[X] the Guide to OSCAL-based FedRAMP System Security Plans (SSP)
[X] the Guide to OSCAL-based FedRAMP Security Assessment Plans (SAP)
[X] the Guide to OSCAL-based FedRAMP Security Assessment Results (SAR)
[X] the Guide to OSCAL-based FedRAMP Plan of Action and Milestones (POA&M)
[X] the FedRAMP SSP OSCAL Template (JSON or XML Format)
[X] the FedRAMP SAP OSCAL Template (JSON or XML Format)
[X] the FedRAMP SAR OSCAL Template (JSON or XML Format)
[X] the FedRAMP POA&M OSCAL Template (JSON or XML Format)
[ ] the FedRAMP OSCAL Validations
What is your feedback?
In creating the revisions history for the SSP schema, would it be appropriate to include revisions for all of the Appendices, or only include revision history for the SSP itself?
Because FedRAMP requires these appendices as part of the SSP, we thought it would be appropriate to include revisions for all of them in the schema.
This is a ...
question - need to understand something
This relates to ...
What is your feedback?
In creating the revisions history for the SSP schema, would it be appropriate to include revisions for all of the Appendices, or only include revision history for the SSP itself?
Because FedRAMP requires these appendices as part of the SSP, we thought it would be appropriate to include revisions for all of them in the schema.
Where, exactly?
OSCAL Metaschemas v1.1.2: https://pages.nist.gov/OSCAL-Reference/models/v1.1.2/system-security-plan/json-outline/
Other information
No response