usnistgov / OSCAL-Pages

Open Security Controls Assessment Language (OSCAL) Website Content
https://pages.nist.gov/OSCAL/
Other
5 stars 10 forks source link

[PROTOTYPE SHARED RESPONSIBILITY MODEL]: Documentation will need updates when model is released. #75

Open iMichaela opened 2 months ago

iMichaela commented 2 months ago

The Shared Responsibility model documentation is necessary.

iMichaela commented 2 weeks ago

The SR model needs to appear under the implementation layer and not under control layer (https://pages.nist.gov/OSCAL/concepts/layer/control/shared-responsibility/)

Current listing of the SR model is under Control Layer and needs to appear under the Implementation Layer. The page https://pages.nist.gov/OSCAL/concepts/layer/control/shared-responsibility/ was removed but proper inclusion must be done in the page https://pages.nist.gov/OSCAL/resources/concepts/layer/#implementation-layer-overview and in the OSCAL-References where issue https://github.com/usnistgov/OSCAL-Reference/issues/41 was opened.

To complete this bullet of the issue, update In the OSCAL-Reference repo the file : https://github.com/usnistgov/OSCAL-Reference/blob/main/support/generate_modeldoc.sh#L117 (line 117) It reads today:

"shared-responsibility=shared-responsibility|Shared Responsibility|control|shared-responsibility"

and needs to read:

"shared-responsibility=shared-responsibility|Shared Responsibility|implementation|shared-responsibility"

The change should be pushed to develop branch first,

https://github.com/usnistgov/OSCAL-Reference/blob/develop/support/generate_modeldoc.sh

and then to main after all local tests are successful.