As a FedRAMP reviewer, in order to ensure the assessment team is clearly identified, I want to examine the role, party, and responsible party elements in the SSP and SAP OSCAL.
Acceptance Criteria
[x] All Schematron assertion messages are declarative statements which affirm the positive test outcome.
[x] All Schematron assertion diagnostic messages are declarative statements which explain the negative test outcome.
[x] The Schematron code has no assertion failures when validated using src/validations/styleguides/sch.sch using the basic phase.
[x] XSpec unit tests for positive and negative Schematron assertion outcomes accompany all Schematron assertions (where feasible).
[x] There is a role/@id with a value of 'assessment-team'.
- [x] There is a party/@id of a type='person' (may be more than one)
[x] There is a responsible-party with a @role-id value of 'assessment-team'
[x] The responsible-party described above has a party-uuid with a matching party/@id of a type='person'
[x] The party/@id that matches the first responsible-party/party-uuid value must contain an email and phone element.
Definition of Done
[x] Acceptance criteria met
[x] Unit test coverage of our code > 95%
[x] Automated code quality checks passed
[x] Security reviewed and reported
[x] Reviewed against plain language guidelines
[x] Code must be self-documenting
[x] No local tech debt
[x] Load/performance tests passed – needs to be created/automated
[x] Documentation updated
[x] Architectural Decision Record completed as necessary for significant design choices
Extended Description
Acceptance Criteria
src/validations/styleguides/sch.sch
using thebasic
phase.- [x] There is a party/@id of a type='person' (may be more than one)Definition of Done