GSA / fedramp-automation

FedRAMP Automation
https://www.fedramp.gov/using-the-fedramp-oscal-resources-and-templates/
Other
274 stars 84 forks source link

Incorrect parameter ID #695

Open michaeldavie-amzn opened 2 days ago

michaeldavie-amzn commented 2 days ago

At line 2571, the High profile references parameter si-03_odp.05, but I believe it should be si-03_odp.06.

The parameter definitions from the 800-53 catalog are excerpted below:

                "id": "si-03_odp.04",
                "props": [
                  {
                    "name": "alt-identifier",
                    "value": "si-3_prm_4"
                  },
                  {
                    "name": "label",
                    "value": "SI-03_ODP[04]",
                    "class": "sp800-53a"
                  }
                ],
                "select": {
                  "how-many": "one-or-more",
                  "choice": [
                    "block malicious code",
                    "quarantine malicious code",
                    "take {{ insert: param, si-03_odp.05 }} "
                  ]
                }
              },
              {
                "id": "si-03_odp.05",
                "props": [
                  {
                    "name": "alt-identifier",
                    "value": "si-3_prm_5"
                  },
                  {
                    "name": "label",
                    "value": "SI-03_ODP[05]",
                    "class": "sp800-53a"
                  }
                ],
                "label": "action",
                "guidelines": [
                  {
                    "prose": "action to be taken in response to malicious code detection are defined (if selected);"
                  }
                ]
              },
              {
                "id": "si-03_odp.06",
                "props": [
                  {
                    "name": "alt-identifier",
                    "value": "si-3_prm_6"
                  },
                  {
                    "name": "label",
                    "value": "SI-03_ODP[06]",
                    "class": "sp800-53a"
                  }
                ],
                "label": "personnel or roles",
                "guidelines": [
                  {
                    "prose": "personnel or roles to be alerted when malicious code is detected is/are defined;"
                  }
                ]
              }
aj-stein-gsa commented 2 days ago

Thanks for your report, @michaeldavie-amzn. We will check it out for triage. If it is a confirmed bug, we will move it forward and prep for fix in the coming work queue.