task/Identified Subject/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/assessment-log/entry/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name +#### /Assessment Results/Result/Assessment Log/Entry/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/assessment-log/entry/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Include Subject/@Type +#### /Assessment Results/Result/Assessment Log/Entry/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/assessment-log/entry/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel +#### /Assessment Results/Result/Assessment Log/Entry/Related Task/Identified Subject/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/assessment-log/entry/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name +#### /Assessment Results/Result/Assessment Log/Entry/Related Task/Identified Subject/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/assessment-log/entry/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Link/@Rel +#### /Assessment Results/Result/Assessment Log/Entry/Related Task/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/assessment-log/entry/related-task/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Prop/@Name +#### /Assessment Results/Result/Assessment Log/Entry/Related Task/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/assessment-log/entry/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Link/@Rel +#### /Assessment Results/Result/Assessment Log/Entry/Related Task/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/assessment-log/entry/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Prop/@Name +#### /Assessment Results/Result/Assessment Log/Entry/Related Task/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/assessment-log/entry/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Responsible Party/Link/@Rel +#### /Assessment Results/Result/Assessment Log/Entry/Related Task/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/assessment-log/entry/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Responsible Party/Prop/@Name +#### /Assessment Results/Result/Assessment Log/Entry/Related Task/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/assessment-log/entry/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Subject/@Type +#### /Assessment Results/Result/Assessment Log/Entry/Related Task/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/assessment-log/entry/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Subject/Exclude Subject/@Type +#### /Assessment Results/Result/Assessment Log/Entry/Related Task/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/assessment-log/entry/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Subject/Exclude Subject/Link/@Rel +#### /Assessment Results/Result/Assessment Log/Entry/Related Task/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/assessment-log/entry/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Subject/Exclude Subject/Prop/@Name +#### /Assessment Results/Result/Assessment Log/Entry/Related Task/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/assessment-log/entry/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Subject/Include Subject/@Type +#### /Assessment Results/Result/Assessment Log/Entry/Related Task/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/assessment-log/entry/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Subject/Include Subject/Link/@Rel +#### /Assessment Results/Result/Assessment Log/Entry/Related Task/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/assessment-log/entry/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Subject/Include Subject/Prop/@Name +#### /Assessment Results/Result/Assessment Log/Entry/Related Task/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/assessment-log/entry/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Subject/Link/@Rel +#### /Assessment Results/Result/Attestation/Part/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/attestation/part/@name) | . |
  • asset
  • method
  • objective
| True | builtin | -### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Subject/Prop/@Name +#### /Assessment Results/Result/Attestation/Part/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/origin/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/attestation/part/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Characterization/Prop/@Name +#### /Assessment Results/Result/Attestation/Part/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/characterization/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/attestation/part) | .[@name='objective']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • method
| False | builtin | +| [Location](/assessment-results/result/attestation/part/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| [Location](/assessment-results/result/attestation/part/part) | .[@name='objective']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • method
| False | builtin | -### /Assessment Results/Result/Risk/Link/@Rel +#### /Assessment Results/Result/Attestation/Part/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/attestation/part) | .[@name='objective']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='method']/@value |
  • INTERVIEW
  • EXAMINE
  • TEST
| False | builtin | +| [Location](/assessment-results/result/attestation/part/part) | .[@name='objective']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='method']/@value |
  • INTERVIEW
  • EXAMINE
  • TEST
| False | builtin | -### /Assessment Results/Result/Risk/Mitigating Factor/Link/@Rel +#### /Assessment Results/Result/Attestation/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/mitigating-factor/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/attestation/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Mitigating Factor/Prop/@Name +#### /Assessment Results/Result/Attestation/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/mitigating-factor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/attestation/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Mitigating Factor/Subject/@Type +#### /Assessment Results/Result/Finding/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/mitigating-factor/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Mitigating Factor/Subject/Link/@Rel +#### /Assessment Results/Result/Finding/Origin/Actor/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/mitigating-factor/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | -### /Assessment Results/Result/Risk/Mitigating Factor/Subject/Prop/@Name +#### /Assessment Results/Result/Finding/Origin/Actor/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/mitigating-factor/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/origin/actor/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Origin/Actor/@Type +#### /Assessment Results/Result/Finding/Origin/Actor/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Origin/Actor/Link/@Rel +#### /Assessment Results/Result/Finding/Origin/Related Task/Identified Subject/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/origin/actor/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/origin/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Assessment Results/Result/Risk/Origin/Actor/Prop/@Name +#### /Assessment Results/Result/Finding/Origin/Related Task/Identified Subject/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/origin/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Assessment Results/Result/Risk/Origin/Related Task/Identified Subject/Subject/@Type +#### /Assessment Results/Result/Finding/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/origin/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Origin/Related Task/Identified Subject/Subject/Exclude Subject/@Type +#### /Assessment Results/Result/Finding/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/origin/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel +#### /Assessment Results/Result/Finding/Origin/Related Task/Identified Subject/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/origin/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Assessment Results/Result/Risk/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name +#### /Assessment Results/Result/Finding/Origin/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/origin/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Origin/Related Task/Identified Subject/Subject/Include Subject/@Type +#### /Assessment Results/Result/Finding/Origin/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/origin/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Origin/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel +#### /Assessment Results/Result/Finding/Origin/Related Task/Identified Subject/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/origin/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Origin/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name +#### /Assessment Results/Result/Finding/Origin/Related Task/Identified Subject/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/origin/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Origin/Related Task/Identified Subject/Subject/Link/@Rel +#### /Assessment Results/Result/Finding/Origin/Related Task/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/origin/related-task/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Origin/Related Task/Identified Subject/Subject/Prop/@Name +#### /Assessment Results/Result/Finding/Origin/Related Task/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/origin/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Origin/Related Task/Link/@Rel +#### /Assessment Results/Result/Finding/Origin/Related Task/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/origin/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Origin/Related Task/Prop/@Name +#### /Assessment Results/Result/Finding/Origin/Related Task/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/origin/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Origin/Related Task/Responsible Party/Link/@Rel +#### /Assessment Results/Result/Finding/Origin/Related Task/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/origin/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Assessment Results/Result/Risk/Origin/Related Task/Responsible Party/Prop/@Name +#### /Assessment Results/Result/Finding/Origin/Related Task/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/origin/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Assessment Results/Result/Risk/Origin/Related Task/Subject/@Type +#### /Assessment Results/Result/Finding/Origin/Related Task/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/origin/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Origin/Related Task/Subject/Exclude Subject/@Type +#### /Assessment Results/Result/Finding/Origin/Related Task/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/origin/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Origin/Related Task/Subject/Exclude Subject/Link/@Rel +#### /Assessment Results/Result/Finding/Origin/Related Task/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/origin/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Assessment Results/Result/Risk/Origin/Related Task/Subject/Exclude Subject/Prop/@Name +#### /Assessment Results/Result/Finding/Origin/Related Task/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/origin/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Origin/Related Task/Subject/Include Subject/@Type +#### /Assessment Results/Result/Finding/Origin/Related Task/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/origin/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Origin/Related Task/Subject/Include Subject/Link/@Rel +#### /Assessment Results/Result/Finding/Origin/Related Task/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/origin/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Origin/Related Task/Subject/Include Subject/Prop/@Name +#### /Assessment Results/Result/Finding/Origin/Related Task/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/origin/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Origin/Related Task/Subject/Link/@Rel +#### /Assessment Results/Result/Finding/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Origin/Related Task/Subject/Prop/@Name +#### /Assessment Results/Result/Finding/Target/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/origin/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/target/@type) | . |
  • statement-id
  • objective-id
| False | builtin | -### /Assessment Results/Result/Risk/Prop/@Name +#### /Assessment Results/Result/Finding/Target/Implementation Status/@State -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • false-positive
  • accepted
  • risk-adjusted
  • priority
| False | builtin | -| allowed-values | [Location](/assessment-results/result/risk/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/target/implementation-status/@state) | . |
  • implemented
  • partial
  • planned
  • alternative
  • not-applicable
| True | builtin | -### /Assessment Results/Result/Risk/Response/@Lifecycle +#### /Assessment Results/Result/Finding/Target/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/@lifecycle) | . |
  • recommendation
  • planned
  • completed
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/target/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Response/Link/@Rel +#### /Assessment Results/Result/Finding/Target/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/target/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Response/Origin/Actor/@Type +#### /Assessment Results/Result/Finding/Target/Status/@Reason -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/target/status/@reason) | . |
  • pass
  • fail
  • other
| True | builtin | -### /Assessment Results/Result/Risk/Response/Origin/Actor/Link/@Rel +#### /Assessment Results/Result/Finding/Target/Status/@State -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/origin/actor/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/finding/target/status/@state) | . |
  • satisfied
  • not-satisfied
| False | builtin | -### /Assessment Results/Result/Risk/Response/Origin/Actor/Prop/@Name +#### /Assessment Results/Result/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Response/Origin/Related Task/Identified Subject/Subject/@Type +#### /Assessment Results/Result/Local Definitions/Assessment Assets/Assessment Platform/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-assets/assessment-platform/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Response/Origin/Related Task/Identified Subject/Subject/Exclude Subject/@Type +#### /Assessment Results/Result/Local Definitions/Assessment Assets/Assessment Platform/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-assets/assessment-platform/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Response/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel +#### /Assessment Results/Result/Local Definitions/Assessment Assets/Assessment Platform/Uses Component/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-assets/assessment-platform/uses-component/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Response/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name +#### /Assessment Results/Result/Local Definitions/Assessment Assets/Assessment Platform/Uses Component/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-assets/assessment-platform/uses-component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Response/Origin/Related Task/Identified Subject/Subject/Include Subject/@Type +#### /Assessment Results/Result/Local Definitions/Assessment Assets/Assessment Platform/Uses Component/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-assets/assessment-platform/uses-component/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Response/Origin/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel +#### /Assessment Results/Result/Local Definitions/Assessment Assets/Assessment Platform/Uses Component/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-assets/assessment-platform/uses-component/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Response/Origin/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name +#### /Assessment Results/Result/Local Definitions/Assessment Assets/Component/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-assets/component/@type) | . |
  • this-system
  • system
  • interconnection
  • software
  • hardware
  • service
  • policy
  • physical
  • process-procedure
  • plan
  • guidance
  • standard
  • validation
  • network
| True | builtin | -### /Assessment Results/Result/Risk/Response/Origin/Related Task/Identified Subject/Subject/Link/@Rel +#### /Assessment Results/Result/Local Definitions/Assessment Assets/Component/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-assets/component) | link/@rel |
  • depends-on
  • validation
  • proof-of-compliance
  • baseline-template
  • uses-service
  • system-security-plan
  • uses-network
  • imported-from
| True | builtin | +| [Location](/assessment-results/result/local-definitions/assessment-assets/component) | (.)[@type='validation']/link/@rel |
  • validation-details
| True | builtin | +| [Location](/assessment-results/result/local-definitions/assessment-assets/component) | (.)[@type='service']/link/@rel |
  • provided-by
  • used-by
| True | builtin | +| [Location](/assessment-results/result/local-definitions/assessment-assets/component) | (.)[@type='interconnection']/link/@rel |
  • isa-agreement
| True | builtin | +| [Location](/assessment-results/result/local-definitions/assessment-assets/component/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Response/Origin/Related Task/Identified Subject/Subject/Prop/@Name +#### /Assessment Results/Result/Local Definitions/Assessment Assets/Component/Prop/@Class -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('ipv4-address','ipv6-address')]/@class |
  • local
  • remote
| False | builtin | -### /Assessment Results/Result/Risk/Response/Origin/Related Task/Link/@Rel +#### /Assessment Results/Result/Local Definitions/Assessment Assets/Component/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • implementation-point
  • leveraged-authorization-uuid
  • inherited-uuid
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
| False | builtin | +| [Location](/assessment-results/result/local-definitions/assessment-assets/component) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | +| [Location](/assessment-results/result/local-definitions/assessment-assets/component) | (.)[@type='software']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • software-identifier
| False | builtin | +| [Location](/assessment-results/result/local-definitions/assessment-assets/component) | (.)[@type='interconnection']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • isa-title
  • isa-date
  • isa-remote-system-name
  • ipv4-address
  • ipv6-address
  • direction
| False | builtin | +| [Location](/assessment-results/result/local-definitions/assessment-assets/component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Response/Origin/Related Task/Prop/@Name +#### /Assessment Results/Result/Local Definitions/Assessment Assets/Component/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | +| [Location](/assessment-results/result/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='allows-authenticated-scan']/@value |
  • yes
  • no
| False | builtin | +| [Location](/assessment-results/result/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='public']/@value |
  • yes
  • no
| False | builtin | +| [Location](/assessment-results/result/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='virtual']/@value |
  • yes
  • no
| False | builtin | +| [Location](/assessment-results/result/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='implementation-point']/@value |
  • internal
  • external
| False | builtin | +| [Location](/assessment-results/result/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='direction']/@value |
  • incoming
  • outgoing
| False | builtin | -### /Assessment Results/Result/Risk/Response/Origin/Related Task/Responsible Party/Link/@Rel +#### /Assessment Results/Result/Local Definitions/Assessment Assets/Component/Protocol/Port Range/@Transport -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-assets/component/protocol/port-range/@transport) | . |
  • TCP
  • UDP
| False | builtin | -### /Assessment Results/Result/Risk/Response/Origin/Related Task/Responsible Party/Prop/@Name +#### /Assessment Results/Result/Local Definitions/Assessment Assets/Component/Responsible Role/@Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-assets/component) | responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | +| [Location](/assessment-results/result/local-definitions/assessment-assets/component) | (.)[@type='interconnection']/responsible-role/@role-id |
  • isa-poc-local
  • isa-poc-remote
  • isa-authorizing-official-local
  • isa-authorizing-official-remote
| True | builtin | -### /Assessment Results/Result/Risk/Response/Origin/Related Task/Subject/@Type +#### /Assessment Results/Result/Local Definitions/Assessment Assets/Component/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-assets/component/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Response/Origin/Related Task/Subject/Exclude Subject/@Type +#### /Assessment Results/Result/Local Definitions/Assessment Assets/Component/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-assets/component/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Response/Origin/Related Task/Subject/Exclude Subject/Link/@Rel +#### /Assessment Results/Result/Local Definitions/Assessment Assets/Component/Status/@State -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-assets/component/status/@state) | . |
  • under-development
  • operational
  • disposition
  • other
| False | builtin | -### /Assessment Results/Result/Risk/Response/Origin/Related Task/Subject/Exclude Subject/Prop/@Name +#### /Assessment Results/Result/Local Definitions/Assessment Task/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-task/@type) | . |
  • milestone
  • action
| True | builtin | -### /Assessment Results/Result/Risk/Response/Origin/Related Task/Subject/Include Subject/@Type +#### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Response/Origin/Related Task/Subject/Include Subject/Link/@Rel +#### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Response/Origin/Related Task/Subject/Include Subject/Prop/@Name +#### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Response/Origin/Related Task/Subject/Link/@Rel +#### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Response/Origin/Related Task/Subject/Prop/@Name +#### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/origin/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Assessment Results/Result/Risk/Response/Prop/@Name +#### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | -| allowed-values | [Location](/assessment-results/result/risk/response/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Assessment Results/Result/Risk/Response/Prop/@Value +#### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • avoid
  • mitigate
  • transfer
  • accept
  • share
  • contingency
  • none
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Response/Required Asset/Link/@Rel +#### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/required-asset/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Response/Required Asset/Prop/@Name +#### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/required-asset/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Assessment Results/Result/Risk/Response/Required Asset/Subject/@Type +#### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/required-asset/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Response/Required Asset/Subject/Link/@Rel +#### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/required-asset/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Response/Required Asset/Subject/Prop/@Name +#### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/required-asset/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Response/Task/@Type +#### /Assessment Results/Result/Local Definitions/Assessment Task/Associated Activity/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/task/@type) | . |
  • milestone
  • action
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-task/associated-activity/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Link/@Rel +#### /Assessment Results/Result/Local Definitions/Assessment Task/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/task/associated-activity/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-task/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Prop/@Name +#### /Assessment Results/Result/Local Definitions/Assessment Task/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/task/associated-activity/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Responsible Role/Link/@Rel +#### /Assessment Results/Result/Local Definitions/Assessment Task/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/task/associated-activity/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-task/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Responsible Role/Prop/@Name +#### /Assessment Results/Result/Local Definitions/Assessment Task/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/task/associated-activity/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-task/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Subject/@Type +#### /Assessment Results/Result/Local Definitions/Assessment Task/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/task/associated-activity/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Subject/Exclude Subject/@Type +#### /Assessment Results/Result/Local Definitions/Assessment Task/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/task/associated-activity/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Subject/Exclude Subject/Link/@Rel +#### /Assessment Results/Result/Local Definitions/Assessment Task/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/task/associated-activity/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Subject/Exclude Subject/Prop/@Name +#### /Assessment Results/Result/Local Definitions/Assessment Task/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/task/associated-activity/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Subject/Include Subject/@Type +#### /Assessment Results/Result/Local Definitions/Assessment Task/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/task/associated-activity/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Subject/Include Subject/Link/@Rel +#### /Assessment Results/Result/Local Definitions/Assessment Task/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/task/associated-activity/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Subject/Include Subject/Prop/@Name +#### /Assessment Results/Result/Local Definitions/Assessment Task/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/task/associated-activity/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Subject/Link/@Rel +#### /Assessment Results/Result/Local Definitions/Assessment Task/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/task/associated-activity/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-task/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Subject/Prop/@Name +#### /Assessment Results/Result/Local Definitions/Assessment Task/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/task/associated-activity/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Response/Task/Link/@Rel +#### /Assessment Results/Result/Local Definitions/Assessment Task/Timing/At Frequency/@Unit -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/task/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/assessment-task/timing/at-frequency/@unit) | . |
  • seconds
  • minutes
  • hours
  • days
  • months
  • years
| False | builtin | -### /Assessment Results/Result/Risk/Response/Task/Prop/@Name +#### /Assessment Results/Result/Local Definitions/Component/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/component/@type) | . |
  • this-system
  • system
  • interconnection
  • software
  • hardware
  • service
  • policy
  • physical
  • process-procedure
  • plan
  • guidance
  • standard
  • validation
  • network
| True | builtin | -### /Assessment Results/Result/Risk/Response/Task/Responsible Role/Link/@Rel +#### /Assessment Results/Result/Local Definitions/Component/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/task/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/component) | link/@rel |
  • depends-on
  • validation
  • proof-of-compliance
  • baseline-template
  • uses-service
  • system-security-plan
  • uses-network
  • imported-from
| True | builtin | +| [Location](/assessment-results/result/local-definitions/component) | (.)[@type='validation']/link/@rel |
  • validation-details
| True | builtin | +| [Location](/assessment-results/result/local-definitions/component) | (.)[@type='service']/link/@rel |
  • provided-by
  • used-by
| True | builtin | +| [Location](/assessment-results/result/local-definitions/component) | (.)[@type='interconnection']/link/@rel |
  • isa-agreement
| True | builtin | +| [Location](/assessment-results/result/local-definitions/component/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Response/Task/Responsible Role/Prop/@Name +#### /Assessment Results/Result/Local Definitions/Component/Prop/@Class -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/task/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('ipv4-address','ipv6-address')]/@class |
  • local
  • remote
| False | builtin | -### /Assessment Results/Result/Risk/Response/Task/Subject/@Type +#### /Assessment Results/Result/Local Definitions/Component/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • implementation-point
  • leveraged-authorization-uuid
  • inherited-uuid
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
| False | builtin | +| [Location](/assessment-results/result/local-definitions/component) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | +| [Location](/assessment-results/result/local-definitions/component) | (.)[@type='software']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • software-identifier
| False | builtin | +| [Location](/assessment-results/result/local-definitions/component) | (.)[@type='interconnection']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • isa-title
  • isa-date
  • isa-remote-system-name
  • ipv4-address
  • ipv6-address
  • direction
| False | builtin | +| [Location](/assessment-results/result/local-definitions/component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Response/Task/Subject/Exclude Subject/@Type +#### /Assessment Results/Result/Local Definitions/Component/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | +| [Location](/assessment-results/result/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='allows-authenticated-scan']/@value |
  • yes
  • no
| False | builtin | +| [Location](/assessment-results/result/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='public']/@value |
  • yes
  • no
| False | builtin | +| [Location](/assessment-results/result/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='virtual']/@value |
  • yes
  • no
| False | builtin | +| [Location](/assessment-results/result/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='implementation-point']/@value |
  • internal
  • external
| False | builtin | +| [Location](/assessment-results/result/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='direction']/@value |
  • incoming
  • outgoing
| False | builtin | -### /Assessment Results/Result/Risk/Response/Task/Subject/Exclude Subject/Link/@Rel +#### /Assessment Results/Result/Local Definitions/Component/Protocol/Port Range/@Transport -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/component/protocol/port-range/@transport) | . |
  • TCP
  • UDP
| False | builtin | -### /Assessment Results/Result/Risk/Response/Task/Subject/Exclude Subject/Prop/@Name +#### /Assessment Results/Result/Local Definitions/Component/Responsible Role/@Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/component) | responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | +| [Location](/assessment-results/result/local-definitions/component) | (.)[@type='interconnection']/responsible-role/@role-id |
  • isa-poc-local
  • isa-poc-remote
  • isa-authorizing-official-local
  • isa-authorizing-official-remote
| True | builtin | -### /Assessment Results/Result/Risk/Response/Task/Subject/Include Subject/@Type +#### /Assessment Results/Result/Local Definitions/Component/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/component/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Response/Task/Subject/Include Subject/Link/@Rel +#### /Assessment Results/Result/Local Definitions/Component/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/component/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Response/Task/Subject/Include Subject/Prop/@Name +#### /Assessment Results/Result/Local Definitions/Component/Status/@State -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/component/status/@state) | . |
  • under-development
  • operational
  • disposition
  • other
| False | builtin | -### /Assessment Results/Result/Risk/Response/Task/Subject/Link/@Rel +#### /Assessment Results/Result/Local Definitions/Inventory Item/Implemented Component/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/task/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/inventory-item/implemented-component/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Response/Task/Subject/Prop/@Name +#### /Assessment Results/Result/Local Definitions/Inventory Item/Implemented Component/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/inventory-item/implemented-component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
| False | builtin | +| [Location](/assessment-results/result/local-definitions/inventory-item/implemented-component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Response/Task/Timing/At Frequency/@Unit +#### /Assessment Results/Result/Local Definitions/Inventory Item/Implemented Component/Responsible Party/@Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/response/task/timing/at-frequency/@unit) | . |
  • seconds
  • minutes
  • hours
  • days
  • months
  • years
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/inventory-item/implemented-component) | responsible-party/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
| True | builtin | -### /Assessment Results/Result/Risk/Risk Log/Entry/Link/@Rel +#### /Assessment Results/Result/Local Definitions/Inventory Item/Implemented Component/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/inventory-item/implemented-component/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Risk Log/Entry/Prop/@Name +#### /Assessment Results/Result/Local Definitions/Inventory Item/Implemented Component/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | -| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/inventory-item/implemented-component/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Risk Log/Entry/Prop/@Value +#### /Assessment Results/Result/Local Definitions/Inventory Item/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • vendor-check-in
  • status-update
  • milestone-complete
  • mitigation
  • remediated
  • closed
  • dr-submission
  • dr-updated
  • dr-approved
  • dr-rejected
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/inventory-item) | link/@rel |
  • baseline-template
| True | builtin | +| [Location](/assessment-results/result/local-definitions/inventory-item/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Link/@Rel +#### /Assessment Results/Result/Local Definitions/Inventory Item/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • ipv4-address
  • ipv6-address
  • fqdn
  • uri
  • serial-number
  • netbios-name
  • mac-address
  • physical-location
  • is-scanned
  • hardware-model
  • os-name
  • os-version
  • software-name
  • software-version
  • software-patch-level
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
| False | builtin | +| [Location](/assessment-results/result/local-definitions/inventory-item) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | +| [Location](/assessment-results/result/local-definitions/inventory-item/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Prop/@Name +#### /Assessment Results/Result/Local Definitions/Inventory Item/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | +| [Location](/assessment-results/result/local-definitions/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='is-scanned']/@value |
  • yes
  • no
| False | builtin | -### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/@Type +#### /Assessment Results/Result/Local Definitions/Inventory Item/Responsible Party/@Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/inventory-item) | responsible-party/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | -### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Exclude Subject/@Type +#### /Assessment Results/Result/Local Definitions/Inventory Item/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/inventory-item/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel +#### /Assessment Results/Result/Local Definitions/Inventory Item/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/inventory-item/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name +#### /Assessment Results/Result/Local Definitions/User/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/user/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Include Subject/@Type +#### /Assessment Results/Result/Local Definitions/User/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/user) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
  • privilege-level
| False | builtin | +| [Location](/assessment-results/result/local-definitions/user/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel +#### /Assessment Results/Result/Local Definitions/User/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/user) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • internal
  • external
  • general-public
| False | builtin | +| [Location](/assessment-results/result/local-definitions/user) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='privilege-level']/@value |
  • privileged
  • non-privileged
  • no-logical-access
| False | builtin | -### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name +#### /Assessment Results/Result/Local Definitions/User/Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/local-definitions/user) | role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
| True | builtin | -### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Link/@Rel +#### /Assessment Results/Result/Observation/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Prop/@Name +#### /Assessment Results/Result/Observation/Method -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/method) | . |
