Closed telosBA closed 2 years ago
We currently look for specific resource types. See https://github.com/GSA/fedramp-automation/blob/master/dist/content/resources/xml/fedramp_values.xml for a list. FedRAMP may consider allowing additional types in a future update if this becomes an issue for other tool implementers.
We currently look for specific resource types. See https://github.com/GSA/fedramp-automation/blob/master/dist/content/resources/xml/fedramp_values.xml for a list. FedRAMP may consider allowing additional types in a future update if this becomes an issue for other tool implementers.
@volpet2014 Will FedRAMP specify what values must be present for validation in the future?
Just started working through issue with NIST see "FedRAMP Profiles Uses Vendored Media Types Not Conformant with OSCAL & IANA Media Type Specification #232".
This is a ...
This relates to ...
NOTE: For feedback related to the OSCAL syntax itself, please create or add to an issue in the NIST OSCAL Repository.
Where, exactly?
What is your feedback?
Is this report specifically related to the Word or Excel files from fedramp.gov? If so, please do not open an issue here. Follow the guidance in this repository's README and contact info@fedramp..gov.
What version of OSCAL are you using? (Check our info on supported OSCAL versions)
1.0.2
In the FedRAMP SSP example, the artifacts (
<back-matter>
resources) are only tied to certain controls. What is the requirement / limitation of linking artifacts – since Xacta will be leveraging local types. What resource types are required for validation?