Closed iMichaela closed 9 months ago
Based on the conversation with RMF team (Vicky) IA-12(05) is triggered by a typo in the original document and will have to stay as is to accurately represent the root of trust (CPRT Data).
The IA-13(01)(02)(03) need to be corrected and the related
links removed to accurately represent CPRT Data.
Addressed by #228
User Story:
The 800-53 catalog in OSCAL was enhanced in mid 2022 with
<link rel="required" href="[parent control id]" />
in 713 places. The required link relation is followed by a<link rel="related" href="[parent control id]" />
for the same relation. If parsers are coded to update a setting because a child control could, in theory, override the value set by a parent control, would most mostlikely treat this sequence the same way and therequired
relation will be ignored. Since not both are needed, the most valuable one should prevail.Goals:
In all cases fitting the description above and the example below, remove the
related
link relation.NOTE: CPRT data shows IA-12(05) related to IA-12 . Could it be an error in the CPRT 800-53 v5.1.1?
Dependencies:
none
Acceptance Criteria