  • EXAMINE
  • INTERVIEW
  • TEST
  • UNKNOWN
| True | builtin | -### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Link/@Rel +#### /Assessment Results/Result/Observation/Origin/Actor/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | -### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Prop/@Name +#### /Assessment Results/Result/Observation/Origin/Actor/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/origin/actor/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Responsible Party/Link/@Rel +#### /Assessment Results/Result/Observation/Origin/Actor/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Responsible Party/Prop/@Name +#### /Assessment Results/Result/Observation/Origin/Related Task/Identified Subject/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/origin/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Subject/@Type +#### /Assessment Results/Result/Observation/Origin/Related Task/Identified Subject/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/origin/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Exclude Subject/@Type +#### /Assessment Results/Result/Observation/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/origin/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Exclude Subject/Link/@Rel +#### /Assessment Results/Result/Observation/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/origin/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Exclude Subject/Prop/@Name +#### /Assessment Results/Result/Observation/Origin/Related Task/Identified Subject/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/origin/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Include Subject/@Type +#### /Assessment Results/Result/Observation/Origin/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/origin/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Include Subject/Link/@Rel +#### /Assessment Results/Result/Observation/Origin/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/origin/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Include Subject/Prop/@Name +#### /Assessment Results/Result/Observation/Origin/Related Task/Identified Subject/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/origin/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Link/@Rel +#### /Assessment Results/Result/Observation/Origin/Related Task/Identified Subject/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/origin/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Prop/@Name +#### /Assessment Results/Result/Observation/Origin/Related Task/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/origin/related-task/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Risk Log/Entry/Status Change +#### /Assessment Results/Result/Observation/Origin/Related Task/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/risk-log/entry/status-change) | . |
  • open
  • investigating
  • remediating
  • deviation-requested
  • deviation-approved
  • closed
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/origin/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Assessment Results/Result/Risk/Status +#### /Assessment Results/Result/Observation/Origin/Related Task/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/status) | . |
  • open
  • investigating
  • remediating
  • deviation-requested
  • deviation-approved
  • closed
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/origin/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Assessment Results/Result/Risk/Threat Id/@System +#### /Assessment Results/Result/Observation/Origin/Related Task/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/assessment-results/result/risk/threat-id/@system) | . |
  • http://fedramp.gov
  • http://fedramp.gov/ns/oscal
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/origin/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Catalog/Back Matter/Resource/Citation/Link/@Rel +#### /Assessment Results/Result/Observation/Origin/Related Task/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/back-matter/resource/citation/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/origin/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Catalog/Back Matter/Resource/Citation/Prop/@Name +#### /Assessment Results/Result/Observation/Origin/Related Task/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/back-matter/resource/citation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/origin/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Catalog/Back Matter/Resource/Document Id/@Scheme +#### /Assessment Results/Result/Observation/Origin/Related Task/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/back-matter/resource/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/origin/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Catalog/Back Matter/Resource/Prop/@Name +#### /Assessment Results/Result/Observation/Origin/Related Task/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
  • version
  • published
| False | builtin | -| allowed-values | [Location](/catalog/back-matter/resource/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/origin/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Catalog/Back Matter/Resource/Prop/@Value +#### /Assessment Results/Result/Observation/Origin/Related Task/Subject/Include Subject/@Type -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | attachment-type | [Location](/catalog) | back-matter/resource/prop[@name='type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • law
  • regulation
  • standard
  • guidance
  • policy
  • procedure
  • guide
  • rules-of-behavior
  • plan
  • system-security-plan
  • artifact
  • evidence
  • screen-shot
  • image
  • tool-report
  • raw-tool-output
  • interview-notes
  • questionnaire
  • report
  • fedramp-citations
  • fedramp-acronyms
  • fedramp-logo
  • separation-of-duties-matrix
  • logo
  • personally-identifiable-information
  • agreement
  • isa-agreement
  • incident-response-plan
  • information-security-policies-and-procedures
  • users-guide
  • privacy-impact-assessment
  • information-system-contingency-plan
  • configuration-management-plan
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -| allowed-values | | [Location](/catalog/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • logo
  • image
  • screen-shot
  • law
  • regulation
  • standard
  • external-guidance
  • acronyms
  • citation
  • policy
  • procedure
  • system-guide
  • users-guide
  • administrators-guide
  • rules-of-behavior
  • plan
  • artifact
  • evidence
  • tool-output
  • raw-data
  • interview-notes
  • questionnaire
  • report
  • agreement
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/origin/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Catalog/Back Matter/Resource/Rlink/Hash/@Algorithm +#### /Assessment Results/Result/Observation/Origin/Related Task/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/back-matter/resource/rlink/hash/@algorithm) | . |
  • SHA-224
  • SHA-256
  • SHA-384
  • SHA-512
  • SHA3-224
  • SHA3-256
  • SHA3-384
  • SHA3-512
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/origin/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Catalog/Control/Link/@Rel +#### /Assessment Results/Result/Observation/Origin/Related Task/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/control) | link/@rel |
  • reference
  • related
  • required
  • incorporated-into
  • moved-to
| True | builtin | -| allowed-values | [Location](/catalog/control/link/@rel) | . |
  • reference
| True | builtin | -| allowed-values | [Location](/catalog/control/control) | link/@rel |
  • reference
  • related
  • required
  • incorporated-into
  • moved-to
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/origin/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Catalog/Control/Param/Link/@Rel +#### /Assessment Results/Result/Observation/Origin/Related Task/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/control/param/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/origin/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Catalog/Control/Param/Prop/@Name +#### /Assessment Results/Result/Observation/Origin/Related Task/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/control/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
  • alt-label
| False | builtin | -| allowed-values | [Location](/catalog/control/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/rmf')]/@name |
  • aggregates
| False | builtin | -| allowed-values | [Location](/catalog/control/param/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/origin/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Catalog/Control/Param/Select/@How Many +#### /Assessment Results/Result/Observation/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/control/param/select/@how-many) | . |
  • one
  • one-or-more
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Catalog/Control/Part/@Name +#### /Assessment Results/Result/Observation/Relevant Evidence/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • overview
  • statement
  • guidance
  • example
  • assessment
  • assessment-method
| False | builtin | -| allowed-values | [Location](/catalog/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='statement']//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • item
| False | builtin | -| allowed-values | [Location](/catalog/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='statement']//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • item
| False | builtin | -| allowed-values | [Location](/catalog/control) | [Target](.//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name) |
  • objective
  • assessment-objective
| False | builtin | -| allowed-values | [Location](/catalog/control) | [Target](.//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name) |
  • objective
  • assessment-objective
| False | builtin | -| allowed-values | [Location](/catalog/control) | [Target](.//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name) |
  • objective
  • assessment-objective
| False | builtin | -| allowed-values | [Location](/catalog/control) | [Target](.//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name) |
  • objective
  • assessment-objective
| False | builtin | -| allowed-values | [Location](/catalog/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • objects
  • assessment-objects
| False | builtin | -| allowed-values | [Location](/catalog/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • overview
  • statement
  • guidance
  • example
  • assessment
  • assessment-method
| False | builtin | -| allowed-values | [Location](/catalog/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='statement']//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • item
| False | builtin | -| allowed-values | [Location](/catalog/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='statement']//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • item
| False | builtin | -| allowed-values | [Location](/catalog/control/control) | [Target](.//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name) |
  • objective
  • assessment-objective
| False | builtin | -| allowed-values | [Location](/catalog/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • objects
  • assessment-objects
| False | builtin | - -### /Catalog/Control/Part/Link/@Rel - -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/control/part/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/relevant-evidence/link/@rel) | . |
  • reference
| True | builtin | -### /Catalog/Control/Part/Prop/@Name +#### /Assessment Results/Result/Observation/Relevant Evidence/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • method
| False | builtin | -| allowed-values | [Location](/catalog/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/rmf')]/@name |
  • method
| False | builtin | -| allowed-values | [Location](/catalog/control/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | -| allowed-values | [Location](/catalog/control/part/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -| allowed-values | [Location](/catalog/control/part/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | -| allowed-values | [Location](/catalog/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • method
| False | builtin | -| allowed-values | [Location](/catalog/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/rmf')]/@name |
  • method
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/relevant-evidence/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Catalog/Control/Part/Prop/@Value +#### /Assessment Results/Result/Observation/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace(('http://csrc.nist.gov/ns/oscal','http://csrc.nist.gov/ns/rmf')) and @name='method']/@value |
  • INTERVIEW
  • EXAMINE
  • TEST
| False | builtin | -| allowed-values | [Location](/catalog/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace(('http://csrc.nist.gov/ns/oscal','http://csrc.nist.gov/ns/rmf')) and @name='method']/@value |
  • INTERVIEW
  • EXAMINE
  • TEST
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Catalog/Control/Prop/@Name +#### /Assessment Results/Result/Observation/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/control) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
  • status
| False | builtin | -| allowed-values | [Location](/catalog/control/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -| allowed-values | [Location](/catalog/control/control) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
  • status
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Catalog/Control/Prop/@Value +#### /Assessment Results/Result/Observation/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/control) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='status']/@value |
  • withdrawn
  • Withdrawn
| False | builtin | -| allowed-values | [Location](/catalog/control/control) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='status']/@value |
  • withdrawn
  • Withdrawn
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Catalog/Group/Control/Link/@Rel +#### /Assessment Results/Result/Observation/Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/group/control) | link/@rel |
  • reference
  • related
  • required
  • incorporated-into
  • moved-to
| True | builtin | -| allowed-values | [Location](/catalog/group/control/link/@rel) | . |
  • reference
| True | builtin | -| allowed-values | [Location](/catalog/group/control/control) | link/@rel |
  • reference
  • related
  • required
  • incorporated-into
  • moved-to
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/observation/type) | . |
  • ssp-statement-issue
  • control-objective
  • mitigation
  • finding
  • historic
| True | builtin | -### /Catalog/Group/Control/Param/Link/@Rel +#### /Assessment Results/Result/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/group/control/param/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Catalog/Group/Control/Param/Prop/@Name +#### /Assessment Results/Result/Reviewed Controls/Control Objective Selection/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/group/control/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
  • alt-label
| False | builtin | -| allowed-values | [Location](/catalog/group/control/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/rmf')]/@name |
  • aggregates
| False | builtin | -| allowed-values | [Location](/catalog/group/control/param/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/reviewed-controls/control-objective-selection/link/@rel) | . |
  • reference
| True | builtin | -### /Catalog/Group/Control/Param/Select/@How Many +#### /Assessment Results/Result/Reviewed Controls/Control Objective Selection/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/group/control/param/select/@how-many) | . |
  • one
  • one-or-more
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/reviewed-controls/control-objective-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Catalog/Group/Control/Part/@Name +#### /Assessment Results/Result/Reviewed Controls/Control Selection/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/group/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • overview
  • statement
  • guidance
  • example
  • assessment
  • assessment-method
| False | builtin | -| allowed-values | [Location](/catalog/group/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='statement']//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • item
| False | builtin | -| allowed-values | [Location](/catalog/group/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='statement']//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • item
| False | builtin | -| allowed-values | [Location](/catalog/group/control) | [Target](.//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name) |
  • objective
  • assessment-objective
| False | builtin | -| allowed-values | [Location](/catalog/group/control) | [Target](.//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name) |
  • objective
  • assessment-objective
| False | builtin | -| allowed-values | [Location](/catalog/group/control) | [Target](.//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name) |
  • objective
  • assessment-objective
| False | builtin | -| allowed-values | [Location](/catalog/group/control) | [Target](.//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name) |
  • objective
  • assessment-objective
| False | builtin | -| allowed-values | [Location](/catalog/group/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • objects
  • assessment-objects
| False | builtin | -| allowed-values | [Location](/catalog/group/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • overview
  • statement
  • guidance
  • example
  • assessment
  • assessment-method
| False | builtin | -| allowed-values | [Location](/catalog/group/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='statement']//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • item
| False | builtin | -| allowed-values | [Location](/catalog/group/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='statement']//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • item
| False | builtin | -| allowed-values | [Location](/catalog/group/control/control) | [Target](.//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name) |
  • objective
  • assessment-objective
| False | builtin | -| allowed-values | [Location](/catalog/group/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • objects
  • assessment-objects
| False | builtin | - -### /Catalog/Group/Control/Part/Link/@Rel - -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/group/control/part/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/reviewed-controls/control-selection/link/@rel) | . |
  • reference
| True | builtin | -### /Catalog/Group/Control/Part/Prop/@Name +#### /Assessment Results/Result/Reviewed Controls/Control Selection/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/group/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • method
| False | builtin | -| allowed-values | [Location](/catalog/group/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/rmf')]/@name |
  • method
| False | builtin | -| allowed-values | [Location](/catalog/group/control/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | -| allowed-values | [Location](/catalog/group/control/part/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -| allowed-values | [Location](/catalog/group/control/part/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | -| allowed-values | [Location](/catalog/group/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • method
| False | builtin | -| allowed-values | [Location](/catalog/group/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/rmf')]/@name |
  • method
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/reviewed-controls/control-selection/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Catalog/Group/Control/Part/Prop/@Value +#### /Assessment Results/Result/Reviewed Controls/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/group/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace(('http://csrc.nist.gov/ns/oscal','http://csrc.nist.gov/ns/rmf')) and @name='method']/@value |
  • INTERVIEW
  • EXAMINE
  • TEST
| False | builtin | -| allowed-values | [Location](/catalog/group/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace(('http://csrc.nist.gov/ns/oscal','http://csrc.nist.gov/ns/rmf')) and @name='method']/@value |
  • INTERVIEW
  • EXAMINE
  • TEST
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/reviewed-controls/link/@rel) | . |
  • reference
| True | builtin | -### /Catalog/Group/Control/Prop/@Name +#### /Assessment Results/Result/Reviewed Controls/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/group/control) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
  • status
| False | builtin | -| allowed-values | [Location](/catalog/group/control/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -| allowed-values | [Location](/catalog/group/control/control) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
  • status
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/reviewed-controls/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Catalog/Group/Control/Prop/@Value +#### /Assessment Results/Result/Risk/Characterization/Facet/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/group/control) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='status']/@value |
  • withdrawn
  • Withdrawn
| False | builtin | -| allowed-values | [Location](/catalog/group/control/control) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='status']/@value |
  • withdrawn
  • Withdrawn
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://csrc.nist.gov/ns/oscal']/@name |
  • likelihood
  • impact
  • risk
  • severity
| False | builtin | +| [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://fedramp.gov','http://fedramp.gov/ns/oscal')]/@name |
  • likelihood
  • impact
  • risk
| False | builtin | +| [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://cve.mitre.org']/@name |
  • cve-id
| False | builtin | +| [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0']/@name |
  • access-vector
  • access-complexity
  • authentication
  • confidentiality-impact
  • integrity-impact
  • availability-impact
  • exploitability
  • remediation-level
  • report-confidence
  • collateral-damage-potential
  • target-distribution
  • confidentiality-requirement
  • integrity-requirement
  • availability-requirement
| False | builtin | +| [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1')]/@name |
  • attack-vector
  • access-complexity
  • privileges-required
  • user-interaction
  • scope
  • confidentiality-impact
  • integrity-impact
  • availability-impact
  • exploit-code-maturity
  • remediation-level
  • report-confidence
  • modified-attack-vector
  • modified-attack-complexity
  • modified-privileges-required
  • modified-user-interaction
  • modified-scope
  • modified-confidentiality
  • modified-integrity
  • modified-availability
  • confidentiality-requirement
  • integrity-requirement
  • availability-requirement
| False | builtin | -### /Catalog/Group/Link/@Rel +#### /Assessment Results/Result/Risk/Characterization/Facet/@System -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/group/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/facet/@system) | . |
  • http://fedramp.gov
  • http://fedramp.gov/ns/oscal
  • http://csrc.nist.gov/ns/oscal
  • http://csrc.nist.gov/ns/oscal/unknown
  • http://cve.mitre.org
  • http://www.first.org/cvss/v2.0
  • http://www.first.org/cvss/v3.0
  • http://www.first.org/cvss/v3.1
| True | builtin | -### /Catalog/Group/Param/Link/@Rel +#### /Assessment Results/Result/Risk/Characterization/Facet/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/group/param/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='access-vector']/@value |
  • local
  • adjacent-network
  • network
| False | builtin | +| [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='access-complexity']/@value |
  • high
  • medium
  • low
| False | builtin | +| [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='authentication']/@value |
  • multiple
  • single
  • none
| False | builtin | +| [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name=('confidentiality-impact', 'integrity-impact', 'availability-impact')]/@value |
  • none
  • partial
  • complete
| False | builtin | +| [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='exploitability']/@value |
  • unproven
  • proof-of-concept
  • functional
  • high
  • not-defined
| False | builtin | +| [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='remediation-level']/@value |
  • official-fix
  • temporary-fix
  • workaround
  • unavailable
  • not-defined
| False | builtin | +| [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='report-confidence']/@value |
  • unconfirmed
  • uncorroborated
  • confirmed
  • not-defined
| False | builtin | +| [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='collateral-damage-potential']/@value |
  • none
  • low
  • low-medium
  • medium-high
  • high
  • not-defined
| False | builtin | +| [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name=('target-distribution', 'confidentiality-requirement', 'integrity-requirement', 'availability-requirement')]/@value |
  • none
  • low
  • medium
  • high
  • not-defined
| False | builtin | +| [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='access-vector']/@value |
  • network
  • adjacent
  • local
  • physical
| False | builtin | +| [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='access-complexity']/@value |
  • high
  • low
| False | builtin | +| [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name=('privileges-required', 'confidentiality-impact', 'integrity-impact', 'availability-impact')]/@value |
  • none
  • low
  • high
| False | builtin | +| [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='user-interaction']/@value |
  • none
  • required
| False | builtin | +| [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='scope']/@value |
  • unchanged
  • changed
| False | builtin | +| [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='exploit-code-maturity']/@value |
  • not-defined
  • unproven
  • proof-of-concept
  • functional
  • high
| False | builtin | +| [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='remediation-level']/@value |
  • not-defined
  • official-fix
  • temporary-fix
  • workaround
  • unavailable
| False | builtin | +| [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='report-confidence']/@value |
  • not-defined
  • unknown
  • reasonable
  • confirmed
| False | builtin | +| [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name=('confidentiality-requirement', 'integrity-requirement', 'availability-requirement')]/@value |
  • not-defined
  • low
  • medium
  • high
| False | builtin | +| [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='modified-attack-vector']/@value |
  • not-defined
  • network
  • adjacent
  • local
  • physical
| False | builtin | +| [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='modified-attack-complexity']/@value |
  • not-defined
  • high
  • low
| False | builtin | +| [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name=('modified-privileges-required', 'modified-confidentiality', 'modified-integrity', 'modified-availability')]/@value |
  • not-defined
  • none
  • low
  • high
| False | builtin | +| [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='modified-user-interaction']/@value |
  • not-defined
  • none
  • required
| False | builtin | +| [Location](/assessment-results/result/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='modified-scope']/@value |
  • not-defined
  • unchanged
  • changed
| False | builtin | -### /Catalog/Group/Param/Prop/@Name +#### /Assessment Results/Result/Risk/Characterization/Facet/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/group/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
  • alt-label
| False | builtin | -| allowed-values | [Location](/catalog/group/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/rmf')]/@name |
  • aggregates
| False | builtin | -| allowed-values | [Location](/catalog/group/param/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/facet/link/@rel) | . |
  • reference
| True | builtin | -### /Catalog/Group/Param/Select/@How Many +#### /Assessment Results/Result/Risk/Characterization/Facet/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/group/param/select/@how-many) | . |
  • one
  • one-or-more
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/facet) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • state
| False | builtin | +| [Location](/assessment-results/result/risk/characterization/facet/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Catalog/Group/Part/@Name +#### /Assessment Results/Result/Risk/Characterization/Facet/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/group) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • overview
  • instruction
| False | builtin | -| allowed-values | [Location](/catalog/group/group) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • overview
  • instruction
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/facet) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='state']/@value |
  • initial
  • adjusted
| False | builtin | -### /Catalog/Group/Part/Link/@Rel +#### /Assessment Results/Result/Risk/Characterization/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/group/part/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/link/@rel) | . |
  • reference
| True | builtin | -### /Catalog/Group/Part/Prop/@Name +#### /Assessment Results/Result/Risk/Characterization/Origin/Actor/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/group/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | -| allowed-values | [Location](/catalog/group/part/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -| allowed-values | [Location](/catalog/group/part/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | -### /Catalog/Group/Prop/@Name +#### /Assessment Results/Result/Risk/Characterization/Origin/Actor/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/group) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | -| allowed-values | [Location](/catalog/group/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -| allowed-values | [Location](/catalog/group/group) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/origin/actor/link/@rel) | . |
  • reference
| True | builtin | -### /Catalog/Metadata/Action/Link/@Rel +#### /Assessment Results/Result/Risk/Characterization/Origin/Actor/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/metadata/action/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Catalog/Metadata/Action/Prop/@Name +#### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/metadata/action/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/origin/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Catalog/Metadata/Action/Responsible Party/Link/@Rel +#### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/metadata/action/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/origin/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Catalog/Metadata/Action/Responsible Party/Prop/@Name +#### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/metadata/action/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/origin/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Catalog/Metadata/Document Id/@Scheme +#### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/metadata/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/origin/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Catalog/Metadata/Link/@Rel +#### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog) | metadata/link/@rel |
  • source-profile
  • source-profile-uuid
| True | builtin | -| allowed-values | [Location](/catalog/metadata) | link/@rel |
  • canonical
  • alternate
  • latest-version
  • predecessor-version
  • successor-version
| True | builtin | -| allowed-values | [Location](/catalog/metadata/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/origin/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Catalog/Metadata/Location/Address/@Type +#### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/metadata/location/address/@type) | . |
  • home
  • work
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/origin/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Catalog/Metadata/Location/Link/@Rel +#### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/metadata/location/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/origin/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Catalog/Metadata/Location/Prop/@Class +#### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type' and @value='data-center']/@class |
  • primary
  • alternate
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/origin/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Catalog/Metadata/Location/Prop/@Name +#### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | -| allowed-values | [Location](/catalog/metadata/location/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/origin/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Catalog/Metadata/Location/Prop/@Value +#### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • data-center
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/origin/related-task/link/@rel) | . |
  • reference
| True | builtin | -### /Catalog/Metadata/Location/Telephone Number/@Type +#### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/metadata/location/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/origin/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Catalog/Metadata/Party/@Type +#### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/metadata/party/@type) | . |
  • person
  • organization
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/origin/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Catalog/Metadata/Party/Address/@Type +#### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Responsible Party/Prop/@Name -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | address-type | [Location](/catalog) | metadata/party/address/@type |
  • work
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -| allowed-values | | [Location](/catalog/metadata/party/address/@type) | . |
  • home
  • work
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/origin/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Catalog/Metadata/Party/External Id/@Scheme +#### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/metadata/party/external-id/@scheme) | . |
  • http://orcid.org/
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/origin/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Catalog/Metadata/Party/Link/@Rel +#### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/metadata/party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/origin/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Catalog/Metadata/Party/Prop/@Name +#### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/metadata/party) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • mail-stop
  • office
  • job-title
| False | builtin | -| allowed-values | [Location](/catalog/metadata/party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/origin/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Catalog/Metadata/Party/Telephone Number/@Type +#### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/metadata/party/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/origin/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Catalog/Metadata/Prop/@Name +#### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog) | metadata/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • resolution-tool
  • source-profile-uuid
| False | builtin | -| allowed-values | [Location](/catalog/metadata) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • keywords
| False | builtin | -| allowed-values | [Location](/catalog/metadata/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/origin/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Catalog/Metadata/Responsible Party/@Role Id +#### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Subject/Include Subject/Link/@Rel -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | allowed-metadata-responsibe-party-role-ids | [Location](/catalog/metadata) | responsible-party/@role-id |
  • creator
  • prepared-by
  • prepared-for
  • content-approver
  • contact
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/origin/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Catalog/Metadata/Responsible Party/Link/@Rel +#### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/metadata/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/origin/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Catalog/Metadata/Responsible Party/Prop/@Name +#### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/metadata/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/origin/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Catalog/Metadata/Revision/Link/@Rel +#### /Assessment Results/Result/Risk/Characterization/Origin/Related Task/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/metadata/revision) | link/@rel |
  • canonical
  • alternate
  • predecessor-version
  • successor-version
  • version-history
| True | builtin | -| allowed-values | [Location](/catalog/metadata/revision/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/origin/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Catalog/Metadata/Revision/Prop/@Name +#### /Assessment Results/Result/Risk/Characterization/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/metadata/revision/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/characterization/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Catalog/Metadata/Role/Link/@Rel +#### /Assessment Results/Result/Risk/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/metadata/role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/link/@rel) | . |
  • reference
| True | builtin | -### /Catalog/Metadata/Role/Prop/@Name +#### /Assessment Results/Result/Risk/Mitigating Factor/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/metadata/role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/mitigating-factor/link/@rel) | . |
  • reference
| True | builtin | -### /Catalog/Param/Link/@Rel +#### /Assessment Results/Result/Risk/Mitigating Factor/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/param/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/mitigating-factor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Catalog/Param/Prop/@Name +#### /Assessment Results/Result/Risk/Mitigating Factor/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
  • alt-label
| False | builtin | -| allowed-values | [Location](/catalog/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/rmf')]/@name |
  • aggregates
