tag-security icon indicating copy to clipboard operation
tag-security copied to clipboard

Cloud Native OSCAL WG - Prototype Example Tasks

Open jpower432 opened this issue 10 months ago • 5 comments
trafficstars

The current goal of the Cloud Native OSCAL WG is to encourage community feedback on two OSCAL prototype metaschema changes. To accomplish this, we need to work on OSCAL content examples to demonstrate usage and impact of the proposed changes.

The issues capturing the changes to the prototypes are below.

https://github.com/usnistgov/OSCAL/issues/2013 https://github.com/usnistgov/OSCAL/issues/2012

Associated Workstreams

Prerequisite Tasks

### Tasks
- [ ] Ensure an OSCAL catalog exists for OSPS Baseline.
- [ ] Ensure mappings are identified between this catalog and NIST 800-53r5
- [ ] Create an associated OSCAL Profile, if needed

Control Mapping Example

Targeted Outcome: Demonstrate the mapping model schema using the OSPS Baseline mapping to NIST 800-53 rev 5.

### Tasks
- [ ] Create a mapping model examples in XML on a fork of [`oscal-content`](https://github.com/usnistgov/oscal-content)
- [ ] Generate [XML schema](https://github.com/usnistgov/OSCAL/tree/main/build#schemas) from the branch with the proposed changes
- [ ] Verify all examples are compliant with the associated schema

Shared Responsibility Example

Targeted Outcome: Demonstrate the shared responsibility schema for OSPS Baseline when applied to a GitHub repository context.

### Tasks
- [ ] Ensure the scenarios relating to the use case are well understood. Scenarios documented in a diagram [here](https://github.com/usnistgov/OSCAL/issues/2012#issuecomment-2250898533).
- [ ] Create XML examples to capture changes to all models updated in the shared responsibility prototype in a fork of [`oscal-content`](https://github.com/usnistgov/oscal-content)
- [ ] Generate [XML schema](https://github.com/usnistgov/OSCAL/tree/main/build#schemas) from the branch with the proposed changes
- [ ] Verify all examples are compliant with the associated schema

jpower432 avatar Jan 20 '25 18:01 jpower432