DRAFT PR - separation of duties example - option 1

GSA / fedramp-automation

FedRAMP Automation

https://www.fedramp.gov/using-the-fedramp-oscal-resources-and-templates/

Other

276 stars 85 forks source link

DRAFT PR - separation of duties example - option 1 #548

Closed Rene2mt closed 3 months ago

Rene2mt commented 8 months ago

This is a DRAFT PR illustrating one option for how to represent FedRAMP's SSP separation of duties. The approach in this is illustrated by the entity diagram below:

This would require require the following changes to the NIST OSCAL SSP models:

See https://github.com/GSA/OSCAL/tree/feature-enhance-roles-option1

david-waltermire commented 3 months ago

Closing this version in favor of #594.