| False | builtin | -| allowed-values | [Location](/catalog/param/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/mitigating-factor/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Catalog/Param/Select/@How Many +#### /Assessment Results/Result/Risk/Mitigating Factor/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/catalog/param/select/@how-many) | . |
  • one
  • one-or-more
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/mitigating-factor/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Component Definition/Back Matter/Resource/Citation/Link/@Rel +#### /Assessment Results/Result/Risk/Mitigating Factor/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/back-matter/resource/citation/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/mitigating-factor/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Component Definition/Back Matter/Resource/Citation/Prop/@Name +#### /Assessment Results/Result/Risk/Origin/Actor/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/back-matter/resource/citation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | -### /Component Definition/Back Matter/Resource/Document Id/@Scheme +#### /Assessment Results/Result/Risk/Origin/Actor/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/back-matter/resource/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/origin/actor/link/@rel) | . |
  • reference
| True | builtin | -### /Component Definition/Back Matter/Resource/Prop/@Name +#### /Assessment Results/Result/Risk/Origin/Actor/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
  • version
  • published
| False | builtin | -| allowed-values | [Location](/component-definition/back-matter/resource/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Component Definition/Back Matter/Resource/Prop/@Value +#### /Assessment Results/Result/Risk/Origin/Related Task/Identified Subject/Subject/@Type -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | attachment-type | [Location](/component-definition) | back-matter/resource/prop[@name='type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • law
  • regulation
  • standard
  • guidance
  • policy
  • procedure
  • guide
  • rules-of-behavior
  • plan
  • system-security-plan
  • artifact
  • evidence
  • screen-shot
  • image
  • tool-report
  • raw-tool-output
  • interview-notes
  • questionnaire
  • report
  • fedramp-citations
  • fedramp-acronyms
  • fedramp-logo
  • separation-of-duties-matrix
  • logo
  • personally-identifiable-information
  • agreement
  • isa-agreement
  • incident-response-plan
  • information-security-policies-and-procedures
  • users-guide
  • privacy-impact-assessment
  • information-system-contingency-plan
  • configuration-management-plan
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -| allowed-values | | [Location](/component-definition/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • logo
  • image
  • screen-shot
  • law
  • regulation
  • standard
  • external-guidance
  • acronyms
  • citation
  • policy
  • procedure
  • system-guide
  • users-guide
  • administrators-guide
  • rules-of-behavior
  • plan
  • artifact
  • evidence
  • tool-output
  • raw-data
  • interview-notes
  • questionnaire
  • report
  • agreement
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/origin/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Component Definition/Back Matter/Resource/Rlink/Hash/@Algorithm +#### /Assessment Results/Result/Risk/Origin/Related Task/Identified Subject/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/back-matter/resource/rlink/hash/@algorithm) | . |
  • SHA-224
  • SHA-256
  • SHA-384
  • SHA-512
  • SHA3-224
  • SHA3-256
  • SHA3-384
  • SHA3-512
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/origin/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Component Definition/Capability/Control Implementation/Implemented Requirement/Link/@Rel +#### /Assessment Results/Result/Risk/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/capability/control-implementation/implemented-requirement/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/origin/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Component Definition/Capability/Control Implementation/Implemented Requirement/Prop/@Name +#### /Assessment Results/Result/Risk/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/capability/control-implementation/implemented-requirement/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/origin/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Component Definition/Capability/Control Implementation/Implemented Requirement/Responsible Role/Link/@Rel +#### /Assessment Results/Result/Risk/Origin/Related Task/Identified Subject/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/capability/control-implementation/implemented-requirement/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/origin/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Component Definition/Capability/Control Implementation/Implemented Requirement/Responsible Role/Prop/@Name +#### /Assessment Results/Result/Risk/Origin/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/capability/control-implementation/implemented-requirement/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/origin/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Component Definition/Capability/Control Implementation/Implemented Requirement/Statement/Link/@Rel +#### /Assessment Results/Result/Risk/Origin/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/capability/control-implementation/implemented-requirement/statement/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/origin/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Component Definition/Capability/Control Implementation/Implemented Requirement/Statement/Prop/@Name +#### /Assessment Results/Result/Risk/Origin/Related Task/Identified Subject/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/capability/control-implementation/implemented-requirement/statement/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/origin/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Component Definition/Capability/Control Implementation/Implemented Requirement/Statement/Responsible Role/Link/@Rel +#### /Assessment Results/Result/Risk/Origin/Related Task/Identified Subject/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/capability/control-implementation/implemented-requirement/statement/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/origin/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Component Definition/Capability/Control Implementation/Implemented Requirement/Statement/Responsible Role/Prop/@Name +#### /Assessment Results/Result/Risk/Origin/Related Task/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/capability/control-implementation/implemented-requirement/statement/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/origin/related-task/link/@rel) | . |
  • reference
| True | builtin | -### /Component Definition/Capability/Control Implementation/Link/@Rel +#### /Assessment Results/Result/Risk/Origin/Related Task/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/capability/control-implementation/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/origin/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Component Definition/Capability/Control Implementation/Prop/@Name +#### /Assessment Results/Result/Risk/Origin/Related Task/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/capability/control-implementation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/origin/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Component Definition/Capability/Link/@Rel +#### /Assessment Results/Result/Risk/Origin/Related Task/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/capability/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/origin/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Component Definition/Capability/Prop/@Name +#### /Assessment Results/Result/Risk/Origin/Related Task/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/capability/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/origin/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Component Definition/Component/@Type +#### /Assessment Results/Result/Risk/Origin/Related Task/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/component/@type) | . |
  • interconnection
  • software
  • hardware
  • service
  • policy
  • physical
  • process-procedure
  • plan
  • guidance
  • standard
  • validation
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/origin/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Component Definition/Component/Control Implementation/Implemented Requirement/Link/@Rel +#### /Assessment Results/Result/Risk/Origin/Related Task/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/component/control-implementation/implemented-requirement/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/origin/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Component Definition/Component/Control Implementation/Implemented Requirement/Prop/@Name +#### /Assessment Results/Result/Risk/Origin/Related Task/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/component/control-implementation/implemented-requirement/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/origin/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Component Definition/Component/Control Implementation/Implemented Requirement/Responsible Role/@Role Id +#### /Assessment Results/Result/Risk/Origin/Related Task/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/component) | responsible-role/@role-id|control-implementation/implemented-requirement/responsible-role/@role-id|control-implementation/implemented-requirement/statement/responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/origin/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Component Definition/Component/Control Implementation/Implemented Requirement/Responsible Role/Link/@Rel +#### /Assessment Results/Result/Risk/Origin/Related Task/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/component/control-implementation/implemented-requirement/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/origin/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Component Definition/Component/Control Implementation/Implemented Requirement/Responsible Role/Prop/@Name +#### /Assessment Results/Result/Risk/Origin/Related Task/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/component/control-implementation/implemented-requirement/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/origin/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Component Definition/Component/Control Implementation/Implemented Requirement/Statement/Link/@Rel +#### /Assessment Results/Result/Risk/Origin/Related Task/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/component/control-implementation/implemented-requirement/statement/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/origin/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Component Definition/Component/Control Implementation/Implemented Requirement/Statement/Prop/@Name +#### /Assessment Results/Result/Risk/Origin/Related Task/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/component/control-implementation/implemented-requirement/statement/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/origin/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Component Definition/Component/Control Implementation/Implemented Requirement/Statement/Responsible Role/@Role Id +#### /Assessment Results/Result/Risk/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/component) | responsible-role/@role-id|control-implementation/implemented-requirement/responsible-role/@role-id|control-implementation/implemented-requirement/statement/responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • false-positive
  • accepted
  • risk-adjusted
  • priority
| False | builtin | +| [Location](/assessment-results/result/risk/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Component Definition/Component/Control Implementation/Implemented Requirement/Statement/Responsible Role/Link/@Rel +#### /Assessment Results/Result/Risk/Response/@Lifecycle -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/component/control-implementation/implemented-requirement/statement/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/@lifecycle) | . |
  • recommendation
  • planned
  • completed
| True | builtin | -### /Component Definition/Component/Control Implementation/Implemented Requirement/Statement/Responsible Role/Prop/@Name +#### /Assessment Results/Result/Risk/Response/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/component/control-implementation/implemented-requirement/statement/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/link/@rel) | . |
  • reference
| True | builtin | -### /Component Definition/Component/Control Implementation/Link/@Rel +#### /Assessment Results/Result/Risk/Response/Origin/Actor/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/component/control-implementation/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | -### /Component Definition/Component/Control Implementation/Prop/@Name +#### /Assessment Results/Result/Risk/Response/Origin/Actor/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/component/control-implementation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/origin/actor/link/@rel) | . |
  • reference
| True | builtin | -### /Component Definition/Component/Link/@Rel +#### /Assessment Results/Result/Risk/Response/Origin/Actor/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/component) | link/@rel |
  • depends-on
  • validation
  • proof-of-compliance
  • baseline-template
  • uses-service
  • system-security-plan
  • uses-network
| True | builtin | -| allowed-values | [Location](/component-definition/component) | (.)[@type='service']/link/@rel |
  • provided-by
  • used-by
| True | builtin | -| allowed-values | [Location](/component-definition/component/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Component Definition/Component/Prop/@Name +#### /Assessment Results/Result/Risk/Response/Origin/Related Task/Identified Subject/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
| False | builtin | -| allowed-values | [Location](/component-definition/component) | (.)[@type='software']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • software-identifier
| False | builtin | -| allowed-values | [Location](/component-definition/component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/origin/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Component Definition/Component/Prop/@Value +#### /Assessment Results/Result/Risk/Response/Origin/Related Task/Identified Subject/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | -| allowed-values | [Location](/component-definition/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='allows-authenticated-scan']/@value |
  • yes
  • no
| False | builtin | -| allowed-values | [Location](/component-definition/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='virtual']/@value |
  • yes
  • no
| False | builtin | -| allowed-values | [Location](/component-definition/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='public']/@value |
  • yes
  • no
| False | builtin | -| allowed-values | [Location](/component-definition/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='implementation-point']/@value |
  • internal
  • external
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/origin/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Component Definition/Component/Protocol/Port Range/@Transport +#### /Assessment Results/Result/Risk/Response/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/component/protocol/port-range/@transport) | . |
  • TCP
  • UDP
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/origin/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Component Definition/Component/Responsible Role/@Role Id +#### /Assessment Results/Result/Risk/Response/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/component) | responsible-role/@role-id|control-implementation/implemented-requirement/responsible-role/@role-id|control-implementation/implemented-requirement/statement/responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/origin/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Component Definition/Component/Responsible Role/Link/@Rel +#### /Assessment Results/Result/Risk/Response/Origin/Related Task/Identified Subject/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/component/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/origin/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Component Definition/Component/Responsible Role/Prop/@Name +#### /Assessment Results/Result/Risk/Response/Origin/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/component/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/origin/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Component Definition/Metadata/Action/Link/@Rel +#### /Assessment Results/Result/Risk/Response/Origin/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/metadata/action/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/origin/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Component Definition/Metadata/Action/Prop/@Name +#### /Assessment Results/Result/Risk/Response/Origin/Related Task/Identified Subject/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/metadata/action/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/origin/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Component Definition/Metadata/Action/Responsible Party/Link/@Rel +#### /Assessment Results/Result/Risk/Response/Origin/Related Task/Identified Subject/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/metadata/action/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/origin/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Component Definition/Metadata/Action/Responsible Party/Prop/@Name +#### /Assessment Results/Result/Risk/Response/Origin/Related Task/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/metadata/action/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/origin/related-task/link/@rel) | . |
  • reference
| True | builtin | -### /Component Definition/Metadata/Document Id/@Scheme +#### /Assessment Results/Result/Risk/Response/Origin/Related Task/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/metadata/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/origin/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Component Definition/Metadata/Link/@Rel +#### /Assessment Results/Result/Risk/Response/Origin/Related Task/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/metadata) | link/@rel |
  • canonical
  • alternate
  • latest-version
  • predecessor-version
  • successor-version
| True | builtin | -| allowed-values | [Location](/component-definition/metadata/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/origin/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Component Definition/Metadata/Location/Address/@Type +#### /Assessment Results/Result/Risk/Response/Origin/Related Task/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/metadata/location/address/@type) | . |
  • home
  • work
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/origin/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Component Definition/Metadata/Location/Link/@Rel +#### /Assessment Results/Result/Risk/Response/Origin/Related Task/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/metadata/location/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/origin/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Component Definition/Metadata/Location/Prop/@Class +#### /Assessment Results/Result/Risk/Response/Origin/Related Task/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type' and @value='data-center']/@class |
  • primary
  • alternate
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/origin/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Component Definition/Metadata/Location/Prop/@Name +#### /Assessment Results/Result/Risk/Response/Origin/Related Task/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | -| allowed-values | [Location](/component-definition/metadata/location/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/origin/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Component Definition/Metadata/Location/Prop/@Value +#### /Assessment Results/Result/Risk/Response/Origin/Related Task/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • data-center
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/origin/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Component Definition/Metadata/Location/Telephone Number/@Type +#### /Assessment Results/Result/Risk/Response/Origin/Related Task/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/metadata/location/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/origin/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Component Definition/Metadata/Party/@Type +#### /Assessment Results/Result/Risk/Response/Origin/Related Task/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/metadata/party/@type) | . |
  • person
  • organization
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/origin/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Component Definition/Metadata/Party/Address/@Type +#### /Assessment Results/Result/Risk/Response/Origin/Related Task/Subject/Include Subject/Prop/@Name -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | address-type | [Location](/component-definition) | metadata/party/address/@type |
  • work
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -| allowed-values | | [Location](/component-definition/metadata/party/address/@type) | . |
  • home
  • work
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/origin/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Component Definition/Metadata/Party/External Id/@Scheme +#### /Assessment Results/Result/Risk/Response/Origin/Related Task/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/metadata/party/external-id/@scheme) | . |
  • http://orcid.org/
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/origin/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Component Definition/Metadata/Party/Link/@Rel +#### /Assessment Results/Result/Risk/Response/Origin/Related Task/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/metadata/party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/origin/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Component Definition/Metadata/Party/Prop/@Name +#### /Assessment Results/Result/Risk/Response/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/metadata/party) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • mail-stop
  • office
  • job-title
| False | builtin | -| allowed-values | [Location](/component-definition/metadata/party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | +| [Location](/assessment-results/result/risk/response/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Component Definition/Metadata/Party/Telephone Number/@Type +#### /Assessment Results/Result/Risk/Response/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/metadata/party/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • avoid
  • mitigate
  • transfer
  • accept
  • share
  • contingency
  • none
| False | builtin | -### /Component Definition/Metadata/Prop/@Name +#### /Assessment Results/Result/Risk/Response/Required Asset/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/metadata) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • keywords
| False | builtin | -| allowed-values | [Location](/component-definition/metadata/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/required-asset/link/@rel) | . |
  • reference
| True | builtin | -### /Component Definition/Metadata/Responsible Party/@Role Id +#### /Assessment Results/Result/Risk/Response/Required Asset/Prop/@Name -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | allowed-metadata-responsibe-party-role-ids | [Location](/component-definition/metadata) | responsible-party/@role-id |
  • creator
  • prepared-by
  • prepared-for
  • content-approver
  • contact
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/required-asset/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Component Definition/Metadata/Responsible Party/Link/@Rel +#### /Assessment Results/Result/Risk/Response/Required Asset/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/metadata/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/required-asset/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | + +#### /Assessment Results/Result/Risk/Response/Required Asset/Subject/Link/@Rel + +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/required-asset/subject/link/@rel) | . |
  • reference
| True | builtin | + +#### /Assessment Results/Result/Risk/Response/Required Asset/Subject/Prop/@Name + +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/required-asset/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +#### /Assessment Results/Result/Risk/Response/Task/@Type + +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/task/@type) | . |
  • milestone
  • action
| True | builtin | + +#### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Link/@Rel + +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/task/associated-activity/link/@rel) | . |
  • reference
| True | builtin | + +#### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Prop/@Name + +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/task/associated-activity/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +#### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Responsible Role/Link/@Rel + +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/task/associated-activity/responsible-role/link/@rel) | . |
  • reference
| True | builtin | + +#### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Responsible Role/Prop/@Name + +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/task/associated-activity/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +#### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Subject/@Type + +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/task/associated-activity/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Component Definition/Metadata/Responsible Party/Prop/@Name +#### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/metadata/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/task/associated-activity/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Component Definition/Metadata/Revision/Link/@Rel +#### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/metadata/revision) | link/@rel |
  • canonical
  • alternate
  • predecessor-version
  • successor-version
  • version-history
| True | builtin | -| allowed-values | [Location](/component-definition/metadata/revision/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/task/associated-activity/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Component Definition/Metadata/Revision/Prop/@Name +#### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/metadata/revision/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/task/associated-activity/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Component Definition/Metadata/Role/Link/@Rel +#### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/metadata/role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/task/associated-activity/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Component Definition/Metadata/Role/Prop/@Name +#### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/component-definition/metadata/role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/task/associated-activity/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Back Matter/Resource/Citation/Link/@Rel +#### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/back-matter/resource/citation/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/task/associated-activity/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Back Matter/Resource/Citation/Prop/@Name +#### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/back-matter/resource/citation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/task/associated-activity/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Back Matter/Resource/Document Id/@Scheme +#### /Assessment Results/Result/Risk/Response/Task/Associated Activity/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/back-matter/resource/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/task/associated-activity/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Back Matter/Resource/Prop/@Name +#### /Assessment Results/Result/Risk/Response/Task/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
  • version
  • published
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/back-matter/resource/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/task/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Back Matter/Resource/Prop/@Value +#### /Assessment Results/Result/Risk/Response/Task/Prop/@Name -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | attachment-type | [Location](/plan-of-action-and-milestones) | back-matter/resource/prop[@name='type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • law
  • regulation
  • standard
  • guidance
  • policy
  • procedure
  • guide
  • rules-of-behavior
  • plan
  • system-security-plan
  • artifact
  • evidence
  • screen-shot
  • image
  • tool-report
  • raw-tool-output
  • interview-notes
  • questionnaire
  • report
  • fedramp-citations
  • fedramp-acronyms
  • fedramp-logo
  • separation-of-duties-matrix
  • logo
  • personally-identifiable-information
  • agreement
  • isa-agreement
  • incident-response-plan
  • information-security-policies-and-procedures
  • users-guide
  • privacy-impact-assessment
  • information-system-contingency-plan
  • configuration-management-plan
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -| allowed-values | | [Location](/plan-of-action-and-milestones/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • logo
  • image
  • screen-shot
  • law
  • regulation
  • standard
  • external-guidance
  • acronyms
  • citation
  • policy
  • procedure
  • system-guide
  • users-guide
  • administrators-guide
  • rules-of-behavior
  • plan
  • artifact
  • evidence
  • tool-output
  • raw-data
  • interview-notes
  • questionnaire
  • report
  • agreement
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Back Matter/Resource/Rlink/Hash/@Algorithm +#### /Assessment Results/Result/Risk/Response/Task/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/back-matter/resource/rlink/hash/@algorithm) | . |
  • SHA-224
  • SHA-256
  • SHA-384
  • SHA-512
  • SHA3-224
  • SHA3-256
  • SHA3-384
  • SHA3-512
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/task/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Finding/Link/@Rel +#### /Assessment Results/Result/Risk/Response/Task/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/task/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Finding/Origin/Actor/@Type +#### /Assessment Results/Result/Risk/Response/Task/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Plan Of Action And Milestones/Finding/Origin/Actor/Link/@Rel +#### /Assessment Results/Result/Risk/Response/Task/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/actor/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Plan Of Action And Milestones/Finding/Origin/Actor/Prop/@Name +#### /Assessment Results/Result/Risk/Response/Task/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Finding/Origin/Related Task/Identified Subject/Subject/@Type +#### /Assessment Results/Result/Risk/Response/Task/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Finding/Origin/Related Task/Identified Subject/Subject/Exclude Subject/@Type +#### /Assessment Results/Result/Risk/Response/Task/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Plan Of Action And Milestones/Finding/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel +#### /Assessment Results/Result/Risk/Response/Task/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Finding/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name +#### /Assessment Results/Result/Risk/Response/Task/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Finding/Origin/Related Task/Identified Subject/Subject/Include Subject/@Type +#### /Assessment Results/Result/Risk/Response/Task/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/task/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Finding/Origin/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel +#### /Assessment Results/Result/Risk/Response/Task/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Finding/Origin/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name +#### /Assessment Results/Result/Risk/Response/Task/Timing/At Frequency/@Unit -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/response/task/timing/at-frequency/@unit) | . |
  • seconds
  • minutes
  • hours
  • days
  • months
  • years
| False | builtin | -### /Plan Of Action And Milestones/Finding/Origin/Related Task/Identified Subject/Subject/Link/@Rel +#### /Assessment Results/Result/Risk/Risk Log/Entry/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/risk-log/entry/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Finding/Origin/Related Task/Identified Subject/Subject/Prop/@Name +#### /Assessment Results/Result/Risk/Risk Log/Entry/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/risk-log/entry) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | +| [Location](/assessment-results/result/risk/risk-log/entry/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Finding/Origin/Related Task/Link/@Rel +#### /Assessment Results/Result/Risk/Risk Log/Entry/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/risk-log/entry) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • vendor-check-in
  • status-update
  • milestone-complete
  • mitigation
  • remediated
  • closed
  • dr-submission
  • dr-updated
  • dr-approved
  • dr-rejected
| True | builtin | -### /Plan Of Action And Milestones/Finding/Origin/Related Task/Prop/@Name +#### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/risk-log/entry/related-response/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Finding/Origin/Related Task/Responsible Party/Link/@Rel +#### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/risk-log/entry/related-response/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Finding/Origin/Related Task/Responsible Party/Prop/@Name +#### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Plan Of Action And Milestones/Finding/Origin/Related Task/Subject/@Type +#### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Plan Of Action And Milestones/Finding/Origin/Related Task/Subject/Exclude Subject/@Type +#### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Finding/Origin/Related Task/Subject/Exclude Subject/Link/@Rel +#### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Finding/Origin/Related Task/Subject/Exclude Subject/Prop/@Name +#### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Plan Of Action And Milestones/Finding/Origin/Related Task/Subject/Include Subject/@Type +#### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Finding/Origin/Related Task/Subject/Include Subject/Link/@Rel +#### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Finding/Origin/Related Task/Subject/Include Subject/Prop/@Name +#### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Finding/Origin/Related Task/Subject/Link/@Rel +#### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Finding/Origin/Related Task/Subject/Prop/@Name +#### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/origin/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Finding/Prop/@Name +#### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Finding/Target/@Type +#### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/target/@type) | . |
  • statement-id
  • objective-id
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Finding/Target/Implementation Status/@State +#### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/target/implementation-status/@state) | . |
  • implemented
  • partial
  • planned
  • alternative
  • not-applicable
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Finding/Target/Link/@Rel +#### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/target/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Plan Of Action And Milestones/Finding/Target/Prop/@Name +#### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/target/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Plan Of Action And Milestones/Finding/Target/Status/@Reason +#### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/target/status/@reason) | . |
  • pass
  • fail
  • other
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Finding/Target/Status/@State +#### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/finding/target/status/@state) | . |
  • satisfied
  • not-satisfied
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Assessment Platform/Link/@Rel +#### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/assessment-platform/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Assessment Platform/Prop/@Name +#### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/assessment-platform/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Assessment Platform/Uses Component/Link/@Rel +#### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/assessment-platform/uses-component/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Assessment Platform/Uses Component/Prop/@Name +#### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/assessment-platform/uses-component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Assessment Platform/Uses Component/Responsible Party/Link/@Rel +#### /Assessment Results/Result/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/assessment-platform/uses-component/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/risk-log/entry/related-response/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Assessment Platform/Uses Component/Responsible Party/Prop/@Name +#### /Assessment Results/Result/Risk/Risk Log/Entry/Status Change -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/assessment-platform/uses-component/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/risk-log/entry/status-change) | . |
  • open
  • investigating
  • remediating
  • deviation-requested
  • deviation-approved
  • closed
| True | builtin | -### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Component/@Type +#### /Assessment Results/Result/Risk/Status -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component/@type) | . |
  • this-system
  • system
  • interconnection
  • software
  • hardware
  • service
  • policy
  • physical
  • process-procedure
  • plan
  • guidance
  • standard
  • validation
  • network
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/status) | . |
  • open
  • investigating
  • remediating
  • deviation-requested
  • deviation-approved
