Fen Labalme

@xee5ch - Looking at ARS 5.0 it appears straightforward to define organization defined parameters for the Control Statement. But ARS also changes the Guidance (renamed “Discussion”) and adds a collection...

This is excellent insight, thank you! * There is the 800-53 Control Statement and Guidance (containing ODPs) * We propose creating three Profiles (overlays), each defining specific values for the...

> we could even spec 2-4 controls here of the actual material and focus on just those This is what I meant, though I confused things a bit (by mentioning...

I'm going to be working this week to turn that spreadsheet into JSON-formatted OSCAL (maybe one for each impact level).

Very appealing. I want to experiment, ask questions, and get deeply involved with what you are proposing. Late afternoons/evenings will work. I am game for it, too!