The following errors appear in 4.18 and 4.19 which states that the SAP terms and conditions require a part for 'included-activities' and 'excluded-activites'.
Expected behavior (i.e. solution)
These part names do not appear in the NIST format - based on the linked reference, "included-activites" should be named "assessment-inclusions" and "excluded-activities" should be "assessment-exclusions".
Telos-sa
commented
11 months ago
Describe the bug
When validating a FedRAMP OSCAL SAP, an error appears for terms & conditions parts that are misaligned with the NIST format.
What version of OSCAL are you using?
OSCAL version 1.0.0
How do we replicate the issue?
Run the following SAP through the validator: FedRAMP Example Project_OSCAL_SAP.json.zip
The following errors appear in 4.18 and 4.19 which states that the SAP terms and conditions require a part for 'included-activities' and 'excluded-activites'.
Expected behavior (i.e. solution)
These part names do not appear in the NIST format - based on the linked reference, "included-activites" should be named "assessment-inclusions" and "excluded-activities" should be "assessment-exclusions".