  • closed
| True | builtin | -### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Component/Link/@Rel +#### /Assessment Results/Result/Risk/Threat Id/@System -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | link/@rel |
  • depends-on
  • validation
  • proof-of-compliance
  • baseline-template
  • uses-service
  • system-security-plan
  • uses-network
  • imported-from
| True | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | (.)[@type='validation']/link/@rel |
  • validation-details
| True | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | (.)[@type='service']/link/@rel |
  • provided-by
  • used-by
| True | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | (.)[@type='interconnection']/link/@rel |
  • isa-agreement
| True | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/assessment-results/result/risk/threat-id/@system) | . |
  • http://fedramp.gov
  • http://fedramp.gov/ns/oscal
| True | builtin | -### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Component/Prop/@Class +### POA&M Allowed Values -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('ipv4-address','ipv6-address')]/@class |
  • local
  • remote
| False | builtin | +#### /Plan Of Action And Milestones/Back Matter/Resource/Citation/Link/@Rel -### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Component/Prop/@Name +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/back-matter/resource/citation/link/@rel) | . |
  • reference
| True | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • implementation-point
  • leveraged-authorization-uuid
  • inherited-uuid
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | (.)[@type='software']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • software-identifier
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | (.)[@type='interconnection']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • isa-title
  • isa-date
  • isa-remote-system-name
  • ipv4-address
  • ipv6-address
  • direction
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +#### /Plan Of Action And Milestones/Back Matter/Resource/Citation/Prop/@Name -### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Component/Prop/@Value +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/back-matter/resource/citation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='allows-authenticated-scan']/@value |
  • yes
  • no
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='public']/@value |
  • yes
  • no
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='virtual']/@value |
  • yes
  • no
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='implementation-point']/@value |
  • internal
  • external
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='direction']/@value |
  • incoming
  • outgoing
| False | builtin | +--- -### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Component/Protocol/Port Range/@Transport +#### /Plan Of Action And Milestones/Back Matter/Resource/Document Id/@Scheme -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component/protocol/port-range/@transport) | . |
  • TCP
  • UDP
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/back-matter/resource/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | -### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Component/Responsible Role/@Role Id +#### /Plan Of Action And Milestones/Back Matter/Resource/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | (.)[@type='interconnection']/responsible-role/@role-id |
  • isa-poc-local
  • isa-poc-remote
  • isa-authorizing-official-local
  • isa-authorizing-official-remote
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
  • version
  • published
| False | builtin | +| [Location](/plan-of-action-and-milestones/back-matter/resource/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Component/Responsible Role/Link/@Rel +#### /Plan Of Action And Milestones/Back Matter/Resource/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +| attachment-type | [Location](/plan-of-action-and-milestones) | back-matter/resource/prop[@name='type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • law
  • regulation
  • standard
  • guidance
  • policy
  • procedure
  • guide
  • rules-of-behavior
  • plan
  • system-security-plan
  • artifact
  • evidence
  • screen-shot
  • image
  • tool-report
  • raw-tool-output
  • interview-notes
  • questionnaire
  • report
  • fedramp-citations
  • fedramp-acronyms
  • fedramp-logo
  • separation-of-duties-matrix
  • logo
  • personally-identifiable-information
  • agreement
  • isa-agreement
  • incident-response-plan
  • information-security-policies-and-procedures
  • users-guide
  • privacy-impact-assessment
  • information-system-contingency-plan
  • configuration-management-plan
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| | [Location](/plan-of-action-and-milestones/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • logo
  • image
  • screen-shot
  • law
  • regulation
  • standard
  • external-guidance
  • acronyms
  • citation
  • policy
  • procedure
  • system-guide
  • users-guide
  • administrators-guide
  • rules-of-behavior
  • plan
  • artifact
  • evidence
  • tool-output
  • raw-data
  • interview-notes
  • questionnaire
  • report
  • agreement
| False | builtin | -### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Component/Responsible Role/Prop/@Name +#### /Plan Of Action And Milestones/Back Matter/Resource/Rlink/Hash/@Algorithm -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/back-matter/resource/rlink/hash/@algorithm) | . |
  • SHA-224
  • SHA-256
  • SHA-384
  • SHA-512
  • SHA3-224
  • SHA3-256
  • SHA3-384
  • SHA3-512
| True | builtin | -### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Component/Status/@State +#### /Plan Of Action And Milestones/Finding/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component/status/@state) | . |
  • under-development
  • operational
  • disposition
  • other
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Local Definitions/Component/@Type +#### /Plan Of Action And Milestones/Finding/Origin/Actor/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component/@type) | . |
  • this-system
  • system
  • interconnection
  • software
  • hardware
  • service
  • policy
  • physical
  • process-procedure
  • plan
  • guidance
  • standard
  • validation
  • network
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | -### /Plan Of Action And Milestones/Local Definitions/Component/Link/@Rel +#### /Plan Of Action And Milestones/Finding/Origin/Actor/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | link/@rel |
  • depends-on
  • validation
  • proof-of-compliance
  • baseline-template
  • uses-service
  • system-security-plan
  • uses-network
  • imported-from
| True | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | (.)[@type='validation']/link/@rel |
  • validation-details
| True | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | (.)[@type='service']/link/@rel |
  • provided-by
  • used-by
| True | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | (.)[@type='interconnection']/link/@rel |
  • isa-agreement
| True | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/origin/actor/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Local Definitions/Component/Prop/@Class +#### /Plan Of Action And Milestones/Finding/Origin/Actor/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('ipv4-address','ipv6-address')]/@class |
  • local
  • remote
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Local Definitions/Component/Prop/@Name +#### /Plan Of Action And Milestones/Finding/Origin/Related Task/Identified Subject/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • implementation-point
  • leveraged-authorization-uuid
  • inherited-uuid
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | (.)[@type='software']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • software-identifier
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | (.)[@type='interconnection']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • isa-title
  • isa-date
  • isa-remote-system-name
  • ipv4-address
  • ipv6-address
  • direction
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/origin/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Plan Of Action And Milestones/Local Definitions/Component/Prop/@Value +#### /Plan Of Action And Milestones/Finding/Origin/Related Task/Identified Subject/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='allows-authenticated-scan']/@value |
  • yes
  • no
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='public']/@value |
  • yes
  • no
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='virtual']/@value |
  • yes
  • no
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='implementation-point']/@value |
  • internal
  • external
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='direction']/@value |
  • incoming
  • outgoing
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/origin/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Plan Of Action And Milestones/Local Definitions/Component/Protocol/Port Range/@Transport +#### /Plan Of Action And Milestones/Finding/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component/protocol/port-range/@transport) | . |
  • TCP
  • UDP
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/origin/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Local Definitions/Component/Responsible Role/@Role Id +#### /Plan Of Action And Milestones/Finding/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component) | (.)[@type='interconnection']/responsible-role/@role-id |
  • isa-poc-local
  • isa-poc-remote
  • isa-authorizing-official-local
  • isa-authorizing-official-remote
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/origin/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Local Definitions/Component/Responsible Role/Link/@Rel +#### /Plan Of Action And Milestones/Finding/Origin/Related Task/Identified Subject/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/origin/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Plan Of Action And Milestones/Local Definitions/Component/Responsible Role/Prop/@Name +#### /Plan Of Action And Milestones/Finding/Origin/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/origin/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Local Definitions/Component/Status/@State +#### /Plan Of Action And Milestones/Finding/Origin/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/component/status/@state) | . |
  • under-development
  • operational
  • disposition
  • other
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/origin/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Implemented Component/Link/@Rel +#### /Plan Of Action And Milestones/Finding/Origin/Related Task/Identified Subject/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item/implemented-component/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/origin/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Implemented Component/Prop/@Name +#### /Plan Of Action And Milestones/Finding/Origin/Related Task/Identified Subject/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item/implemented-component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item/implemented-component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/origin/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Implemented Component/Responsible Party/@Role Id +#### /Plan Of Action And Milestones/Finding/Origin/Related Task/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item/implemented-component) | responsible-party/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/origin/related-task/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Implemented Component/Responsible Party/Link/@Rel +#### /Plan Of Action And Milestones/Finding/Origin/Related Task/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item/implemented-component/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/origin/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Implemented Component/Responsible Party/Prop/@Name +#### /Plan Of Action And Milestones/Finding/Origin/Related Task/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item/implemented-component/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/origin/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Link/@Rel +#### /Plan Of Action And Milestones/Finding/Origin/Related Task/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item) | link/@rel |
  • baseline-template
| True | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/origin/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Prop/@Name +#### /Plan Of Action And Milestones/Finding/Origin/Related Task/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • ipv4-address
  • ipv6-address
  • fqdn
  • uri
  • serial-number
  • netbios-name
  • mac-address
  • physical-location
  • is-scanned
  • hardware-model
  • os-name
  • os-version
  • software-name
  • software-version
  • software-patch-level
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/origin/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Prop/@Value +#### /Plan Of Action And Milestones/Finding/Origin/Related Task/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='is-scanned']/@value |
  • yes
  • no
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/origin/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Responsible Party/@Role Id +#### /Plan Of Action And Milestones/Finding/Origin/Related Task/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item) | responsible-party/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/origin/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Responsible Party/Link/@Rel +#### /Plan Of Action And Milestones/Finding/Origin/Related Task/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/origin/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Responsible Party/Prop/@Name +#### /Plan Of Action And Milestones/Finding/Origin/Related Task/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/local-definitions/inventory-item/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/origin/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Plan Of Action And Milestones/Metadata/Action/Link/@Rel +#### /Plan Of Action And Milestones/Finding/Origin/Related Task/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/metadata/action/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/origin/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Metadata/Action/Prop/@Name +#### /Plan Of Action And Milestones/Finding/Origin/Related Task/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/metadata/action/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/origin/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Metadata/Action/Responsible Party/Link/@Rel +#### /Plan Of Action And Milestones/Finding/Origin/Related Task/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/metadata/action/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/origin/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Metadata/Action/Responsible Party/Prop/@Name +#### /Plan Of Action And Milestones/Finding/Origin/Related Task/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/metadata/action/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/origin/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Metadata/Document Id/@Scheme +#### /Plan Of Action And Milestones/Finding/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/metadata/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Metadata/Link/@Rel +#### /Plan Of Action And Milestones/Finding/Target/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/metadata) | link/@rel |
  • canonical
  • alternate
  • latest-version
  • predecessor-version
  • successor-version
| True | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/metadata/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/target/@type) | . |
  • statement-id
  • objective-id
| False | builtin | -### /Plan Of Action And Milestones/Metadata/Location/Address/@Type +#### /Plan Of Action And Milestones/Finding/Target/Implementation Status/@State -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/metadata/location/address/@type) | . |
  • home
  • work
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/target/implementation-status/@state) | . |
  • implemented
  • partial
  • planned
  • alternative
  • not-applicable
| True | builtin | -### /Plan Of Action And Milestones/Metadata/Location/Link/@Rel +#### /Plan Of Action And Milestones/Finding/Target/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/metadata/location/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/target/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Metadata/Location/Prop/@Class +#### /Plan Of Action And Milestones/Finding/Target/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type' and @value='data-center']/@class |
  • primary
  • alternate
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/target/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Metadata/Location/Prop/@Name +#### /Plan Of Action And Milestones/Finding/Target/Status/@Reason -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/metadata/location/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/target/status/@reason) | . |
  • pass
  • fail
  • other
| True | builtin | -### /Plan Of Action And Milestones/Metadata/Location/Prop/@Value +#### /Plan Of Action And Milestones/Finding/Target/Status/@State -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • data-center
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/finding/target/status/@state) | . |
  • satisfied
  • not-satisfied
| False | builtin | -### /Plan Of Action And Milestones/Metadata/Location/Telephone Number/@Type +#### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Assessment Platform/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/metadata/location/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/assessment-platform/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Metadata/Party/@Type +#### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Assessment Platform/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/metadata/party/@type) | . |
  • person
  • organization
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/assessment-platform/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Metadata/Party/Address/@Type +#### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Assessment Platform/Uses Component/Link/@Rel -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | address-type | [Location](/plan-of-action-and-milestones) | metadata/party/address/@type |
  • work
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -| allowed-values | | [Location](/plan-of-action-and-milestones/metadata/party/address/@type) | . |
  • home
  • work
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/assessment-platform/uses-component/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Metadata/Party/External Id/@Scheme +#### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Assessment Platform/Uses Component/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/metadata/party/external-id/@scheme) | . |
  • http://orcid.org/
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/assessment-platform/uses-component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Metadata/Party/Link/@Rel +#### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Assessment Platform/Uses Component/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/metadata/party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/assessment-platform/uses-component/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Metadata/Party/Prop/@Name +#### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Assessment Platform/Uses Component/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/metadata/party) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • mail-stop
  • office
  • job-title
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/metadata/party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/assessment-platform/uses-component/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Metadata/Party/Telephone Number/@Type +#### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Component/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/metadata/party/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component/@type) | . |
  • this-system
  • system
  • interconnection
  • software
  • hardware
  • service
  • policy
  • physical
  • process-procedure
  • plan
  • guidance
  • standard
  • validation
  • network
| True | builtin | -### /Plan Of Action And Milestones/Metadata/Prop/@Name +#### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Component/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/metadata) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • keywords
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/metadata/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | link/@rel |
  • depends-on
  • validation
  • proof-of-compliance
  • baseline-template
  • uses-service
  • system-security-plan
  • uses-network
  • imported-from
| True | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | (.)[@type='validation']/link/@rel |
  • validation-details
| True | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | (.)[@type='service']/link/@rel |
  • provided-by
  • used-by
| True | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | (.)[@type='interconnection']/link/@rel |
  • isa-agreement
| True | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Metadata/Responsible Party/@Role Id +#### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Component/Prop/@Class -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | allowed-metadata-responsibe-party-role-ids | [Location](/plan-of-action-and-milestones/metadata) | responsible-party/@role-id |
  • creator
  • prepared-by
  • prepared-for
  • content-approver
  • contact
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('ipv4-address','ipv6-address')]/@class |
  • local
  • remote
| False | builtin | -### /Plan Of Action And Milestones/Metadata/Responsible Party/Link/@Rel +#### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Component/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/metadata/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • implementation-point
  • leveraged-authorization-uuid
  • inherited-uuid
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
| False | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | (.)[@type='software']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • software-identifier
| False | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | (.)[@type='interconnection']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • isa-title
  • isa-date
  • isa-remote-system-name
  • ipv4-address
  • ipv6-address
  • direction
| False | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Metadata/Responsible Party/Prop/@Name +#### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Component/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/metadata/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='allows-authenticated-scan']/@value |
  • yes
  • no
| False | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='public']/@value |
  • yes
  • no
| False | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='virtual']/@value |
  • yes
  • no
| False | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='implementation-point']/@value |
  • internal
  • external
| False | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='direction']/@value |
  • incoming
  • outgoing
| False | builtin | -### /Plan Of Action And Milestones/Metadata/Revision/Link/@Rel +#### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Component/Protocol/Port Range/@Transport -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/metadata/revision) | link/@rel |
  • canonical
  • alternate
  • predecessor-version
  • successor-version
  • version-history
| True | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/metadata/revision/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component/protocol/port-range/@transport) | . |
  • TCP
  • UDP
| False | builtin | -### /Plan Of Action And Milestones/Metadata/Revision/Prop/@Name +#### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Component/Responsible Role/@Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/metadata/revision/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component) | (.)[@type='interconnection']/responsible-role/@role-id |
  • isa-poc-local
  • isa-poc-remote
  • isa-authorizing-official-local
  • isa-authorizing-official-remote
| True | builtin | -### /Plan Of Action And Milestones/Metadata/Role/Link/@Rel +#### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Component/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/metadata/role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Metadata/Role/Prop/@Name +#### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Component/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/metadata/role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Observation/Link/@Rel +#### /Plan Of Action And Milestones/Local Definitions/Assessment Assets/Component/Status/@State -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/assessment-assets/component/status/@state) | . |
  • under-development
  • operational
  • disposition
  • other
| False | builtin | -### /Plan Of Action And Milestones/Observation/Method +#### /Plan Of Action And Milestones/Local Definitions/Component/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/method) | . |
  • EXAMINE
  • INTERVIEW
  • TEST
  • UNKNOWN
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/component/@type) | . |
  • this-system
  • system
  • interconnection
  • software
  • hardware
  • service
  • policy
  • physical
  • process-procedure
  • plan
  • guidance
  • standard
  • validation
  • network
| True | builtin | -### /Plan Of Action And Milestones/Observation/Origin/Actor/@Type +#### /Plan Of Action And Milestones/Local Definitions/Component/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/component) | link/@rel |
  • depends-on
  • validation
  • proof-of-compliance
  • baseline-template
  • uses-service
  • system-security-plan
  • uses-network
  • imported-from
| True | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/component) | (.)[@type='validation']/link/@rel |
  • validation-details
| True | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/component) | (.)[@type='service']/link/@rel |
  • provided-by
  • used-by
| True | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/component) | (.)[@type='interconnection']/link/@rel |
  • isa-agreement
| True | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/component/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Observation/Origin/Actor/Link/@Rel +#### /Plan Of Action And Milestones/Local Definitions/Component/Prop/@Class -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/actor/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('ipv4-address','ipv6-address')]/@class |
  • local
  • remote
| False | builtin | -### /Plan Of Action And Milestones/Observation/Origin/Actor/Prop/@Name +#### /Plan Of Action And Milestones/Local Definitions/Component/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • implementation-point
  • leveraged-authorization-uuid
  • inherited-uuid
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
| False | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/component) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/component) | (.)[@type='software']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • software-identifier
| False | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/component) | (.)[@type='interconnection']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • isa-title
  • isa-date
  • isa-remote-system-name
  • ipv4-address
  • ipv6-address
  • direction
| False | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Observation/Origin/Related Task/Identified Subject/Subject/@Type +#### /Plan Of Action And Milestones/Local Definitions/Component/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='allows-authenticated-scan']/@value |
  • yes
  • no
| False | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='public']/@value |
  • yes
  • no
| False | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='virtual']/@value |
  • yes
  • no
| False | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='implementation-point']/@value |
  • internal
  • external
| False | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='direction']/@value |
  • incoming
  • outgoing
| False | builtin | -### /Plan Of Action And Milestones/Observation/Origin/Related Task/Identified Subject/Subject/Exclude Subject/@Type +#### /Plan Of Action And Milestones/Local Definitions/Component/Protocol/Port Range/@Transport -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/component/protocol/port-range/@transport) | . |
  • TCP
  • UDP
| False | builtin | -### /Plan Of Action And Milestones/Observation/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel +#### /Plan Of Action And Milestones/Local Definitions/Component/Responsible Role/@Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/component) | responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/component) | (.)[@type='interconnection']/responsible-role/@role-id |
  • isa-poc-local
  • isa-poc-remote
  • isa-authorizing-official-local
  • isa-authorizing-official-remote
| True | builtin | -### /Plan Of Action And Milestones/Observation/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name +#### /Plan Of Action And Milestones/Local Definitions/Component/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/component/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Observation/Origin/Related Task/Identified Subject/Subject/Include Subject/@Type +#### /Plan Of Action And Milestones/Local Definitions/Component/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/component/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Observation/Origin/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel +#### /Plan Of Action And Milestones/Local Definitions/Component/Status/@State -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/component/status/@state) | . |
  • under-development
  • operational
  • disposition
  • other
| False | builtin | -### /Plan Of Action And Milestones/Observation/Origin/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name +#### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Implemented Component/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/inventory-item/implemented-component/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Observation/Origin/Related Task/Identified Subject/Subject/Link/@Rel +#### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Implemented Component/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/inventory-item/implemented-component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
| False | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/inventory-item/implemented-component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Observation/Origin/Related Task/Identified Subject/Subject/Prop/@Name +#### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Implemented Component/Responsible Party/@Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/inventory-item/implemented-component) | responsible-party/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
| True | builtin | -### /Plan Of Action And Milestones/Observation/Origin/Related Task/Link/@Rel +#### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Implemented Component/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/inventory-item/implemented-component/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Observation/Origin/Related Task/Prop/@Name +#### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Implemented Component/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/inventory-item/implemented-component/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Observation/Origin/Related Task/Responsible Party/Link/@Rel +#### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/inventory-item) | link/@rel |
  • baseline-template
| True | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/inventory-item/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Observation/Origin/Related Task/Responsible Party/Prop/@Name +#### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • ipv4-address
  • ipv6-address
  • fqdn
  • uri
  • serial-number
  • netbios-name
  • mac-address
  • physical-location
  • is-scanned
  • hardware-model
  • os-name
  • os-version
  • software-name
  • software-version
  • software-patch-level
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
| False | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/inventory-item) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/inventory-item/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Observation/Origin/Related Task/Subject/@Type +#### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | +| [Location](/plan-of-action-and-milestones/local-definitions/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='is-scanned']/@value |
  • yes
  • no
| False | builtin | -### /Plan Of Action And Milestones/Observation/Origin/Related Task/Subject/Exclude Subject/@Type +#### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Responsible Party/@Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/inventory-item) | responsible-party/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | -### /Plan Of Action And Milestones/Observation/Origin/Related Task/Subject/Exclude Subject/Link/@Rel +#### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/inventory-item/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Observation/Origin/Related Task/Subject/Exclude Subject/Prop/@Name +#### /Plan Of Action And Milestones/Local Definitions/Inventory Item/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/local-definitions/inventory-item/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Observation/Origin/Related Task/Subject/Include Subject/@Type +#### /Plan Of Action And Milestones/Metadata/Action/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/metadata/action/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Observation/Origin/Related Task/Subject/Include Subject/Link/@Rel +#### /Plan Of Action And Milestones/Metadata/Action/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/metadata/action/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Observation/Origin/Related Task/Subject/Include Subject/Prop/@Name +#### /Plan Of Action And Milestones/Metadata/Action/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/metadata/action/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Observation/Origin/Related Task/Subject/Link/@Rel +#### /Plan Of Action And Milestones/Metadata/Action/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/metadata/action/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Observation/Origin/Related Task/Subject/Prop/@Name +#### /Plan Of Action And Milestones/Metadata/Document Id/@Scheme -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/origin/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/metadata/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | -### /Plan Of Action And Milestones/Observation/Prop/@Name +#### /Plan Of Action And Milestones/Metadata/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/metadata) | link/@rel |
  • canonical
  • alternate
  • latest-version
  • predecessor-version
  • successor-version
| True | builtin | +| [Location](/plan-of-action-and-milestones/metadata/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Observation/Relevant Evidence/Link/@Rel +#### /Plan Of Action And Milestones/Metadata/Location/Address/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/relevant-evidence/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/metadata/location/address/@type) | . |
  • home
  • work
| True | builtin | -### /Plan Of Action And Milestones/Observation/Relevant Evidence/Prop/@Name +#### /Plan Of Action And Milestones/Metadata/Location/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/relevant-evidence/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/metadata/location/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Observation/Subject/@Type +#### /Plan Of Action And Milestones/Metadata/Location/Prop/@Class -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type' and @value='data-center']/@class |
  • primary
  • alternate
| False | builtin | -### /Plan Of Action And Milestones/Observation/Subject/Link/@Rel +#### /Plan Of Action And Milestones/Metadata/Location/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | +| [Location](/plan-of-action-and-milestones/metadata/location/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Observation/Subject/Prop/@Name +#### /Plan Of Action And Milestones/Metadata/Location/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • data-center
| False | builtin | -### /Plan Of Action And Milestones/Observation/Type +#### /Plan Of Action And Milestones/Metadata/Location/Telephone Number/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/observation/type) | . |
  • ssp-statement-issue
  • control-objective
  • mitigation
  • finding
  • historic
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/metadata/location/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | -### /Plan Of Action And Milestones/Poam Item/Link/@Rel +#### /Plan Of Action And Milestones/Metadata/Party/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/poam-item/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/metadata/party/@type) | . |
  • person
  • organization
| False | builtin | -### /Plan Of Action And Milestones/Poam Item/Origin/Actor/@Type +#### /Plan Of Action And Milestones/Metadata/Party/Address/@Type -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/poam-item/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | +| address-type | [Location](/plan-of-action-and-milestones) | metadata/party/address/@type |
  • work
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| | [Location](/plan-of-action-and-milestones/metadata/party/address/@type) | . |
  • home
  • work
| True | builtin | -### /Plan Of Action And Milestones/Poam Item/Origin/Actor/Link/@Rel +#### /Plan Of Action And Milestones/Metadata/Party/External Id/@Scheme -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/poam-item/origin/actor/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/metadata/party/external-id/@scheme) | . |
  • http://orcid.org/
