Michaela Iorga

### User Story As an OSCAL beginner, I would like to have clear description of all available tutorials introduced in a logical way and with sufficient guidance that allows me...

OSCAL mapping model support for identifying controls in a catalog that are not mapped

1

# User Story: As an OSCAL user, when I map a source catalog to a target catalog, I would like to also document, in the mapping instance of the source...

OSCAL SSP, AP, and AR examples of using an existing (e.g. FedRAMP) OSCAL A-ATO or P-ATO package, when not all services are needed.

3

# User Story: As an OSCAL user and system owner or authorizing official, I need to understand through an example how to use an existing (e.g. FedRAMP) OSCAL A-ATO or...

# Committer Notes This PR updates the OSCAL mini workshop page with the latest presentations and video. ### All Submissions: - [x] Have you selected the correct base branch per...

Develop Tutorials Set #3: Creating a set of simple tutorials describing how to generate an OSCAL SSP.

2

# User Story: As an OSCAL content developer, I need a clear and concise tutorial or set of tutorials that illustrate how I can create a simple OSCAL system security...

Incorrect Allowed @name values for @prop in documentation

19

### Describe the bug CROSS-REFERENCE BUG, INITIALLY: [OSCAL-Reference/issue#6](https://github.com/usnistgov/OSCAL-Reference/issues/6) There are many places in the [OSCAL documentation](https://pages.nist.gov/OSCAL/reference/) lists incorrect values for the @name attribute on the prop field. For example, prop[@name='marking']...

OSCAL NIST SP 800-53 rev 5.1.1 catalog with earlier version of the "prop/@name=label" system restored.

1

### User Story As an user of the OSCAL NIST SP 800-53 rev 5.1.1 catalog, I would like to have the a catalog version with a label system similar to...

XPath bug (typo ?) in oscal_catalog_metaschema.xml

1

### Describe the bug Per the [XPath tutorial](https://www.w3schools.com/xml/xpath_syntax.asp), chapter Selecting nodes: Expression | Description -- | -- nodename | Selects all nodes with the name "nodename" / | Selects from...

Support for exporting customer responsibility data in a Component Definition instance.

2

# User Story: As an OSCAL user (as system owner or vendor providing security configurations of my products, I would like to be able to identify and `export` in a...

Two `this-system` components in the SSP examples.

3

# Describe the bug The leveraged ssp and leveraging ssp example have each 2 `this-system` components. An SSP can have only one `this-system` component. The error might come from the...