Open vmangat opened 1 month ago
Can you explain why /system-security-plan/metadata/version
is not acceptable? If you are amenable, it would be great to hear more about the answer to that question, if not here, in the Implementer's Meeting tomorrow if you will attend, @vmangat.
the version field in the metadata is used for document versioning and is correlated with the version history of the document itself, we cannot use that to specify fedramp version
This is a ...
request - need something additional provided
This relates to ...
What is your feedback?
Replace the resolution-resource prop with a single prop fedramp-version. This will prevent having to create a backmatter resource and having to provide multiple additional props. FedRAMP will be able to determine based on the fedramp-version, how the file needs to processed and validated across the many layers of the specifications.
This simplifies the generation and import of the SSP files for tools.
Where, exactly?
https://automate.fedramp.gov/documentation/ssp/3-working-with-oscal-files/
Other information
No response