| True | builtin | -### /Plan Of Action And Milestones/Poam Item/Origin/Actor/Prop/@Name +#### /Plan Of Action And Milestones/Metadata/Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/poam-item/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/metadata/party/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Poam Item/Prop/@Name +#### /Plan Of Action And Milestones/Metadata/Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/poam-item/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/metadata/party) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • mail-stop
  • office
  • job-title
| False | builtin | +| [Location](/plan-of-action-and-milestones/metadata/party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Facet/@Name +#### /Plan Of Action And Milestones/Metadata/Party/Telephone Number/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://csrc.nist.gov/ns/oscal']/@name |
  • likelihood
  • impact
  • risk
  • severity
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://fedramp.gov','http://fedramp.gov/ns/oscal')]/@name |
  • likelihood
  • impact
  • risk
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://cve.mitre.org']/@name |
  • cve-id
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0']/@name |
  • access-vector
  • access-complexity
  • authentication
  • confidentiality-impact
  • integrity-impact
  • availability-impact
  • exploitability
  • remediation-level
  • report-confidence
  • collateral-damage-potential
  • target-distribution
  • confidentiality-requirement
  • integrity-requirement
  • availability-requirement
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1')]/@name |
  • attack-vector
  • access-complexity
  • privileges-required
  • user-interaction
  • scope
  • confidentiality-impact
  • integrity-impact
  • availability-impact
  • exploit-code-maturity
  • remediation-level
  • report-confidence
  • modified-attack-vector
  • modified-attack-complexity
  • modified-privileges-required
  • modified-user-interaction
  • modified-scope
  • modified-confidentiality
  • modified-integrity
  • modified-availability
  • confidentiality-requirement
  • integrity-requirement
  • availability-requirement
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/metadata/party/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Facet/@System +#### /Plan Of Action And Milestones/Metadata/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet/@system) | . |
  • http://fedramp.gov
  • http://fedramp.gov/ns/oscal
  • http://csrc.nist.gov/ns/oscal
  • http://csrc.nist.gov/ns/oscal/unknown
  • http://cve.mitre.org
  • http://www.first.org/cvss/v2.0
  • http://www.first.org/cvss/v3.0
  • http://www.first.org/cvss/v3.1
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/metadata) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • keywords
| False | builtin | +| [Location](/plan-of-action-and-milestones/metadata/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Facet/@Value +#### /Plan Of Action And Milestones/Metadata/Responsible Party/@Role Id -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='access-vector']/@value |
  • local
  • adjacent-network
  • network
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='access-complexity']/@value |
  • high
  • medium
  • low
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='authentication']/@value |
  • multiple
  • single
  • none
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name=('confidentiality-impact', 'integrity-impact', 'availability-impact')]/@value |
  • none
  • partial
  • complete
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='exploitability']/@value |
  • unproven
  • proof-of-concept
  • functional
  • high
  • not-defined
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='remediation-level']/@value |
  • official-fix
  • temporary-fix
  • workaround
  • unavailable
  • not-defined
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='report-confidence']/@value |
  • unconfirmed
  • uncorroborated
  • confirmed
  • not-defined
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='collateral-damage-potential']/@value |
  • none
  • low
  • low-medium
  • medium-high
  • high
  • not-defined
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name=('target-distribution', 'confidentiality-requirement', 'integrity-requirement', 'availability-requirement')]/@value |
  • none
  • low
  • medium
  • high
  • not-defined
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='access-vector']/@value |
  • network
  • adjacent
  • local
  • physical
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='access-complexity']/@value |
  • high
  • low
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name=('privileges-required', 'confidentiality-impact', 'integrity-impact', 'availability-impact')]/@value |
  • none
  • low
  • high
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='user-interaction']/@value |
  • none
  • required
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='scope']/@value |
  • unchanged
  • changed
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='exploit-code-maturity']/@value |
  • not-defined
  • unproven
  • proof-of-concept
  • functional
  • high
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='remediation-level']/@value |
  • not-defined
  • official-fix
  • temporary-fix
  • workaround
  • unavailable
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='report-confidence']/@value |
  • not-defined
  • unknown
  • reasonable
  • confirmed
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name=('confidentiality-requirement', 'integrity-requirement', 'availability-requirement')]/@value |
  • not-defined
  • low
  • medium
  • high
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='modified-attack-vector']/@value |
  • not-defined
  • network
  • adjacent
  • local
  • physical
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='modified-attack-complexity']/@value |
  • not-defined
  • high
  • low
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name=('modified-privileges-required', 'modified-confidentiality', 'modified-integrity', 'modified-availability')]/@value |
  • not-defined
  • none
  • low
  • high
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='modified-user-interaction']/@value |
  • not-defined
  • none
  • required
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='modified-scope']/@value |
  • not-defined
  • unchanged
  • changed
| False | builtin | - -### /Plan Of Action And Milestones/Risk/Characterization/Facet/Link/@Rel - -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet/link/@rel) | . |
  • reference
| True | builtin | +| allowed-metadata-responsibe-party-role-ids | [Location](/plan-of-action-and-milestones/metadata) | responsible-party/@role-id |
  • creator
  • prepared-by
  • prepared-for
  • content-approver
  • contact
| True | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Facet/Prop/@Name +#### /Plan Of Action And Milestones/Metadata/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • state
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/metadata/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Facet/Prop/@Value +#### /Plan Of Action And Milestones/Metadata/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/facet) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='state']/@value |
  • initial
  • adjusted
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/metadata/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Link/@Rel +#### /Plan Of Action And Milestones/Metadata/Revision/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/metadata/revision) | link/@rel |
  • canonical
  • alternate
  • predecessor-version
  • successor-version
  • version-history
| True | builtin | +| [Location](/plan-of-action-and-milestones/metadata/revision/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Origin/Actor/@Type +#### /Plan Of Action And Milestones/Metadata/Revision/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/metadata/revision/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Origin/Actor/Link/@Rel +#### /Plan Of Action And Milestones/Metadata/Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/actor/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/metadata/role/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Origin/Actor/Prop/@Name +#### /Plan Of Action And Milestones/Metadata/Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/metadata/role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/@Type +#### /Plan Of Action And Milestones/Observation/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Exclude Subject/@Type +#### /Plan Of Action And Milestones/Observation/Method -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/method) | . |
  • EXAMINE
  • INTERVIEW
  • TEST
  • UNKNOWN
| True | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel +#### /Plan Of Action And Milestones/Observation/Origin/Actor/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name +#### /Plan Of Action And Milestones/Observation/Origin/Actor/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/origin/actor/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Include Subject/@Type +#### /Plan Of Action And Milestones/Observation/Origin/Actor/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel +#### /Plan Of Action And Milestones/Observation/Origin/Related Task/Identified Subject/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/origin/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name +#### /Plan Of Action And Milestones/Observation/Origin/Related Task/Identified Subject/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/origin/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Link/@Rel +#### /Plan Of Action And Milestones/Observation/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/origin/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Prop/@Name +#### /Plan Of Action And Milestones/Observation/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/origin/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Link/@Rel +#### /Plan Of Action And Milestones/Observation/Origin/Related Task/Identified Subject/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/origin/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Prop/@Name +#### /Plan Of Action And Milestones/Observation/Origin/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/origin/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Responsible Party/Link/@Rel +#### /Plan Of Action And Milestones/Observation/Origin/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/origin/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Responsible Party/Prop/@Name +#### /Plan Of Action And Milestones/Observation/Origin/Related Task/Identified Subject/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/origin/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Subject/@Type +#### /Plan Of Action And Milestones/Observation/Origin/Related Task/Identified Subject/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/origin/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Subject/Exclude Subject/@Type +#### /Plan Of Action And Milestones/Observation/Origin/Related Task/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/origin/related-task/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Subject/Exclude Subject/Link/@Rel +#### /Plan Of Action And Milestones/Observation/Origin/Related Task/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/origin/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Subject/Exclude Subject/Prop/@Name +#### /Plan Of Action And Milestones/Observation/Origin/Related Task/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/origin/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Subject/Include Subject/@Type +#### /Plan Of Action And Milestones/Observation/Origin/Related Task/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/origin/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Subject/Include Subject/Link/@Rel +#### /Plan Of Action And Milestones/Observation/Origin/Related Task/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/origin/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Subject/Include Subject/Prop/@Name +#### /Plan Of Action And Milestones/Observation/Origin/Related Task/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/origin/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Subject/Link/@Rel +#### /Plan Of Action And Milestones/Observation/Origin/Related Task/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/origin/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Subject/Prop/@Name +#### /Plan Of Action And Milestones/Observation/Origin/Related Task/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/origin/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Characterization/Prop/@Name +#### /Plan Of Action And Milestones/Observation/Origin/Related Task/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/characterization/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/origin/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Plan Of Action And Milestones/Risk/Link/@Rel +#### /Plan Of Action And Milestones/Observation/Origin/Related Task/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/origin/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Mitigating Factor/Link/@Rel +#### /Plan Of Action And Milestones/Observation/Origin/Related Task/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/mitigating-factor/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/origin/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Mitigating Factor/Prop/@Name +#### /Plan Of Action And Milestones/Observation/Origin/Related Task/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/mitigating-factor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/origin/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Mitigating Factor/Subject/@Type +#### /Plan Of Action And Milestones/Observation/Origin/Related Task/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/mitigating-factor/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/origin/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Mitigating Factor/Subject/Link/@Rel +#### /Plan Of Action And Milestones/Observation/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/mitigating-factor/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Mitigating Factor/Subject/Prop/@Name +#### /Plan Of Action And Milestones/Observation/Relevant Evidence/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/mitigating-factor/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/relevant-evidence/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Origin/Actor/@Type +#### /Plan Of Action And Milestones/Observation/Relevant Evidence/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/relevant-evidence/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Origin/Actor/Link/@Rel +#### /Plan Of Action And Milestones/Observation/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/actor/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Plan Of Action And Milestones/Risk/Origin/Actor/Prop/@Name +#### /Plan Of Action And Milestones/Observation/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Origin/Related Task/Identified Subject/Subject/@Type +#### /Plan Of Action And Milestones/Observation/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Origin/Related Task/Identified Subject/Subject/Exclude Subject/@Type +#### /Plan Of Action And Milestones/Observation/Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/observation/type) | . |
  • ssp-statement-issue
  • control-objective
  • mitigation
  • finding
  • historic
| True | builtin | -### /Plan Of Action And Milestones/Risk/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel +#### /Plan Of Action And Milestones/Poam Item/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/poam-item/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name +#### /Plan Of Action And Milestones/Poam Item/Origin/Actor/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/poam-item/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | -### /Plan Of Action And Milestones/Risk/Origin/Related Task/Identified Subject/Subject/Include Subject/@Type +#### /Plan Of Action And Milestones/Poam Item/Origin/Actor/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/poam-item/origin/actor/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Origin/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel +#### /Plan Of Action And Milestones/Poam Item/Origin/Actor/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/poam-item/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Origin/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name +#### /Plan Of Action And Milestones/Poam Item/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/poam-item/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Origin/Related Task/Identified Subject/Subject/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Characterization/Facet/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://csrc.nist.gov/ns/oscal']/@name |
  • likelihood
  • impact
  • risk
  • severity
| False | builtin | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://fedramp.gov','http://fedramp.gov/ns/oscal')]/@name |
  • likelihood
  • impact
  • risk
| False | builtin | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://cve.mitre.org']/@name |
  • cve-id
| False | builtin | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0']/@name |
  • access-vector
  • access-complexity
  • authentication
  • confidentiality-impact
  • integrity-impact
  • availability-impact
  • exploitability
  • remediation-level
  • report-confidence
  • collateral-damage-potential
  • target-distribution
  • confidentiality-requirement
  • integrity-requirement
  • availability-requirement
| False | builtin | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1')]/@name |
  • attack-vector
  • access-complexity
  • privileges-required
  • user-interaction
  • scope
  • confidentiality-impact
  • integrity-impact
  • availability-impact
  • exploit-code-maturity
  • remediation-level
  • report-confidence
  • modified-attack-vector
  • modified-attack-complexity
  • modified-privileges-required
  • modified-user-interaction
  • modified-scope
  • modified-confidentiality
  • modified-integrity
  • modified-availability
  • confidentiality-requirement
  • integrity-requirement
  • availability-requirement
| False | builtin | -### /Plan Of Action And Milestones/Risk/Origin/Related Task/Identified Subject/Subject/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Characterization/Facet/@System -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet/@system) | . |
  • http://fedramp.gov
  • http://fedramp.gov/ns/oscal
  • http://csrc.nist.gov/ns/oscal
  • http://csrc.nist.gov/ns/oscal/unknown
  • http://cve.mitre.org
  • http://www.first.org/cvss/v2.0
  • http://www.first.org/cvss/v3.0
  • http://www.first.org/cvss/v3.1
| True | builtin | -### /Plan Of Action And Milestones/Risk/Origin/Related Task/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Characterization/Facet/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='access-vector']/@value |
  • local
  • adjacent-network
  • network
| False | builtin | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='access-complexity']/@value |
  • high
  • medium
  • low
| False | builtin | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='authentication']/@value |
  • multiple
  • single
  • none
| False | builtin | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name=('confidentiality-impact', 'integrity-impact', 'availability-impact')]/@value |
  • none
  • partial
  • complete
| False | builtin | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='exploitability']/@value |
  • unproven
  • proof-of-concept
  • functional
  • high
  • not-defined
| False | builtin | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='remediation-level']/@value |
  • official-fix
  • temporary-fix
  • workaround
  • unavailable
  • not-defined
| False | builtin | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='report-confidence']/@value |
  • unconfirmed
  • uncorroborated
  • confirmed
  • not-defined
| False | builtin | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name='collateral-damage-potential']/@value |
  • none
  • low
  • low-medium
  • medium-high
  • high
  • not-defined
| False | builtin | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system='http://www.first.org/cvss/v2.0' and @name=('target-distribution', 'confidentiality-requirement', 'integrity-requirement', 'availability-requirement')]/@value |
  • none
  • low
  • medium
  • high
  • not-defined
| False | builtin | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='access-vector']/@value |
  • network
  • adjacent
  • local
  • physical
| False | builtin | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='access-complexity']/@value |
  • high
  • low
| False | builtin | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name=('privileges-required', 'confidentiality-impact', 'integrity-impact', 'availability-impact')]/@value |
  • none
  • low
  • high
| False | builtin | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='user-interaction']/@value |
  • none
  • required
| False | builtin | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='scope']/@value |
  • unchanged
  • changed
| False | builtin | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='exploit-code-maturity']/@value |
  • not-defined
  • unproven
  • proof-of-concept
  • functional
  • high
| False | builtin | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='remediation-level']/@value |
  • not-defined
  • official-fix
  • temporary-fix
  • workaround
  • unavailable
| False | builtin | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='report-confidence']/@value |
  • not-defined
  • unknown
  • reasonable
  • confirmed
| False | builtin | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name=('confidentiality-requirement', 'integrity-requirement', 'availability-requirement')]/@value |
  • not-defined
  • low
  • medium
  • high
| False | builtin | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='modified-attack-vector']/@value |
  • not-defined
  • network
  • adjacent
  • local
  • physical
| False | builtin | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='modified-attack-complexity']/@value |
  • not-defined
  • high
  • low
| False | builtin | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name=('modified-privileges-required', 'modified-confidentiality', 'modified-integrity', 'modified-availability')]/@value |
  • not-defined
  • none
  • low
  • high
| False | builtin | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='modified-user-interaction']/@value |
  • not-defined
  • none
  • required
| False | builtin | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet) | (.)[@system=('http://www.first.org/cvss/v3.0', 'http://www.first.org/cvss/v3.1') and @name='modified-scope']/@value |
  • not-defined
  • unchanged
  • changed
| False | builtin | -### /Plan Of Action And Milestones/Risk/Origin/Related Task/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Characterization/Facet/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Origin/Related Task/Responsible Party/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Characterization/Facet/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • state
| False | builtin | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Origin/Related Task/Responsible Party/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Characterization/Facet/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/facet) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='state']/@value |
  • initial
  • adjusted
| False | builtin | -### /Plan Of Action And Milestones/Risk/Origin/Related Task/Subject/@Type +#### /Plan Of Action And Milestones/Risk/Characterization/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Origin/Related Task/Subject/Exclude Subject/@Type +#### /Plan Of Action And Milestones/Risk/Characterization/Origin/Actor/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | -### /Plan Of Action And Milestones/Risk/Origin/Related Task/Subject/Exclude Subject/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Characterization/Origin/Actor/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/origin/actor/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Origin/Related Task/Subject/Exclude Subject/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Characterization/Origin/Actor/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Origin/Related Task/Subject/Include Subject/@Type +#### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Plan Of Action And Milestones/Risk/Origin/Related Task/Subject/Include Subject/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Plan Of Action And Milestones/Risk/Origin/Related Task/Subject/Include Subject/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Origin/Related Task/Subject/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Origin/Related Task/Subject/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/origin/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Plan Of Action And Milestones/Risk/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • false-positive
  • accepted
  • risk-adjusted
  • priority
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/@Lifecycle +#### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/@lifecycle) | . |
  • recommendation
  • planned
  • completed
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Response/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Origin/Actor/@Type +#### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Identified Subject/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Response/Origin/Actor/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/actor/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Origin/Actor/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Identified Subject/Subject/@Type +#### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Identified Subject/Subject/Exclude Subject/@Type +#### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Identified Subject/Subject/Include Subject/@Type +#### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Identified Subject/Subject/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Identified Subject/Subject/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Characterization/Origin/Related Task/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/origin/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Responsible Party/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Characterization/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/characterization/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Responsible Party/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Subject/@Type +#### /Plan Of Action And Milestones/Risk/Mitigating Factor/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/mitigating-factor/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Subject/Exclude Subject/@Type +#### /Plan Of Action And Milestones/Risk/Mitigating Factor/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/mitigating-factor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Subject/Exclude Subject/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Mitigating Factor/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/mitigating-factor/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Subject/Exclude Subject/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Mitigating Factor/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/mitigating-factor/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Subject/Include Subject/@Type +#### /Plan Of Action And Milestones/Risk/Mitigating Factor/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/mitigating-factor/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Subject/Include Subject/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Origin/Actor/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | -### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Subject/Include Subject/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Origin/Actor/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/origin/actor/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Subject/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Origin/Actor/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Subject/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Origin/Related Task/Identified Subject/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/origin/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Origin/Related Task/Identified Subject/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/origin/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Prop/@Value +#### /Plan Of Action And Milestones/Risk/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • avoid
  • mitigate
  • transfer
  • accept
  • share
  • contingency
  • none
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/origin/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Required Asset/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/required-asset/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/origin/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Response/Required Asset/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Origin/Related Task/Identified Subject/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/required-asset/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/origin/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Required Asset/Subject/@Type +#### /Plan Of Action And Milestones/Risk/Origin/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/required-asset/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/origin/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Required Asset/Subject/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Origin/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/required-asset/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/origin/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Response/Required Asset/Subject/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Origin/Related Task/Identified Subject/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/required-asset/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/origin/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Task/@Type +#### /Plan Of Action And Milestones/Risk/Origin/Related Task/Identified Subject/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/@type) | . |
  • milestone
  • action
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/origin/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Origin/Related Task/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/origin/related-task/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Origin/Related Task/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/origin/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Responsible Role/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Origin/Related Task/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/origin/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Responsible Role/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Origin/Related Task/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/origin/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Subject/@Type +#### /Plan Of Action And Milestones/Risk/Origin/Related Task/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/origin/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Subject/Exclude Subject/@Type +#### /Plan Of Action And Milestones/Risk/Origin/Related Task/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/origin/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Subject/Exclude Subject/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Origin/Related Task/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/origin/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Subject/Exclude Subject/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Origin/Related Task/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/origin/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Subject/Include Subject/@Type +#### /Plan Of Action And Milestones/Risk/Origin/Related Task/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/origin/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Subject/Include Subject/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Origin/Related Task/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/origin/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Subject/Include Subject/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Origin/Related Task/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/origin/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Subject/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Origin/Related Task/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/origin/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Subject/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Origin/Related Task/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/origin/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Response/Task/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • false-positive
  • accepted
  • risk-adjusted
  • priority
| False | builtin | +| [Location](/plan-of-action-and-milestones/risk/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Response/Task/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Response/@Lifecycle -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/@lifecycle) | . |
  • recommendation
  • planned
  • completed
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Task/Responsible Role/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Response/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Task/Responsible Role/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Response/Origin/Actor/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/origin/actor/@type) | . |
  • tool
  • assessment-platform
  • party
| False | builtin | -### /Plan Of Action And Milestones/Risk/Response/Task/Subject/@Type +#### /Plan Of Action And Milestones/Risk/Response/Origin/Actor/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/origin/actor/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Task/Subject/Exclude Subject/@Type +#### /Plan Of Action And Milestones/Risk/Response/Origin/Actor/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/origin/actor/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Response/Task/Subject/Exclude Subject/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Identified Subject/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Task/Subject/Exclude Subject/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Identified Subject/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Task/Subject/Include Subject/@Type +#### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Task/Subject/Include Subject/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Response/Task/Subject/Include Subject/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Identified Subject/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Task/Subject/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Response/Task/Subject/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Response/Task/Timing/At Frequency/@Unit +#### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Identified Subject/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/response/task/timing/at-frequency/@unit) | . |
  • seconds
  • minutes
  • hours
  • days
  • months
  • years
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Identified Subject/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Prop/@Value +#### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • vendor-check-in
  • status-update
  • milestone-complete
  • mitigation
  • remediated
  • closed
  • dr-submission
  • dr-updated
  • dr-approved
  • dr-rejected
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/@Type +#### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Exclude Subject/@Type +#### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Include Subject/@Type +#### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Response/Origin/Related Task/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/origin/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Response/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | +| [Location](/plan-of-action-and-milestones/risk/response/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Response/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • avoid
  • mitigate
  • transfer
  • accept
  • share
  • contingency
  • none
| False | builtin | -### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Responsible Party/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Response/Required Asset/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/required-asset/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Responsible Party/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Response/Required Asset/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/required-asset/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Subject/@Type +#### /Plan Of Action And Milestones/Risk/Response/Required Asset/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/required-asset/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Exclude Subject/@Type +#### /Plan Of Action And Milestones/Risk/Response/Required Asset/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/required-asset/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Exclude Subject/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Response/Required Asset/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/required-asset/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Exclude Subject/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Response/Task/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/task/@type) | . |
  • milestone
  • action
| True | builtin | -### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Include Subject/@Type +#### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Include Subject/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Include Subject/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Status Change +#### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/risk-log/entry/status-change) | . |
  • open
  • investigating
  • remediating
  • deviation-requested
  • deviation-approved
  • closed
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Plan Of Action And Milestones/Risk/Status +#### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/status) | . |
  • open
  • investigating
  • remediating
  • deviation-requested
  • deviation-approved
  • closed
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Plan Of Action And Milestones/Risk/Threat Id/@System +#### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/risk/threat-id/@system) | . |
  • http://fedramp.gov
  • http://fedramp.gov/ns/oscal
