tag-security
tag-security copied to clipboard
Cloud Native OSCAL WG - Prototype Example Tasks
trafficstars
The current goal of the Cloud Native OSCAL WG is to encourage community feedback on two OSCAL prototype metaschema changes. To accomplish this, we need to work on OSCAL content examples to demonstrate usage and impact of the proposed changes.
The issues capturing the changes to the prototypes are below.
https://github.com/usnistgov/OSCAL/issues/2013 https://github.com/usnistgov/OSCAL/issues/2012
Associated Workstreams
Prerequisite Tasks
### Tasks
- [ ] Ensure an OSCAL catalog exists for OSPS Baseline.
- [ ] Ensure mappings are identified between this catalog and NIST 800-53r5
- [ ] Create an associated OSCAL Profile, if needed
Control Mapping Example
Targeted Outcome: Demonstrate the mapping model schema using the OSPS Baseline mapping to NIST 800-53 rev 5.
### Tasks
- [ ] Create a mapping model examples in XML on a fork of [`oscal-content`](https://github.com/usnistgov/oscal-content)
- [ ] Generate [XML schema](https://github.com/usnistgov/OSCAL/tree/main/build#schemas) from the branch with the proposed changes
- [ ] Verify all examples are compliant with the associated schema
Shared Responsibility Example
Targeted Outcome: Demonstrate the shared responsibility schema for OSPS Baseline when applied to a GitHub repository context.
### Tasks
- [ ] Ensure the scenarios relating to the use case are well understood. Scenarios documented in a diagram [here](https://github.com/usnistgov/OSCAL/issues/2012#issuecomment-2250898533).
- [ ] Create XML examples to capture changes to all models updated in the shared responsibility prototype in a fork of [`oscal-content`](https://github.com/usnistgov/oscal-content)
- [ ] Generate [XML schema](https://github.com/usnistgov/OSCAL/tree/main/build#schemas) from the branch with the proposed changes
- [ ] Verify all examples are compliant with the associated schema