telosBA

Results 5 comments of telosBA

Clarification on Granularity of implementation-status

@david-waltermire-nist Is this acceptable? $parameter.answer 77e0e2c8-2560-4fe9-ac78-c3ff4ffc9f6d Text from the system implementation details - system, since control is shared Text from the system implementation details - provider project Text from the...

Clarification on Granularity of implementation-status

> The intent here from an OSCAL perspective is that definition of `implementation-status` at the control level would apply to all statements, while `implementation-status` at the statement level would apply...

Does inventory need to be duplicated in POA&M when already present in SSP?

Discussed on 09/08/2022, do NOT duplicate.

Related Observation not read by validator

[OSCAL-API-FedRAMP_Plan_of_Action_and_Milestones.zip](https://github.com/GSA/fedramp-automation/files/9529930/OSCAL-API-FedRAMP_Plan_of_Action_and_Milestones.zip)

Validator should not require a <role-id> tag in <system-implementation> <user>

This could work, except NIST requires at least one user to be included in the ssp. ![image](https://user-images.githubusercontent.com/104856767/198079710-be13c3bd-abd0-4339-8d6b-c783ee303e8a.png) This would not be an issue if role-id was not required, as NIST...