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Plan Of Action And Milestones/System Id/@Identifier Type +#### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/plan-of-action-and-milestones/system-id/@identifier-type) | . |
  • https://fedramp.gov
  • http://fedramp.gov/ns/oscal
  • https://ietf.org/rfc/rfc4122
  • http://ietf.org/rfc/rfc4122
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Profile/Back Matter/Resource/Citation/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/back-matter/resource/citation/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Profile/Back Matter/Resource/Citation/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/back-matter/resource/citation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Profile/Back Matter/Resource/Document Id/@Scheme +#### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/back-matter/resource/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Profile/Back Matter/Resource/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Response/Task/Associated Activity/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
  • version
  • published
| False | builtin | -| allowed-values | [Location](/profile/back-matter/resource/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/task/associated-activity/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Profile/Back Matter/Resource/Prop/@Value +#### /Plan Of Action And Milestones/Risk/Response/Task/Link/@Rel -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | attachment-type | [Location](/profile) | back-matter/resource/prop[@name='type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • law
  • regulation
  • standard
  • guidance
  • policy
  • procedure
  • guide
  • rules-of-behavior
  • plan
  • system-security-plan
  • artifact
  • evidence
  • screen-shot
  • image
  • tool-report
  • raw-tool-output
  • interview-notes
  • questionnaire
  • report
  • fedramp-citations
  • fedramp-acronyms
  • fedramp-logo
  • separation-of-duties-matrix
  • logo
  • personally-identifiable-information
  • agreement
  • isa-agreement
  • incident-response-plan
  • information-security-policies-and-procedures
  • users-guide
  • privacy-impact-assessment
  • information-system-contingency-plan
  • configuration-management-plan
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -| allowed-values | | [Location](/profile/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • logo
  • image
  • screen-shot
  • law
  • regulation
  • standard
  • external-guidance
  • acronyms
  • citation
  • policy
  • procedure
  • system-guide
  • users-guide
  • administrators-guide
  • rules-of-behavior
  • plan
  • artifact
  • evidence
  • tool-output
  • raw-data
  • interview-notes
  • questionnaire
  • report
  • agreement
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/task/link/@rel) | . |
  • reference
| True | builtin | -### /Profile/Back Matter/Resource/Rlink/Hash/@Algorithm +#### /Plan Of Action And Milestones/Risk/Response/Task/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/back-matter/resource/rlink/hash/@algorithm) | . |
  • SHA-224
  • SHA-256
  • SHA-384
  • SHA-512
  • SHA3-224
  • SHA3-256
  • SHA3-384
  • SHA3-512
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Profile/Import/Exclude Controls/@With Child Controls +#### /Plan Of Action And Milestones/Risk/Response/Task/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/import/exclude-controls/@with-child-controls) | . |
  • yes
  • no
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/task/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /Profile/Import/Include Controls/@With Child Controls +#### /Plan Of Action And Milestones/Risk/Response/Task/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/import/include-controls/@with-child-controls) | . |
  • yes
  • no
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/task/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Profile/Merge/Combine/@Method +#### /Plan Of Action And Milestones/Risk/Response/Task/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/merge/combine/@method) | . |
  • use-first
  • merge
  • keep
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Profile/Merge/Custom/Group/Insert Controls/@Order +#### /Plan Of Action And Milestones/Risk/Response/Task/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/merge/custom/group/insert-controls/@order) | . |
  • keep
  • ascending
  • descending
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Profile/Merge/Custom/Group/Insert Controls/Exclude Controls/@With Child Controls +#### /Plan Of Action And Milestones/Risk/Response/Task/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/merge/custom/group/insert-controls/exclude-controls/@with-child-controls) | . |
  • yes
  • no
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Profile/Merge/Custom/Group/Insert Controls/Include Controls/@With Child Controls +#### /Plan Of Action And Milestones/Risk/Response/Task/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/merge/custom/group/insert-controls/include-controls/@with-child-controls) | . |
  • yes
  • no
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Profile/Merge/Custom/Group/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Response/Task/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/merge/custom/group/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Profile/Merge/Custom/Group/Param/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Response/Task/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/merge/custom/group/param/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Profile/Merge/Custom/Group/Param/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Response/Task/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/merge/custom/group/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
  • alt-label
| False | builtin | -| allowed-values | [Location](/profile/merge/custom/group/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/rmf')]/@name |
  • aggregates
| False | builtin | -| allowed-values | [Location](/profile/merge/custom/group/param/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Profile/Merge/Custom/Group/Param/Select/@How Many +#### /Plan Of Action And Milestones/Risk/Response/Task/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/merge/custom/group/param/select/@how-many) | . |
  • one
  • one-or-more
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/task/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Profile/Merge/Custom/Group/Part/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Response/Task/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/merge/custom/group/part/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Profile/Merge/Custom/Group/Part/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Response/Task/Timing/At Frequency/@Unit -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/merge/custom/group/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | -| allowed-values | [Location](/profile/merge/custom/group/part/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -| allowed-values | [Location](/profile/merge/custom/group/part/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/response/task/timing/at-frequency/@unit) | . |
  • seconds
  • minutes
  • hours
  • days
  • months
  • years
| False | builtin | -### /Profile/Merge/Custom/Group/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/merge/custom/group/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/risk-log/entry/link/@rel) | . |
  • reference
| True | builtin | -### /Profile/Merge/Custom/Insert Controls/@Order +#### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/merge/custom/insert-controls/@order) | . |
  • keep
  • ascending
  • descending
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/risk-log/entry) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | +| [Location](/plan-of-action-and-milestones/risk/risk-log/entry/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Profile/Merge/Custom/Insert Controls/Exclude Controls/@With Child Controls +#### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/merge/custom/insert-controls/exclude-controls/@with-child-controls) | . |
  • yes
  • no
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/risk-log/entry) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • vendor-check-in
  • status-update
  • milestone-complete
  • mitigation
  • remediated
  • closed
  • dr-submission
  • dr-updated
  • dr-approved
  • dr-rejected
| True | builtin | -### /Profile/Merge/Custom/Insert Controls/Include Controls/@With Child Controls +#### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/merge/custom/insert-controls/include-controls/@with-child-controls) | . |
  • yes
  • no
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/link/@rel) | . |
  • reference
| True | builtin | -### /Profile/Metadata/Action/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/metadata/action/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Profile/Metadata/Action/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/metadata/action/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/identified-subject/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Profile/Metadata/Action/Responsible Party/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/metadata/action/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/identified-subject/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Profile/Metadata/Action/Responsible Party/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/metadata/action/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/identified-subject/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Profile/Metadata/Document Id/@Scheme +#### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/metadata/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/identified-subject/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Profile/Metadata/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/metadata) | link/@rel |
  • canonical
  • alternate
  • latest-version
  • predecessor-version
  • successor-version
| True | builtin | -| allowed-values | [Location](/profile/metadata/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/identified-subject/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Profile/Metadata/Location/Address/@Type +#### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Include Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/metadata/location/address/@type) | . |
  • home
  • work
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/identified-subject/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Profile/Metadata/Location/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/metadata/location/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/identified-subject/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Profile/Metadata/Location/Prop/@Class +#### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type' and @value='data-center']/@class |
  • primary
  • alternate
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/identified-subject/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Profile/Metadata/Location/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Identified Subject/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | -| allowed-values | [Location](/profile/metadata/location/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/identified-subject/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Profile/Metadata/Location/Prop/@Value +#### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • data-center
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/link/@rel) | . |
  • reference
| True | builtin | -### /Profile/Metadata/Location/Telephone Number/@Type +#### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/metadata/location/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Profile/Metadata/Party/@Type +#### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/metadata/party/@type) | . |
  • person
  • organization
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /Profile/Metadata/Party/Address/@Type +#### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Responsible Party/Prop/@Name -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | address-type | [Location](/profile) | metadata/party/address/@type |
  • work
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -| allowed-values | | [Location](/profile/metadata/party/address/@type) | . |
  • home
  • work
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Profile/Metadata/Party/External Id/@Scheme +#### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/metadata/party/external-id/@scheme) | . |
  • http://orcid.org/
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
| True | builtin | -### /Profile/Metadata/Party/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Exclude Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/metadata/party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/subject/exclude-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Profile/Metadata/Party/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Exclude Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/metadata/party) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • mail-stop
  • office
  • job-title
| False | builtin | -| allowed-values | [Location](/profile/metadata/party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/subject/exclude-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Profile/Metadata/Party/Telephone Number/@Type +#### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Exclude Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/metadata/party/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/subject/exclude-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Profile/Metadata/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Include Subject/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/metadata) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • keywords
| False | builtin | -| allowed-values | [Location](/profile/metadata/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/subject/include-subject/@type) | . |
  • component
  • inventory-item
  • location
  • party
  • user
  • resource
| True | builtin | -### /Profile/Metadata/Responsible Party/@Role Id +#### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Include Subject/Link/@Rel -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | allowed-metadata-responsibe-party-role-ids | [Location](/profile/metadata) | responsible-party/@role-id |
  • creator
  • prepared-by
  • prepared-for
  • content-approver
  • contact
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/subject/include-subject/link/@rel) | . |
  • reference
| True | builtin | -### /Profile/Metadata/Responsible Party/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Include Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/metadata/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/subject/include-subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Profile/Metadata/Responsible Party/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/metadata/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/subject/link/@rel) | . |
  • reference
| True | builtin | -### /Profile/Metadata/Revision/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Related Response/Related Task/Subject/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/metadata/revision) | link/@rel |
  • canonical
  • alternate
  • predecessor-version
  • successor-version
  • version-history
| True | builtin | -| allowed-values | [Location](/profile/metadata/revision/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/risk-log/entry/related-response/related-task/subject/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Profile/Metadata/Revision/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Risk Log/Entry/Status Change -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/metadata/revision/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/risk-log/entry/status-change) | . |
  • open
  • investigating
  • remediating
  • deviation-requested
  • deviation-approved
  • closed
| True | builtin | -### /Profile/Metadata/Role/Link/@Rel +#### /Plan Of Action And Milestones/Risk/Status -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/metadata/role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/status) | . |
  • open
  • investigating
  • remediating
  • deviation-requested
  • deviation-approved
  • closed
| True | builtin | -### /Profile/Metadata/Role/Prop/@Name +#### /Plan Of Action And Milestones/Risk/Threat Id/@System -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/metadata/role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/risk/threat-id/@system) | . |
  • http://fedramp.gov
  • http://fedramp.gov/ns/oscal
| True | builtin | -### /Profile/Modify/Alter/Add/@Position +#### /Plan Of Action And Milestones/System Id/@Identifier Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/modify/alter/add/@position) | . |
  • before
  • after
  • starting
  • ending
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/plan-of-action-and-milestones/system-id/@identifier-type) | . |
  • https://fedramp.gov
  • http://fedramp.gov/ns/oscal
  • https://ietf.org/rfc/rfc4122
  • http://ietf.org/rfc/rfc4122
| True | builtin | -### /Profile/Modify/Alter/Add/Link/@Rel +--- -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/modify/alter/add/link/@rel) | . |
  • reference
| True | builtin | +### Other Allowed Values -### /Profile/Modify/Alter/Add/Param/Link/@Rel +#### /Catalog/Back Matter/Resource/Citation/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/modify/alter/add/param/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/back-matter/resource/citation/link/@rel) | . |
  • reference
| True | builtin | -### /Profile/Modify/Alter/Add/Param/Prop/@Name +#### /Catalog/Back Matter/Resource/Citation/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/modify/alter/add/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
  • alt-label
| False | builtin | -| allowed-values | [Location](/profile/modify/alter/add/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/rmf')]/@name |
  • aggregates
| False | builtin | -| allowed-values | [Location](/profile/modify/alter/add/param/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/back-matter/resource/citation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Profile/Modify/Alter/Add/Param/Select/@How Many +#### /Catalog/Back Matter/Resource/Document Id/@Scheme -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/modify/alter/add/param/select/@how-many) | . |
  • one
  • one-or-more
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/back-matter/resource/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | -### /Profile/Modify/Alter/Add/Part/Link/@Rel +#### /Catalog/Back Matter/Resource/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/modify/alter/add/part/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
  • version
  • published
| False | builtin | +| [Location](/catalog/back-matter/resource/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Profile/Modify/Alter/Add/Part/Prop/@Name +#### /Catalog/Back Matter/Resource/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/modify/alter/add/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | -| allowed-values | [Location](/profile/modify/alter/add/part/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -| allowed-values | [Location](/profile/modify/alter/add/part/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | +| attachment-type | [Location](/catalog) | back-matter/resource/prop[@name='type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • law
  • regulation
  • standard
  • guidance
  • policy
  • procedure
  • guide
  • rules-of-behavior
  • plan
  • system-security-plan
  • artifact
  • evidence
  • screen-shot
  • image
  • tool-report
  • raw-tool-output
  • interview-notes
  • questionnaire
  • report
  • fedramp-citations
  • fedramp-acronyms
  • fedramp-logo
  • separation-of-duties-matrix
  • logo
  • personally-identifiable-information
  • agreement
  • isa-agreement
  • incident-response-plan
  • information-security-policies-and-procedures
  • users-guide
  • privacy-impact-assessment
  • information-system-contingency-plan
  • configuration-management-plan
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| | [Location](/catalog/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • logo
  • image
  • screen-shot
  • law
  • regulation
  • standard
  • external-guidance
  • acronyms
  • citation
  • policy
  • procedure
  • system-guide
  • users-guide
  • administrators-guide
  • rules-of-behavior
  • plan
  • artifact
  • evidence
  • tool-output
  • raw-data
  • interview-notes
  • questionnaire
  • report
  • agreement
| False | builtin | -### /Profile/Modify/Alter/Add/Prop/@Name +#### /Catalog/Back Matter/Resource/Rlink/Hash/@Algorithm -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/modify/alter/add) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | -| allowed-values | [Location](/profile/modify/alter/add/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/back-matter/resource/rlink/hash/@algorithm) | . |
  • SHA-224
  • SHA-256
  • SHA-384
  • SHA-512
  • SHA3-224
  • SHA3-256
  • SHA3-384
  • SHA3-512
| True | builtin | -### /Profile/Modify/Alter/Remove/@By Item Name +#### /Catalog/Control/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/modify/alter/remove/@by-item-name) | . |
  • param
  • prop
  • link
  • part
  • mapping
  • map
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/control) | link/@rel |
  • reference
  • related
  • required
  • incorporated-into
  • moved-to
| True | builtin | +| [Location](/catalog/control/link/@rel) | . |
  • reference
| True | builtin | +| [Location](/catalog/control/control) | link/@rel |
  • reference
  • related
  • required
  • incorporated-into
  • moved-to
| True | builtin | -### /Profile/Modify/Set Parameter/Link/@Rel +#### /Catalog/Control/Param/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/modify/set-parameter/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/control/param/link/@rel) | . |
  • reference
| True | builtin | -### /Profile/Modify/Set Parameter/Prop/@Name +#### /Catalog/Control/Param/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/modify/set-parameter/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/control/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
  • alt-label
| False | builtin | +| [Location](/catalog/control/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/rmf')]/@name |
  • aggregates
| False | builtin | +| [Location](/catalog/control/param/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /Profile/Modify/Set Parameter/Select/@How Many +#### /Catalog/Control/Param/Select/@How Many -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/profile/modify/set-parameter/select/@how-many) | . |
  • one
  • one-or-more
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/control/param/select/@how-many) | . |
  • one
  • one-or-more
| False | builtin | -### /System Security Plan/Back Matter/Resource/Citation/Link/@Rel +#### /Catalog/Control/Part/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/back-matter/resource/citation/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • overview
  • statement
  • guidance
  • example
  • assessment
  • assessment-method
| False | builtin | +| [Location](/catalog/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='statement']//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • item
| False | builtin | +| [Location](/catalog/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='statement']//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • item
| False | builtin | +| [Location](/catalog/control) | [Target](.//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name) |
  • objective
  • assessment-objective
| False | builtin | +| [Location](/catalog/control) | [Target](.//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name) |
  • objective
  • assessment-objective
| False | builtin | +| [Location](/catalog/control) | [Target](.//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name) |
  • objective
  • assessment-objective
| False | builtin | +| [Location](/catalog/control) | [Target](.//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name) |
  • objective
  • assessment-objective
| False | builtin | +| [Location](/catalog/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • objects
  • assessment-objects
| False | builtin | +| [Location](/catalog/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • overview
  • statement
  • guidance
  • example
  • assessment
  • assessment-method
| False | builtin | +| [Location](/catalog/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='statement']//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • item
| False | builtin | +| [Location](/catalog/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='statement']//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • item
| False | builtin | +| [Location](/catalog/control/control) | [Target](.//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name) |
  • objective
  • assessment-objective
| False | builtin | +| [Location](/catalog/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • objects
  • assessment-objects
| False | builtin | -### /System Security Plan/Back Matter/Resource/Citation/Prop/@Name +#### /Catalog/Control/Part/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/back-matter/resource/citation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/control/part/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/Back Matter/Resource/Document Id/@Scheme +#### /Catalog/Control/Part/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/back-matter/resource/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • method
| False | builtin | +| [Location](/catalog/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/rmf')]/@name |
  • method
| False | builtin | +| [Location](/catalog/control/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | +| [Location](/catalog/control/part/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| [Location](/catalog/control/part/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | +| [Location](/catalog/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • method
| False | builtin | +| [Location](/catalog/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/rmf')]/@name |
  • method
| False | builtin | -### /System Security Plan/Back Matter/Resource/Prop/@Name +#### /Catalog/Control/Part/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
  • version
  • published
| False | builtin | -| allowed-values | [Location](/system-security-plan/back-matter/resource/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace(('http://csrc.nist.gov/ns/oscal','http://csrc.nist.gov/ns/rmf')) and @name='method']/@value |
  • INTERVIEW
  • EXAMINE
  • TEST
| False | builtin | +| [Location](/catalog/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace(('http://csrc.nist.gov/ns/oscal','http://csrc.nist.gov/ns/rmf')) and @name='method']/@value |
  • INTERVIEW
  • EXAMINE
  • TEST
| False | builtin | + +#### /Catalog/Control/Prop/@Name -### /System Security Plan/Back Matter/Resource/Prop/@Value +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/control) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
  • status
| False | builtin | +| [Location](/catalog/control/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| [Location](/catalog/control/control) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
  • status
| False | builtin | -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | attachment-type | [Location](/system-security-plan) | back-matter/resource/prop[@name='type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • law
  • regulation
  • standard
  • guidance
  • policy
  • procedure
  • guide
  • rules-of-behavior
  • plan
  • system-security-plan
  • artifact
  • evidence
  • screen-shot
  • image
  • tool-report
  • raw-tool-output
  • interview-notes
  • questionnaire
  • report
  • fedramp-citations
  • fedramp-acronyms
  • fedramp-logo
  • separation-of-duties-matrix
  • logo
  • personally-identifiable-information
  • agreement
  • isa-agreement
  • incident-response-plan
  • information-security-policies-and-procedures
  • users-guide
  • privacy-impact-assessment
  • information-system-contingency-plan
  • configuration-management-plan
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -| allowed-values | | [Location](/system-security-plan/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • logo
  • image
  • screen-shot
  • law
  • regulation
  • standard
  • external-guidance
  • acronyms
  • citation
  • policy
  • procedure
  • system-guide
  • users-guide
  • administrators-guide
  • rules-of-behavior
  • plan
  • artifact
  • evidence
  • tool-output
  • raw-data
  • interview-notes
  • questionnaire
  • report
  • agreement
| False | builtin | +#### /Catalog/Control/Prop/@Value -### /System Security Plan/Back Matter/Resource/Rlink/Hash/@Algorithm +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/control) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='status']/@value |
  • withdrawn
  • Withdrawn
| False | builtin | +| [Location](/catalog/control/control) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='status']/@value |
  • withdrawn
  • Withdrawn
| False | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/back-matter/resource/rlink/hash/@algorithm) | . |
  • SHA-224
  • SHA-256
  • SHA-384
  • SHA-512
  • SHA3-224
  • SHA3-256
  • SHA3-384
  • SHA3-512
| True | builtin | +#### /Catalog/Group/Control/Link/@Rel -### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Link/@Rel +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/group/control) | link/@rel |
  • reference
  • related
  • required
  • incorporated-into
  • moved-to
| True | builtin | +| [Location](/catalog/group/control/link/@rel) | . |
  • reference
| True | builtin | +| [Location](/catalog/group/control/control) | link/@rel |
  • reference
  • related
  • required
  • incorporated-into
  • moved-to
| True | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/export/link/@rel) | . |
  • reference
| True | builtin | +#### /Catalog/Group/Control/Param/Link/@Rel + +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/group/control/param/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Prop/@Name +#### /Catalog/Group/Control/Param/Prop/@Name + +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/group/control/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
  • alt-label
| False | builtin | +| [Location](/catalog/group/control/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/rmf')]/@name |
  • aggregates
| False | builtin | +| [Location](/catalog/group/control/param/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/export/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +#### /Catalog/Group/Control/Param/Select/@How Many + +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/group/control/param/select/@how-many) | . |
  • one
  • one-or-more
| False | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Provided/Link/@Rel +#### /Catalog/Group/Control/Part/@Name + +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/group/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • overview
  • statement
  • guidance
  • example
  • assessment
  • assessment-method
| False | builtin | +| [Location](/catalog/group/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='statement']//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • item
| False | builtin | +| [Location](/catalog/group/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='statement']//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • item
| False | builtin | +| [Location](/catalog/group/control) | [Target](.//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name) |
  • objective
  • assessment-objective
| False | builtin | +| [Location](/catalog/group/control) | [Target](.//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name) |
  • objective
  • assessment-objective
| False | builtin | +| [Location](/catalog/group/control) | [Target](.//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name) |
  • objective
  • assessment-objective
| False | builtin | +| [Location](/catalog/group/control) | [Target](.//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name) |
  • objective
  • assessment-objective
| False | builtin | +| [Location](/catalog/group/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • objects
  • assessment-objects
| False | builtin | +| [Location](/catalog/group/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • overview
  • statement
  • guidance
  • example
  • assessment
  • assessment-method
| False | builtin | +| [Location](/catalog/group/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='statement']//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • item
| False | builtin | +| [Location](/catalog/group/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='statement']//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • item
| False | builtin | +| [Location](/catalog/group/control/control) | [Target](.//part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name) |
  • objective
  • assessment-objective
| False | builtin | +| [Location](/catalog/group/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • objects
  • assessment-objects
| False | builtin | + +#### /Catalog/Group/Control/Part/Link/@Rel + +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/group/control/part/link/@rel) | . |
  • reference
| True | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/export/provided/link/@rel) | . |
  • reference
| True | builtin | +#### /Catalog/Group/Control/Part/Prop/@Name -### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Provided/Prop/@Name +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/group/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • method
| False | builtin | +| [Location](/catalog/group/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/rmf')]/@name |
  • method
| False | builtin | +| [Location](/catalog/group/control/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | +| [Location](/catalog/group/control/part/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| [Location](/catalog/group/control/part/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | +| [Location](/catalog/group/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • method
| False | builtin | +| [Location](/catalog/group/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/rmf')]/@name |
  • method
| False | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/export/provided/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +#### /Catalog/Group/Control/Part/Prop/@Value -### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Provided/Responsible Role/@Role Id +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/group/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace(('http://csrc.nist.gov/ns/oscal','http://csrc.nist.gov/ns/rmf')) and @name='method']/@value |
  • INTERVIEW
  • EXAMINE
  • TEST
| False | builtin | +| [Location](/catalog/group/control/control) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('assessment','assessment-method')]/prop[has-oscal-namespace(('http://csrc.nist.gov/ns/oscal','http://csrc.nist.gov/ns/rmf')) and @name='method']/@value |
  • INTERVIEW
  • EXAMINE
  • TEST
| False | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component) | [Target](.//responsible-role/@role-id) |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | +#### /Catalog/Group/Control/Prop/@Name -### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Provided/Responsible Role/Link/@Rel +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/group/control) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
  • status
| False | builtin | +| [Location](/catalog/group/control/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| [Location](/catalog/group/control/control) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
  • status
| False | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/export/provided/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +#### /Catalog/Group/Control/Prop/@Value -### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Provided/Responsible Role/Prop/@Name +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/group/control) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='status']/@value |
  • withdrawn
  • Withdrawn
| False | builtin | +| [Location](/catalog/group/control/control) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='status']/@value |
  • withdrawn
  • Withdrawn
| False | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/export/provided/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +#### /Catalog/Group/Link/@Rel -### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Responsibility/Link/@Rel +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/group/link/@rel) | . |
  • reference
| True | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/export/responsibility/link/@rel) | . |
  • reference
| True | builtin | +#### /Catalog/Group/Param/Link/@Rel -### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Responsibility/Prop/@Name +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/group/param/link/@rel) | . |
  • reference
| True | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/export/responsibility/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +#### /Catalog/Group/Param/Prop/@Name -### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Responsibility/Responsible Role/@Role Id +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/group/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
  • alt-label
| False | builtin | +| [Location](/catalog/group/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/rmf')]/@name |
  • aggregates
| False | builtin | +| [Location](/catalog/group/param/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component) | [Target](.//responsible-role/@role-id) |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | +#### /Catalog/Group/Param/Select/@How Many -### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Responsibility/Responsible Role/Link/@Rel +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/group/param/select/@how-many) | . |
  • one
  • one-or-more
| False | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/export/responsibility/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +#### /Catalog/Group/Part/@Name -### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Export/Responsibility/Responsible Role/Prop/@Name +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/group) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • overview
  • instruction
| False | builtin | +| [Location](/catalog/group/group) | part[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • overview
  • instruction
| False | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/export/responsibility/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +#### /Catalog/Group/Part/Link/@Rel -### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Implementation Status/@State +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/group/part/link/@rel) | . |
  • reference
| True | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/implementation-status/@state) | . |
  • implemented
  • partial
  • planned
  • alternative
  • not-applicable
| True | builtin | +#### /Catalog/Group/Part/Prop/@Name -### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Inherited/Link/@Rel +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/group/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | +| [Location](/catalog/group/part/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| [Location](/catalog/group/part/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/inherited/link/@rel) | . |
  • reference
| True | builtin | +#### /Catalog/Group/Prop/@Name -### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Inherited/Prop/@Name +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/group) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | +| [Location](/catalog/group/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| [Location](/catalog/group/group) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/inherited/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +#### /Catalog/Metadata/Action/Link/@Rel -### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Inherited/Responsible Role/@Role Id +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/metadata/action/link/@rel) | . |
  • reference
| True | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component) | [Target](.//responsible-role/@role-id) |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | +#### /Catalog/Metadata/Action/Prop/@Name -### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Inherited/Responsible Role/Link/@Rel +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/metadata/action/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/inherited/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +#### /Catalog/Metadata/Action/Responsible Party/Link/@Rel -### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Inherited/Responsible Role/Prop/@Name +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/metadata/action/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/inherited/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +#### /Catalog/Metadata/Action/Responsible Party/Prop/@Name -### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Link/@Rel +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/metadata/action/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component) | link/@rel |
  • imported-from
| True | builtin | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component) | link/@rel |
  • provided-by
| True | builtin | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/link/@rel) | . |
  • reference
| True | builtin | +#### /Catalog/Metadata/Document Id/@Scheme -### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Prop/@Name +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/metadata/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement) | (.|statement|.//by-component)/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • control-origination
| False | builtin | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +#### /Catalog/Metadata/Link/@Rel -### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Prop/@Value +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog) | metadata/link/@rel |
  • source-profile
  • source-profile-uuid
| True | builtin | +| [Location](/catalog/metadata) | link/@rel |
  • canonical
  • alternate
  • latest-version
  • predecessor-version
  • successor-version
| True | builtin | +| [Location](/catalog/metadata/link/@rel) | . |
  • reference
| True | builtin | -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | control-implementation-status | [Location](/system-security-plan) | control-implementation/implemented-requirement/by-component/prop[@name='implementation-status']/@value |
  • implemented
  • partial
  • planned
  • alternative
  • not-applicable
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -| allowed-values | | [Location](/system-security-plan/control-implementation/implemented-requirement) | (.|statement|.//by-component)/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='control-origination']/@value |
  • organization
  • system-specific
  • customer-configured
  • customer-provided
  • inherited
| False | builtin | +#### /Catalog/Metadata/Location/Address/@Type -### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Responsible Role/@Role Id +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/metadata/location/address/@type) | . |
  • home
  • work
| True | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component) | [Target](.//responsible-role/@role-id) |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | +#### /Catalog/Metadata/Location/Link/@Rel -### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Responsible Role/Link/@Rel +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/metadata/location/link/@rel) | . |
  • reference
| True | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +#### /Catalog/Metadata/Location/Prop/@Class -### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Responsible Role/Prop/@Name +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type' and @value='data-center']/@class |
  • primary
  • alternate
| False | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +#### /Catalog/Metadata/Location/Prop/@Name -### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Satisfied/Link/@Rel +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | +| [Location](/catalog/metadata/location/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/satisfied/link/@rel) | . |
  • reference
| True | builtin | +#### /Catalog/Metadata/Location/Prop/@Value -### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Satisfied/Prop/@Name +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • data-center
| False | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/satisfied/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +#### /Catalog/Metadata/Location/Telephone Number/@Type -### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Satisfied/Responsible Role/@Role Id +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/metadata/location/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component) | [Target](.//responsible-role/@role-id) |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | +#### /Catalog/Metadata/Party/@Type + +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/metadata/party/@type) | . |
  • person
  • organization
| False | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Satisfied/Responsible Role/Link/@Rel +#### /Catalog/Metadata/Party/Address/@Type -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/satisfied/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +| address-type | [Location](/catalog) | metadata/party/address/@type |
  • work
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| | [Location](/catalog/metadata/party/address/@type) | . |
  • home
  • work
| True | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/By Component/Satisfied/Responsible Role/Prop/@Name +#### /Catalog/Metadata/Party/External Id/@Scheme -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/by-component/satisfied/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/metadata/party/external-id/@scheme) | . |
  • http://orcid.org/
| True | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Link/@Rel +#### /Catalog/Metadata/Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/metadata/party/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Prop/@Name +#### /Catalog/Metadata/Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement) | (.|statement|.//by-component)/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • control-origination
| False | builtin | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/metadata/party) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • mail-stop
  • office
  • job-title
| False | builtin | +| [Location](/catalog/metadata/party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Prop/@Value +#### /Catalog/Metadata/Party/Telephone Number/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement) | (.|statement|.//by-component)/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='control-origination']/@value |
  • organization
  • system-specific
  • customer-configured
  • customer-provided
  • inherited
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/metadata/party/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Responsible Role/@Role Id +#### /Catalog/Metadata/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement) | responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog) | metadata/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • resolution-tool
  • source-profile-uuid
| False | builtin | +| [Location](/catalog/metadata) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • keywords
| False | builtin | +| [Location](/catalog/metadata/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Responsible Role/Link/@Rel +#### /Catalog/Metadata/Responsible Party/@Role Id -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +| allowed-metadata-responsibe-party-role-ids | [Location](/catalog/metadata) | responsible-party/@role-id |
  • creator
  • prepared-by
  • prepared-for
  • content-approver
  • contact
| True | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Responsible Role/Prop/@Name +#### /Catalog/Metadata/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/metadata/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Link/@Rel +#### /Catalog/Metadata/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/export/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/metadata/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Prop/@Name +#### /Catalog/Metadata/Revision/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/export/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/metadata/revision) | link/@rel |
  • canonical
  • alternate
  • predecessor-version
  • successor-version
  • version-history
| True | builtin | +| [Location](/catalog/metadata/revision/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Provided/Link/@Rel +#### /Catalog/Metadata/Revision/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/export/provided/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/metadata/revision/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Provided/Prop/@Name +#### /Catalog/Metadata/Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/export/provided/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/metadata/role/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Provided/Responsible Role/@Role Id +#### /Catalog/Metadata/Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component) | [Target](.//responsible-role/@role-id) |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/metadata/role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Provided/Responsible Role/Link/@Rel +#### /Catalog/Param/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/export/provided/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/param/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Provided/Responsible Role/Prop/@Name +#### /Catalog/Param/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/export/provided/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
  • alt-label
| False | builtin | +| [Location](/catalog/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/rmf')]/@name |
  • aggregates
| False | builtin | +| [Location](/catalog/param/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Responsibility/Link/@Rel +#### /Catalog/Param/Select/@How Many -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/export/responsibility/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/catalog/param/select/@how-many) | . |
  • one
  • one-or-more
| False | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Responsibility/Prop/@Name +--- -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/export/responsibility/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +#### /Component Definition/Back Matter/Resource/Citation/Link/@Rel -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Responsibility/Responsible Role/@Role Id +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/back-matter/resource/citation/link/@rel) | . |
  • reference
| True | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component) | [Target](.//responsible-role/@role-id) |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | +#### /Component Definition/Back Matter/Resource/Citation/Prop/@Name -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Responsibility/Responsible Role/Link/@Rel +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/back-matter/resource/citation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/export/responsibility/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +#### /Component Definition/Back Matter/Resource/Document Id/@Scheme -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Export/Responsibility/Responsible Role/Prop/@Name +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/back-matter/resource/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/export/responsibility/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +#### /Component Definition/Back Matter/Resource/Prop/@Name + +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
  • version
  • published
| False | builtin | +| [Location](/component-definition/back-matter/resource/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Implementation Status/@State +#### /Component Definition/Back Matter/Resource/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/implementation-status/@state) | . |
  • implemented
  • partial
  • planned
  • alternative
  • not-applicable
| True | builtin | +| attachment-type | [Location](/component-definition) | back-matter/resource/prop[@name='type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • law
  • regulation
  • standard
  • guidance
  • policy
  • procedure
  • guide
  • rules-of-behavior
  • plan
  • system-security-plan
  • artifact
  • evidence
  • screen-shot
  • image
  • tool-report
  • raw-tool-output
  • interview-notes
  • questionnaire
  • report
  • fedramp-citations
  • fedramp-acronyms
  • fedramp-logo
  • separation-of-duties-matrix
  • logo
  • personally-identifiable-information
  • agreement
  • isa-agreement
  • incident-response-plan
  • information-security-policies-and-procedures
  • users-guide
  • privacy-impact-assessment
  • information-system-contingency-plan
  • configuration-management-plan
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| | [Location](/component-definition/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • logo
  • image
  • screen-shot
  • law
  • regulation
  • standard
  • external-guidance
  • acronyms
  • citation
  • policy
  • procedure
  • system-guide
  • users-guide
  • administrators-guide
  • rules-of-behavior
  • plan
  • artifact
  • evidence
  • tool-output
  • raw-data
  • interview-notes
  • questionnaire
  • report
  • agreement
| False | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Inherited/Link/@Rel +#### /Component Definition/Back Matter/Resource/Rlink/Hash/@Algorithm -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/inherited/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/back-matter/resource/rlink/hash/@algorithm) | . |
  • SHA-224
  • SHA-256
  • SHA-384
  • SHA-512
  • SHA3-224
  • SHA3-256
  • SHA3-384
  • SHA3-512
| True | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Inherited/Prop/@Name +#### /Component Definition/Capability/Control Implementation/Implemented Requirement/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/inherited/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/capability/control-implementation/implemented-requirement/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Inherited/Responsible Role/@Role Id +#### /Component Definition/Capability/Control Implementation/Implemented Requirement/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component) | [Target](.//responsible-role/@role-id) |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/capability/control-implementation/implemented-requirement/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Inherited/Responsible Role/Link/@Rel +#### /Component Definition/Capability/Control Implementation/Implemented Requirement/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/inherited/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/capability/control-implementation/implemented-requirement/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Inherited/Responsible Role/Prop/@Name +#### /Component Definition/Capability/Control Implementation/Implemented Requirement/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/inherited/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/capability/control-implementation/implemented-requirement/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Link/@Rel +#### /Component Definition/Capability/Control Implementation/Implemented Requirement/Statement/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component) | link/@rel |
  • imported-from
| True | builtin | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component) | link/@rel |
  • provided-by
| True | builtin | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/capability/control-implementation/implemented-requirement/statement/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Prop/@Name +#### /Component Definition/Capability/Control Implementation/Implemented Requirement/Statement/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement) | (.|statement|.//by-component)/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • control-origination
| False | builtin | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/capability/control-implementation/implemented-requirement/statement/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Prop/@Value +#### /Component Definition/Capability/Control Implementation/Implemented Requirement/Statement/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement) | (.|statement|.//by-component)/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='control-origination']/@value |
  • organization
  • system-specific
  • customer-configured
  • customer-provided
  • inherited
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/capability/control-implementation/implemented-requirement/statement/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Responsible Role/@Role Id +#### /Component Definition/Capability/Control Implementation/Implemented Requirement/Statement/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component) | [Target](.//responsible-role/@role-id) |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/capability/control-implementation/implemented-requirement/statement/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Responsible Role/Link/@Rel +#### /Component Definition/Capability/Control Implementation/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/capability/control-implementation/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Responsible Role/Prop/@Name +#### /Component Definition/Capability/Control Implementation/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/capability/control-implementation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Satisfied/Link/@Rel +#### /Component Definition/Capability/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/satisfied/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/capability/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Satisfied/Prop/@Name +#### /Component Definition/Capability/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/satisfied/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/capability/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Satisfied/Responsible Role/@Role Id +#### /Component Definition/Component/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component) | [Target](.//responsible-role/@role-id) |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/component/@type) | . |
  • interconnection
  • software
  • hardware
  • service
  • policy
  • physical
  • process-procedure
  • plan
  • guidance
  • standard
  • validation
| True | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Satisfied/Responsible Role/Link/@Rel +#### /Component Definition/Component/Control Implementation/Implemented Requirement/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/satisfied/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/component/control-implementation/implemented-requirement/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/By Component/Satisfied/Responsible Role/Prop/@Name +#### /Component Definition/Component/Control Implementation/Implemented Requirement/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/by-component/satisfied/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/component/control-implementation/implemented-requirement/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/Link/@Rel +#### /Component Definition/Component/Control Implementation/Implemented Requirement/Responsible Role/@Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/component) | responsible-role/@role-id|control-implementation/implemented-requirement/responsible-role/@role-id|control-implementation/implemented-requirement/statement/responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/Prop/@Name +#### /Component Definition/Component/Control Implementation/Implemented Requirement/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement) | (.|statement|.//by-component)/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • control-origination
| False | builtin | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/component/control-implementation/implemented-requirement/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/Prop/@Value +#### /Component Definition/Component/Control Implementation/Implemented Requirement/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement) | (.|statement|.//by-component)/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='control-origination']/@value |
  • organization
  • system-specific
  • customer-configured
  • customer-provided
  • inherited
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/component/control-implementation/implemented-requirement/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/Responsible Role/@Role Id +#### /Component Definition/Component/Control Implementation/Implemented Requirement/Statement/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement) | responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/component/control-implementation/implemented-requirement/statement/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/Responsible Role/Link/@Rel +#### /Component Definition/Component/Control Implementation/Implemented Requirement/Statement/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/component/control-implementation/implemented-requirement/statement/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/Control Implementation/Implemented Requirement/Statement/Responsible Role/Prop/@Name +#### /Component Definition/Component/Control Implementation/Implemented Requirement/Statement/Responsible Role/@Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/control-implementation/implemented-requirement/statement/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/component) | responsible-role/@role-id|control-implementation/implemented-requirement/responsible-role/@role-id|control-implementation/implemented-requirement/statement/responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | -### /System Security Plan/Metadata/Action/Link/@Rel +#### /Component Definition/Component/Control Implementation/Implemented Requirement/Statement/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/metadata/action/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/component/control-implementation/implemented-requirement/statement/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/Metadata/Action/Prop/@Name +#### /Component Definition/Component/Control Implementation/Implemented Requirement/Statement/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/metadata/action/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/component/control-implementation/implemented-requirement/statement/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/Metadata/Action/Responsible Party/Link/@Rel +#### /Component Definition/Component/Control Implementation/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/metadata/action/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/component/control-implementation/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/Metadata/Action/Responsible Party/Prop/@Name +#### /Component Definition/Component/Control Implementation/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/metadata/action/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/component/control-implementation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/Metadata/Document Id/@Scheme +#### /Component Definition/Component/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/metadata/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/component) | link/@rel |
  • depends-on
  • validation
  • proof-of-compliance
  • baseline-template
  • uses-service
  • system-security-plan
  • uses-network
| True | builtin | +| [Location](/component-definition/component) | (.)[@type='service']/link/@rel |
  • provided-by
  • used-by
| True | builtin | +| [Location](/component-definition/component/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/Metadata/Link/@Rel +#### /Component Definition/Component/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/metadata) | link/@rel |
  • canonical
  • alternate
  • latest-version
  • predecessor-version
  • successor-version
| True | builtin | -| allowed-values | [Location](/system-security-plan/metadata/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
| False | builtin | +| [Location](/component-definition/component) | (.)[@type='software']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • software-identifier
| False | builtin | +| [Location](/component-definition/component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/Metadata/Location/Address/@Type +#### /Component Definition/Component/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/metadata/location/address/@type) | . |
  • home
  • work
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | +| [Location](/component-definition/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='allows-authenticated-scan']/@value |
  • yes
  • no
| False | builtin | +| [Location](/component-definition/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='virtual']/@value |
  • yes
  • no
| False | builtin | +| [Location](/component-definition/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='public']/@value |
  • yes
  • no
| False | builtin | +| [Location](/component-definition/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='implementation-point']/@value |
  • internal
  • external
| False | builtin | -### /System Security Plan/Metadata/Location/Link/@Rel +#### /Component Definition/Component/Protocol/Port Range/@Transport -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/metadata/location/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/component/protocol/port-range/@transport) | . |
  • TCP
  • UDP
| False | builtin | -### /System Security Plan/Metadata/Location/Prop/@Class +#### /Component Definition/Component/Responsible Role/@Role Id -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type' and @value='data-center']/@class |
  • primary
  • alternate
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/component) | responsible-role/@role-id|control-implementation/implemented-requirement/responsible-role/@role-id|control-implementation/implemented-requirement/statement/responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | -### /System Security Plan/Metadata/Location/Prop/@Name +#### /Component Definition/Component/Responsible Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | -| allowed-values | [Location](/system-security-plan/metadata/location/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/component/responsible-role/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/Metadata/Location/Prop/@Value +#### /Component Definition/Component/Responsible Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • data-center
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/component/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/Metadata/Location/Telephone Number/@Type +#### /Component Definition/Metadata/Action/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/metadata/location/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/metadata/action/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/Metadata/Party/@Type +#### /Component Definition/Metadata/Action/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/metadata/party/@type) | . |
  • person
  • organization
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/metadata/action/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/Metadata/Party/Address/@Type +#### /Component Definition/Metadata/Action/Responsible Party/Link/@Rel -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | address-type | [Location](/system-security-plan) | metadata/party/address/@type |
  • work
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -| allowed-values | | [Location](/system-security-plan/metadata/party/address/@type) | . |
  • home
  • work
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/metadata/action/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/Metadata/Party/External Id/@Scheme +#### /Component Definition/Metadata/Action/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/metadata/party/external-id/@scheme) | . |
  • http://orcid.org/
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/metadata/action/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/Metadata/Party/Link/@Rel +#### /Component Definition/Metadata/Document Id/@Scheme -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/metadata/party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/metadata/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | -### /System Security Plan/Metadata/Party/Prop/@Name +#### /Component Definition/Metadata/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/metadata/party) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • mail-stop
  • office
  • job-title
| False | builtin | -| allowed-values | [Location](/system-security-plan/metadata/party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/metadata) | link/@rel |
  • canonical
  • alternate
  • latest-version
  • predecessor-version
  • successor-version
| True | builtin | +| [Location](/component-definition/metadata/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/Metadata/Party/Telephone Number/@Type +#### /Component Definition/Metadata/Location/Address/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/metadata/party/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/metadata/location/address/@type) | . |
  • home
  • work
| True | builtin | -### /System Security Plan/Metadata/Prop/@Name +#### /Component Definition/Metadata/Location/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/metadata) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • keywords
| False | builtin | -| allowed-values | [Location](/system-security-plan/metadata/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/metadata/location/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/Metadata/Responsible Party/@Role Id +#### /Component Definition/Metadata/Location/Prop/@Class -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | allowed-metadata-responsibe-party-role-ids | [Location](/system-security-plan/metadata) | responsible-party/@role-id |
  • creator
  • prepared-by
  • prepared-for
  • content-approver
  • contact
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type' and @value='data-center']/@class |
  • primary
  • alternate
| False | builtin | -### /System Security Plan/Metadata/Responsible Party/Link/@Rel +#### /Component Definition/Metadata/Location/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/metadata/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | +| [Location](/component-definition/metadata/location/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/Metadata/Responsible Party/Prop/@Name +#### /Component Definition/Metadata/Location/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/metadata/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • data-center
| False | builtin | -### /System Security Plan/Metadata/Revision/Link/@Rel +#### /Component Definition/Metadata/Location/Telephone Number/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/metadata/revision) | link/@rel |
  • canonical
  • alternate
  • predecessor-version
  • successor-version
  • version-history
| True | builtin | -| allowed-values | [Location](/system-security-plan/metadata/revision/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/metadata/location/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | -### /System Security Plan/Metadata/Revision/Prop/@Name +#### /Component Definition/Metadata/Party/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/metadata/revision/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/metadata/party/@type) | . |
  • person
  • organization
| False | builtin | -### /System Security Plan/Metadata/Role/Link/@Rel +#### /Component Definition/Metadata/Party/Address/@Type -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/metadata/role/link/@rel) | . |
  • reference
| True | builtin | +| address-type | [Location](/component-definition) | metadata/party/address/@type |
  • work
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| | [Location](/component-definition/metadata/party/address/@type) | . |
  • home
  • work
| True | builtin | -### /System Security Plan/Metadata/Role/Prop/@Name +#### /Component Definition/Metadata/Party/External Id/@Scheme -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/metadata/role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/metadata/party/external-id/@scheme) | . |
  • http://orcid.org/
| True | builtin | -### /System Security Plan/System Characteristics/Authorization Boundary/Diagram/Link/@Rel +#### /Component Definition/Metadata/Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/authorization-boundary/diagram) | link/@rel |
  • diagram
| True | builtin | -| allowed-values | [Location](/system-security-plan/system-characteristics/authorization-boundary/diagram/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/metadata/party/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/System Characteristics/Authorization Boundary/Diagram/Prop/@Name +#### /Component Definition/Metadata/Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/authorization-boundary/diagram/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/metadata/party) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • mail-stop
  • office
  • job-title
| False | builtin | +| [Location](/component-definition/metadata/party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/System Characteristics/Authorization Boundary/Link/@Rel +#### /Component Definition/Metadata/Party/Telephone Number/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/authorization-boundary/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/metadata/party/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | -### /System Security Plan/System Characteristics/Authorization Boundary/Prop/@Name +#### /Component Definition/Metadata/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/authorization-boundary/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/metadata) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • keywords
| False | builtin | +| [Location](/component-definition/metadata/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/System Characteristics/Data Flow/Diagram/Link/@Rel +#### /Component Definition/Metadata/Responsible Party/@Role Id -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/data-flow/diagram) | link/@rel |
  • diagram
| True | builtin | -| allowed-values | [Location](/system-security-plan/system-characteristics/data-flow/diagram/link/@rel) | . |
  • reference
| True | builtin | +| allowed-metadata-responsibe-party-role-ids | [Location](/component-definition/metadata) | responsible-party/@role-id |
  • creator
  • prepared-by
  • prepared-for
  • content-approver
  • contact
| True | builtin | -### /System Security Plan/System Characteristics/Data Flow/Diagram/Prop/@Name +#### /Component Definition/Metadata/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/data-flow/diagram/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/metadata/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/System Characteristics/Data Flow/Link/@Rel +#### /Component Definition/Metadata/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/data-flow/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/metadata/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/System Characteristics/Data Flow/Prop/@Name +#### /Component Definition/Metadata/Revision/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/data-flow/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/metadata/revision) | link/@rel |
  • canonical
  • alternate
  • predecessor-version
  • successor-version
  • version-history
| True | builtin | +| [Location](/component-definition/metadata/revision/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/System Characteristics/Link/@Rel +#### /Component Definition/Metadata/Revision/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/metadata/revision/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/System Characteristics/Network Architecture/Diagram/Link/@Rel +#### /Component Definition/Metadata/Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/network-architecture/diagram) | link/@rel |
  • diagram
| True | builtin | -| allowed-values | [Location](/system-security-plan/system-characteristics/network-architecture/diagram/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/metadata/role/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/System Characteristics/Network Architecture/Diagram/Prop/@Name +#### /Component Definition/Metadata/Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/network-architecture/diagram/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/component-definition/metadata/role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | + +--- -### /System Security Plan/System Characteristics/Network Architecture/Link/@Rel +#### /Profile/Back Matter/Resource/Citation/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/network-architecture/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/back-matter/resource/citation/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/System Characteristics/Network Architecture/Prop/@Name +#### /Profile/Back Matter/Resource/Citation/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/network-architecture/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/back-matter/resource/citation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/System Characteristics/Prop/@Name +#### /Profile/Back Matter/Resource/Document Id/@Scheme -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • identity-assurance-level
  • authenticator-assurance-level
  • federation-assurance-level
| False | builtin | -| allowed-values | [Location](/system-security-plan/system-characteristics) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • cloud-deployment-model
  • cloud-service-model
| False | builtin | -| allowed-values | [Location](/system-security-plan/system-characteristics/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/back-matter/resource/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | -### /System Security Plan/System Characteristics/Prop/@Value +#### /Profile/Back Matter/Resource/Prop/@Name -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | authorization-type | [Location](/system-security-plan) | system-characteristics/prop[@name='authorization-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • fedramp-jab
  • fedramp-agency
  • fedramp-li-saas
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -| allowed-values | deployment-model | [Location](/system-security-plan) | system-characteristics/prop[@name='cloud-deployment-model'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • public-cloud
  • private-cloud
  • government-only-cloud
  • hybrid-cloud
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -| allowed-values | authorization-type | [Location](/system-security-plan) | system-characteristics/prop[@name='authorization-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • fedramp-jab
  • fedramp-agency
  • fedramp-li-saas
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -| allowed-values | cloud-service-model | [Location](/system-security-plan) | system-characteristics/prop[@name='cloud-service-model'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • iaas
  • paas
  • saas
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -| allowed-values | | [Location](/system-security-plan/system-characteristics) | prop[@name=('identity-assurance-level','authenticator-assurance-level','federation-assurance-level')]/@value |
  • 1
  • 2
  • 3
| False | builtin | -| allowed-values | | [Location](/system-security-plan/system-characteristics) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='cloud-deployment-model']/@value |
  • public-cloud
  • private-cloud
  • community-cloud
  • hybrid-cloud
  • government-only-cloud
  • other
| False | builtin | -| allowed-values | | [Location](/system-security-plan/system-characteristics) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='cloud-service-model']/@value |
  • saas
  • paas
  • iaas
  • other
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
  • version
  • published
| False | builtin | +| [Location](/profile/back-matter/resource/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/System Characteristics/Responsible Party/@Role Id +#### /Profile/Back Matter/Resource/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics) | responsible-party/@role-id |
  • authorizing-official
  • authorizing-official-poc
  • system-owner
  • system-poc-management
  • system-poc-technical
  • system-poc-other
  • information-system-security-officer
  • privacy-poc
| True | builtin | +| attachment-type | [Location](/profile) | back-matter/resource/prop[@name='type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • law
  • regulation
  • standard
  • guidance
  • policy
  • procedure
  • guide
  • rules-of-behavior
  • plan
  • system-security-plan
  • artifact
  • evidence
  • screen-shot
  • image
  • tool-report
  • raw-tool-output
  • interview-notes
  • questionnaire
  • report
  • fedramp-citations
  • fedramp-acronyms
  • fedramp-logo
  • separation-of-duties-matrix
  • logo
  • personally-identifiable-information
  • agreement
  • isa-agreement
  • incident-response-plan
  • information-security-policies-and-procedures
  • users-guide
  • privacy-impact-assessment
  • information-system-contingency-plan
  • configuration-management-plan
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| | [Location](/profile/back-matter/resource) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • logo
  • image
  • screen-shot
  • law
  • regulation
  • standard
  • external-guidance
  • acronyms
  • citation
  • policy
  • procedure
  • system-guide
  • users-guide
  • administrators-guide
  • rules-of-behavior
  • plan
  • artifact
  • evidence
  • tool-output
  • raw-data
  • interview-notes
  • questionnaire
  • report
  • agreement
| False | builtin | -### /System Security Plan/System Characteristics/Responsible Party/Link/@Rel +#### /Profile/Back Matter/Resource/Rlink/Hash/@Algorithm -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/back-matter/resource/rlink/hash/@algorithm) | . |
  • SHA-224
  • SHA-256
  • SHA-384
  • SHA-512
  • SHA3-224
  • SHA3-256
  • SHA3-384
  • SHA3-512
| True | builtin | -### /System Security Plan/System Characteristics/Responsible Party/Prop/@Name +#### /Profile/Import/Exclude Controls/@With Child Controls -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/import/exclude-controls/@with-child-controls) | . |
  • yes
  • no
| False | builtin | -### /System Security Plan/System Characteristics/Status/@State +#### /Profile/Import/Include Controls/@With Child Controls -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/status/@state) | . |
  • operational
  • under-development
  • under-major-modification
  • disposition
  • other
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/import/include-controls/@with-child-controls) | . |
  • yes
  • no
| False | builtin | -### /System Security Plan/System Characteristics/System Id/@Identifier Type +#### /Profile/Merge/Combine/@Method -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/system-id/@identifier-type) | . |
  • https://fedramp.gov
  • http://fedramp.gov/ns/oscal
  • https://ietf.org/rfc/rfc4122
  • http://ietf.org/rfc/rfc4122
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/merge/combine/@method) | . |
  • use-first
  • merge
  • keep
| False | builtin | -### /System Security Plan/System Characteristics/System Information/Information Type/Availability Impact/Base +#### /Profile/Merge/Custom/Group/Insert Controls/@Order -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/system-information) | information-type/(confidentiality-impact|integrity-impact|availability-impact)/(base|selected) |
  • fips-199-low
  • fips-199-moderate
  • fips-199-high
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/merge/custom/group/insert-controls/@order) | . |
  • keep
  • ascending
  • descending
| False | builtin | -### /System Security Plan/System Characteristics/System Information/Information Type/Availability Impact/Link/@Rel +#### /Profile/Merge/Custom/Group/Insert Controls/Exclude Controls/@With Child Controls -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/system-information/information-type/availability-impact/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/merge/custom/group/insert-controls/exclude-controls/@with-child-controls) | . |
  • yes
  • no
| False | builtin | -### /System Security Plan/System Characteristics/System Information/Information Type/Availability Impact/Prop/@Name +#### /Profile/Merge/Custom/Group/Insert Controls/Include Controls/@With Child Controls -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/system-information/information-type/availability-impact/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/merge/custom/group/insert-controls/include-controls/@with-child-controls) | . |
  • yes
  • no
| False | builtin | -### /System Security Plan/System Characteristics/System Information/Information Type/Availability Impact/Selected +#### /Profile/Merge/Custom/Group/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/system-information) | information-type/(confidentiality-impact|integrity-impact|availability-impact)/(base|selected) |
  • fips-199-low
  • fips-199-moderate
  • fips-199-high
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/merge/custom/group/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/System Characteristics/System Information/Information Type/Categorization/@System +#### /Profile/Merge/Custom/Group/Param/Link/@Rel -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | information-type-system | [Location](/system-security-plan) | system-characteristics/system-information/information-type/categorization/@system |
  • https://doi.org/10.6028/NIST.SP.800-60v2r1
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -| allowed-values | | [Location](/system-security-plan/system-characteristics/system-information/information-type/categorization/@system) | . |
  • http://doi.org/10.6028/NIST.SP.800-60v2r1
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/merge/custom/group/param/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/System Characteristics/System Information/Information Type/Confidentiality Impact/Base +#### /Profile/Merge/Custom/Group/Param/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/system-information) | information-type/(confidentiality-impact|integrity-impact|availability-impact)/(base|selected) |
  • fips-199-low
  • fips-199-moderate
  • fips-199-high
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/merge/custom/group/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
  • alt-label
| False | builtin | +| [Location](/profile/merge/custom/group/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/rmf')]/@name |
  • aggregates
| False | builtin | +| [Location](/profile/merge/custom/group/param/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/System Characteristics/System Information/Information Type/Confidentiality Impact/Link/@Rel +#### /Profile/Merge/Custom/Group/Param/Select/@How Many -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/system-information/information-type/confidentiality-impact/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/merge/custom/group/param/select/@how-many) | . |
  • one
  • one-or-more
| False | builtin | -### /System Security Plan/System Characteristics/System Information/Information Type/Confidentiality Impact/Prop/@Name +#### /Profile/Merge/Custom/Group/Part/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/system-information/information-type/confidentiality-impact/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/merge/custom/group/part/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/System Characteristics/System Information/Information Type/Confidentiality Impact/Selected +#### /Profile/Merge/Custom/Group/Part/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/system-information) | information-type/(confidentiality-impact|integrity-impact|availability-impact)/(base|selected) |
  • fips-199-low
  • fips-199-moderate
  • fips-199-high
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/merge/custom/group/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | +| [Location](/profile/merge/custom/group/part/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| [Location](/profile/merge/custom/group/part/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | -### /System Security Plan/System Characteristics/System Information/Information Type/Integrity Impact/Base +#### /Profile/Merge/Custom/Group/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/system-information) | information-type/(confidentiality-impact|integrity-impact|availability-impact)/(base|selected) |
  • fips-199-low
  • fips-199-moderate
  • fips-199-high
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/merge/custom/group/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/System Characteristics/System Information/Information Type/Integrity Impact/Link/@Rel +#### /Profile/Merge/Custom/Insert Controls/@Order -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/system-information/information-type/integrity-impact/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/merge/custom/insert-controls/@order) | . |
  • keep
  • ascending
  • descending
| False | builtin | -### /System Security Plan/System Characteristics/System Information/Information Type/Integrity Impact/Prop/@Name +#### /Profile/Merge/Custom/Insert Controls/Exclude Controls/@With Child Controls -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/system-information/information-type/integrity-impact/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/merge/custom/insert-controls/exclude-controls/@with-child-controls) | . |
  • yes
  • no
| False | builtin | -### /System Security Plan/System Characteristics/System Information/Information Type/Integrity Impact/Selected +#### /Profile/Merge/Custom/Insert Controls/Include Controls/@With Child Controls -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/system-information) | information-type/(confidentiality-impact|integrity-impact|availability-impact)/(base|selected) |
  • fips-199-low
  • fips-199-moderate
  • fips-199-high
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/merge/custom/insert-controls/include-controls/@with-child-controls) | . |
  • yes
  • no
| False | builtin | -### /System Security Plan/System Characteristics/System Information/Information Type/Link/@Rel +#### /Profile/Metadata/Action/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/system-information/information-type/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/metadata/action/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/System Characteristics/System Information/Information Type/Prop/@Name +#### /Profile/Metadata/Action/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/system-information/information-type/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/metadata/action/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/System Characteristics/System Information/Link/@Rel +#### /Profile/Metadata/Action/Responsible Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/system-information) | link/@rel |
  • privacy-impact-assessment
| True | builtin | -| allowed-values | [Location](/system-security-plan/system-characteristics/system-information/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/metadata/action/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/System Characteristics/System Information/Prop/@Name +#### /Profile/Metadata/Action/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/system-information) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • privacy-designation
| False | builtin | -| allowed-values | [Location](/system-security-plan/system-characteristics/system-information/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/metadata/action/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/System Characteristics/System Information/Prop/@Value +#### /Profile/Metadata/Document Id/@Scheme -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-characteristics/system-information) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='privacy-designation']/@value |
  • yes
  • no
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/metadata/document-id/@scheme) | . |
  • http://www.doi.org/
| True | builtin | -### /System Security Plan/System Implementation/Component/@Type +#### /Profile/Metadata/Link/@Rel -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | component-type | [Location](/system-security-plan) | system-implementation/component/@type |
  • interconnection
  • software
  • hardware
  • service
  • policy
  • physical
  • process-procedure
  • plan
  • guidance
  • standard
  • validation
  • this-system
  • system
  • network
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -| allowed-values | | [Location](/system-security-plan/system-implementation/component/@type) | . |
  • this-system
  • system
  • interconnection
  • software
  • hardware
  • service
  • policy
  • physical
  • process-procedure
  • plan
  • guidance
  • standard
  • validation
  • network
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/metadata) | link/@rel |
  • canonical
  • alternate
  • latest-version
  • predecessor-version
  • successor-version
| True | builtin | +| [Location](/profile/metadata/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/System Implementation/Component/Link/@Rel +#### /Profile/Metadata/Location/Address/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-implementation/component) | link/@rel |
  • depends-on
  • validation
  • proof-of-compliance
  • baseline-template
  • uses-service
  • system-security-plan
  • uses-network
  • imported-from
| True | builtin | -| allowed-values | [Location](/system-security-plan/system-implementation/component) | (.)[@type='validation']/link/@rel |
  • validation-details
| True | builtin | -| allowed-values | [Location](/system-security-plan/system-implementation/component) | (.)[@type='service']/link/@rel |
  • provided-by
  • used-by
| True | builtin | -| allowed-values | [Location](/system-security-plan/system-implementation/component) | (.)[@type='interconnection']/link/@rel |
  • isa-agreement
| True | builtin | -| allowed-values | [Location](/system-security-plan/system-implementation/component/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/metadata/location/address/@type) | . |
  • home
  • work
| True | builtin | -### /System Security Plan/System Implementation/Component/Prop/@Class +#### /Profile/Metadata/Location/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-implementation/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name=('ipv4-address','ipv6-address')]/@class |
  • local
  • remote
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/metadata/location/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/System Implementation/Component/Prop/@Name +#### /Profile/Metadata/Location/Prop/@Class -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-implementation/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • implementation-point
  • leveraged-authorization-uuid
  • inherited-uuid
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
| False | builtin | -| allowed-values | [Location](/system-security-plan/system-implementation/component) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | -| allowed-values | [Location](/system-security-plan/system-implementation/component) | (.)[@type='software']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • software-identifier
| False | builtin | -| allowed-values | [Location](/system-security-plan/system-implementation/component) | (.)[@type='interconnection']/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • isa-title
  • isa-date
  • isa-remote-system-name
  • ipv4-address
  • ipv6-address
  • direction
| False | builtin | -| allowed-values | [Location](/system-security-plan/system-implementation/component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | - -### /System Security Plan/System Implementation/Component/Prop/@Value - -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | interconnection-direction | [Location](/system-security-plan) | system-implementation/component[@type='interconnection']/prop[@name='interconnection-direction'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • in
  • out
  • in/out
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -| allowed-values | interconnection-security | [Location](/system-security-plan) | system-implementation/component[@type='interconnection']/prop[@name='interconnection-security'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • ipsec
  • vpn
  • tls
  • dtls
  • certificate
  • secure-file-transfer
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -| allowed-values | scan-type | [Location](/system-security-plan) | system-implementation//prop[@name='scan-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • infrastructure
  • database
  • web
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -| allowed-values | | [Location](/system-security-plan/system-implementation) | (component | inventory-item)/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='allows-authenticated-scan']/@value |
  • yes
  • no
| False | builtin | -| allowed-values | | [Location](/system-security-plan/system-implementation/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | -| allowed-values | | [Location](/system-security-plan/system-implementation/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='allows-authenticated-scan']/@value |
  • yes
  • no
| False | builtin | -| allowed-values | | [Location](/system-security-plan/system-implementation/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='public']/@value |
  • yes
  • no
| False | builtin | -| allowed-values | | [Location](/system-security-plan/system-implementation/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='virtual']/@value |
  • yes
  • no
| False | builtin | -| allowed-values | | [Location](/system-security-plan/system-implementation/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='implementation-point']/@value |
  • internal
  • external
| False | builtin | -| allowed-values | | [Location](/system-security-plan/system-implementation/component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='direction']/@value |
  • incoming
  • outgoing
| False | builtin | - -### /System Security Plan/System Implementation/Component/Protocol/Port Range/@Transport - -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-implementation/component/protocol/port-range/@transport) | . |
  • TCP
  • UDP
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type' and @value='data-center']/@class |
  • primary
  • alternate
| False | builtin | -### /System Security Plan/System Implementation/Component/Responsible Role/@Role Id +#### /Profile/Metadata/Location/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-implementation/component) | responsible-role/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | -| allowed-values | [Location](/system-security-plan/system-implementation/component) | (.)[@type='interconnection']/responsible-role/@role-id |
  • isa-poc-local
  • isa-poc-remote
  • isa-authorizing-official-local
  • isa-authorizing-official-remote
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
| False | builtin | +| [Location](/profile/metadata/location/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/System Implementation/Component/Responsible Role/Link/@Rel +#### /Profile/Metadata/Location/Prop/@Value -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-implementation/component/responsible-role/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/metadata/location) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • data-center
| False | builtin | -### /System Security Plan/System Implementation/Component/Responsible Role/Prop/@Name +#### /Profile/Metadata/Location/Telephone Number/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-implementation/component/responsible-role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/metadata/location/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | -### /System Security Plan/System Implementation/Component/Responsible Role/Prop/@Value +#### /Profile/Metadata/Party/@Type -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | scan-type | [Location](/system-security-plan) | system-implementation//prop[@name='scan-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • infrastructure
  • database
  • web
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/metadata/party/@type) | . |
  • person
  • organization
| False | builtin | -### /System Security Plan/System Implementation/Component/Status/@State +#### /Profile/Metadata/Party/Address/@Type -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-implementation/component/status/@state) | . |
  • under-development
  • operational
  • disposition
  • other
| False | builtin | +| address-type | [Location](/profile) | metadata/party/address/@type |
  • work
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| | [Location](/profile/metadata/party/address/@type) | . |
  • home
  • work
| True | builtin | -### /System Security Plan/System Implementation/Inventory Item/Implemented Component/Link/@Rel +#### /Profile/Metadata/Party/External Id/@Scheme -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-implementation/inventory-item/implemented-component/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/metadata/party/external-id/@scheme) | . |
  • http://orcid.org/
| True | builtin | -### /System Security Plan/System Implementation/Inventory Item/Implemented Component/Prop/@Name +#### /Profile/Metadata/Party/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-implementation/inventory-item/implemented-component) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • version
  • patch-level
  • model
  • release-date
  • validation-type
  • validation-reference
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
| False | builtin | -| allowed-values | [Location](/system-security-plan/system-implementation/inventory-item/implemented-component/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/metadata/party/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/System Implementation/Inventory Item/Implemented Component/Prop/@Value +#### /Profile/Metadata/Party/Prop/@Name -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | scan-type | [Location](/system-security-plan) | system-implementation//prop[@name='scan-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • infrastructure
  • database
  • web
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/metadata/party) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • mail-stop
  • office
  • job-title
| False | builtin | +| [Location](/profile/metadata/party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/System Implementation/Inventory Item/Implemented Component/Responsible Party/@Role Id +#### /Profile/Metadata/Party/Telephone Number/@Type -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-implementation/inventory-item/implemented-component) | responsible-party/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/metadata/party/telephone-number/@type) | . |
  • home
  • office
  • mobile
| True | builtin | -### /System Security Plan/System Implementation/Inventory Item/Implemented Component/Responsible Party/Link/@Rel +#### /Profile/Metadata/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-implementation/inventory-item/implemented-component/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/metadata) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • keywords
| False | builtin | +| [Location](/profile/metadata/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/System Implementation/Inventory Item/Implemented Component/Responsible Party/Prop/@Name +#### /Profile/Metadata/Responsible Party/@Role Id -| Type | Location | Target | Values | Allow Other | Source | +| Identifier | Location | Target | Values | Allow Other | Source | | --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-implementation/inventory-item/implemented-component/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| allowed-metadata-responsibe-party-role-ids | [Location](/profile/metadata) | responsible-party/@role-id |
  • creator
  • prepared-by
  • prepared-for
  • content-approver
  • contact
| True | builtin | -### /System Security Plan/System Implementation/Inventory Item/Implemented Component/Responsible Party/Prop/@Value +#### /Profile/Metadata/Responsible Party/Link/@Rel -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | scan-type | [Location](/system-security-plan) | system-implementation//prop[@name='scan-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • infrastructure
  • database
  • web
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/metadata/responsible-party/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/System Implementation/Inventory Item/Link/@Rel +#### /Profile/Metadata/Responsible Party/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-implementation/inventory-item) | link/@rel |
  • baseline-template
| True | builtin | -| allowed-values | [Location](/system-security-plan/system-implementation/inventory-item/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/metadata/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/System Implementation/Inventory Item/Prop/@Name +#### /Profile/Metadata/Revision/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-implementation/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • ipv4-address
  • ipv6-address
  • fqdn
  • uri
  • serial-number
  • netbios-name
  • mac-address
  • physical-location
  • is-scanned
  • hardware-model
  • os-name
  • os-version
  • software-name
  • software-version
  • software-patch-level
  • asset-type
  • asset-id
  • asset-tag
  • public
  • virtual
  • vlan-id
  • network-id
  • label
  • sort-id
  • baseline-configuration-name
  • allows-authenticated-scan
  • function
| False | builtin | -| allowed-values | [Location](/system-security-plan/system-implementation/inventory-item) | (.)[@type=('software', 'hardware', 'service')]/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • vendor-name
| False | builtin | -| allowed-values | [Location](/system-security-plan/system-implementation/inventory-item/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/metadata/revision) | link/@rel |
  • canonical
  • alternate
  • predecessor-version
  • successor-version
  • version-history
| True | builtin | +| [Location](/profile/metadata/revision/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/System Implementation/Inventory Item/Prop/@Value +#### /Profile/Metadata/Revision/Prop/@Name -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | scan-type | [Location](/system-security-plan) | system-implementation//prop[@name='scan-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • infrastructure
  • database
  • web
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -| allowed-values | | [Location](/system-security-plan/system-implementation) | (component | inventory-item)/prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='allows-authenticated-scan']/@value |
  • yes
  • no
| False | builtin | -| allowed-values | | [Location](/system-security-plan/system-implementation/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='asset-type']/@value |
  • operating-system
  • database
  • web-server
  • dns-server
  • email-server
  • directory-server
  • pbx
  • firewall
  • router
  • switch
  • storage-array
  • appliance
| True | builtin | -| allowed-values | | [Location](/system-security-plan/system-implementation/inventory-item) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='is-scanned']/@value |
  • yes
  • no
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/metadata/revision/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/System Implementation/Inventory Item/Responsible Party/@Role Id +#### /Profile/Metadata/Role/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-implementation/inventory-item) | responsible-party/@role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
  • maintainer
  • provider
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/metadata/role/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/System Implementation/Inventory Item/Responsible Party/Link/@Rel +#### /Profile/Metadata/Role/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-implementation/inventory-item/responsible-party/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/metadata/role/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/System Implementation/Inventory Item/Responsible Party/Prop/@Name +#### /Profile/Modify/Alter/Add/@Position -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-implementation/inventory-item/responsible-party/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/modify/alter/add/@position) | . |
  • before
  • after
  • starting
  • ending
| False | builtin | -### /System Security Plan/System Implementation/Inventory Item/Responsible Party/Prop/@Value +#### /Profile/Modify/Alter/Add/Link/@Rel -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | scan-type | [Location](/system-security-plan) | system-implementation//prop[@name='scan-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • infrastructure
  • database
  • web
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/modify/alter/add/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/System Implementation/Leveraged Authorization/Link/@Rel +#### /Profile/Modify/Alter/Add/Param/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-implementation/leveraged-authorization) | link/@rel |
  • system-security-plan
| True | builtin | -| allowed-values | [Location](/system-security-plan/system-implementation/leveraged-authorization/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/modify/alter/add/param/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/System Implementation/Leveraged Authorization/Prop/@Name +#### /Profile/Modify/Alter/Add/Param/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-implementation/leveraged-authorization/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/modify/alter/add/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
  • alt-label
| False | builtin | +| [Location](/profile/modify/alter/add/param) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/rmf')]/@name |
  • aggregates
| False | builtin | +| [Location](/profile/modify/alter/add/param/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/System Implementation/Leveraged Authorization/Prop/@Value +#### /Profile/Modify/Alter/Add/Param/Select/@How Many -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | scan-type | [Location](/system-security-plan) | system-implementation//prop[@name='scan-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • infrastructure
  • database
  • web
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/modify/alter/add/param/select/@how-many) | . |
  • one
  • one-or-more
| False | builtin | -### /System Security Plan/System Implementation/Link/@Rel +#### /Profile/Modify/Alter/Add/Part/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-implementation/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/modify/alter/add/part/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/System Implementation/Prop/@Name +#### /Profile/Modify/Alter/Add/Part/Prop/@Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-implementation/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/modify/alter/add/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | +| [Location](/profile/modify/alter/add/part/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| [Location](/profile/modify/alter/add/part/part) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | -### /System Security Plan/System Implementation/Prop/@Value +#### /Profile/Modify/Alter/Add/Prop/@Name -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | scan-type | [Location](/system-security-plan) | system-implementation//prop[@name='scan-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • infrastructure
  • database
  • web
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/modify/alter/add) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • label
  • sort-id
  • alt-identifier
| False | builtin | +| [Location](/profile/modify/alter/add/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/System Implementation/User/Link/@Rel +#### /Profile/Modify/Alter/Remove/@By Item Name -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-implementation/user/link/@rel) | . |
  • reference
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/modify/alter/remove/@by-item-name) | . |
  • param
  • prop
  • link
  • part
  • mapping
  • map
| False | builtin | -### /System Security Plan/System Implementation/User/Prop/@Name +#### /Profile/Modify/Set Parameter/Link/@Rel -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-implementation/user) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • type
  • privilege-level
| False | builtin | -| allowed-values | [Location](/system-security-plan/system-implementation/user/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/modify/set-parameter/link/@rel) | . |
  • reference
| True | builtin | -### /System Security Plan/System Implementation/User/Prop/@Value +#### /Profile/Modify/Set Parameter/Prop/@Name -| Type | Identifier | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | --- | -| allowed-values | scan-type | [Location](/system-security-plan) | system-implementation//prop[@name='scan-type'][@ns='https://fedramp.gov/ns/oscal']/@value |
  • infrastructure
  • database
  • web
  • other
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -| allowed-values | user-type | [Location](/system-security-plan) | system-implementation/user/prop[@name='type']/@value |
  • internal
  • external
  • privileged
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -| allowed-values | privilege-level | [Location](/system-security-plan) | system-implementation/user/prop[@name='privilege-level']/@value |
  • read
  • read-write
  • write
  • no-access
| False | [FedRAMP constraints](https://github.com/GSA/fedramp-automation/tree/develop/src/validations/constraints) | -| allowed-values | | [Location](/system-security-plan/system-implementation/user) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='type']/@value |
  • internal
  • external
  • general-public
| False | builtin | -| allowed-values | | [Location](/system-security-plan/system-implementation/user) | prop[has-oscal-namespace('http://csrc.nist.gov/ns/oscal') and @name='privilege-level']/@value |
  • privileged
  • non-privileged
  • no-logical-access
| False | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/modify/set-parameter/prop) | .[has-oscal-namespace('http://csrc.nist.gov/ns/oscal')]/@name |
  • marking
| False | builtin | -### /System Security Plan/System Implementation/User/Role Id +#### /Profile/Modify/Set Parameter/Select/@How Many -| Type | Location | Target | Values | Allow Other | Source | -| --- | --- | --- | --- | --- | --- | -| allowed-values | [Location](/system-security-plan/system-implementation/user) | role-id |
  • asset-owner
  • asset-administrator
  • security-operations
  • network-operations
  • incident-response
  • help-desk
  • configuration-management
| True | builtin | +| Location | Target | Values | Allow Other | Source | +| --- | --- | --- | --- | --- | +| [Location](/profile/modify/set-parameter/select/@how-many) | . |
  • one
  • one-or-more
| False | builtin |