assessment_plan

Documentation

Overview

Code generated by https://github.com/GoComply/metaschema; DO NOT EDIT.

Index

• type AssessmentActivities
• type AssessmentPlan
• type AssessmentSubjects
• type Assets
• type BackMatter
• type Component
• type ComponentMultiplexer
• type ExcludeSubject
• type ImportSsp
• type IncludeSubject
• type InventoryItem
• type InventoryItemMultiplexer
• type LocalDefinitions
• type Metadata
• type Objectives
• type Remarks
• type User
• type UserMultiplexer

Types

type AssessmentActivities

type AssessmentActivities = assessment_common.AssessmentActivities

type AssessmentPlan

type AssessmentPlan struct {

	// A RFC 4122 version 4 Universally Unique Identifier (UUID) for the containing object.
	Uuid string `xml:"uuid,attr,omitempty" json:"uuid,omitempty"`

	// Provides information about the publication and availability of the containing document.
	Metadata *Metadata `xml:"metadata,omitempty" json:"metadata,omitempty"`
	// Used by the SAP to import information about the system being assessed.
	ImportSsp *ImportSsp `xml:"import-ssp,omitempty" json:"import-ssp,omitempty"`
	// Identifies the controls and control being assessed and their control objectives. In the assessment plans, these are the planned controls and objectives. In the assessment results, these are the actual controls and objectives, and reflects any changes from the plan.
	Objectives *Objectives `xml:"objectives,omitempty" json:"objectives,omitempty"`
	// Identifies system elements being assessed, such as components, inventory items, and locations. In the assessment plan, this identifies the planned assessment subject. In the assessment results this is the actual assessment subject, and reflects any changes from the plan.
	AssessmentSubjects *AssessmentSubjects `xml:"assessment-subjects,omitempty" json:"assessment-subjects,omitempty"`
	// Identifies the assets used to perform this assessment, such as the assessment team, scanning tools, and assumptions.
	Assets *Assets `xml:"assets,omitempty" json:"assets,omitempty"`
	// Identifies the assessment activities and schedule. In the assessment plan, these are planned activities. In the assessment results, these are the actual activities performed.
	AssessmentActivities *AssessmentActivities `xml:"assessment-activities,omitempty" json:"assessment-activities,omitempty"`
	// A collection of citations and resource references.
	BackMatter *BackMatter `xml:"back-matter,omitempty" json:"back-matter,omitempty"`
}

An assessment plan, such as those provided by a FedRAMP assessor.

type AssessmentSubjects

type AssessmentSubjects struct {

	// Identifies exactly what will be the focus of this assessment. Anything not explicitly defined is out-of-scope.
	Includes []IncludeSubject `xml:"include-subject,omitempty" json:"includes,omitempty"`
	// Identifies what is explicitly excluded from this assessment. Used to remove a subset of items from groups of explicitly included items. Also used to explicitly clarify off-limit items, such as hosts to avoid scanning.
	Excludes []ExcludeSubject `xml:"exclude-subject,omitempty" json:"excludes,omitempty"`
	// Allows control objectives, users, components, and inventory-items to be defined within the assessment plan or assessment results for circumstances where they are not appropriately defined in the SSP. NOTE: Use the assessment plan or assessment results metadata to define additional locations if needed.
	LocalDefinitions *LocalDefinitions `xml:"local-definitions,omitempty" json:"local-definitions,omitempty"`
	// Additional commentary on the parent item.
	Remarks *Remarks `xml:"remarks,omitempty" json:"remarks,omitempty"`
}

Identifies system elements being assessed, such as components, inventory items, and locations. In the assessment plan, this identifies the planned assessment subject. In the assessment results this is the actual assessment subject, and reflects any changes from the plan.

type Assets

type Assets = assessment_common.Assets

type BackMatter

type BackMatter = validation_root.BackMatter

type Component

type Component = system_security_plan.Component

type ComponentMultiplexer

type ComponentMultiplexer = system_security_plan.ComponentMultiplexer

type ExcludeSubject

type ExcludeSubject = assessment_common.ExcludeSubject

type ImportSsp

type ImportSsp = assessment_common.ImportSsp

type IncludeSubject

type IncludeSubject = assessment_common.IncludeSubject

type InventoryItem

type InventoryItem = system_security_plan.InventoryItem

type InventoryItemMultiplexer

type InventoryItemMultiplexer = system_security_plan.InventoryItemMultiplexer

type LocalDefinitions

type LocalDefinitions struct {

	// Used to add any components, not defined via the System Security Plan (AR->AP->SSP)
	Components ComponentMultiplexer `xml:"component,omitempty" json:"components,omitempty"`
	// Used to add any inventory-items, not defined via the System Security Plan (AR->AP->SSP)
	InventoryItems InventoryItemMultiplexer `xml:"inventory-item,omitempty" json:"inventory-items,omitempty"`
	// Used to add any users, not defined via the System Security Plan (AR->AP->SSP)
	Users UserMultiplexer `xml:"user,omitempty" json:"users,omitempty"`
	// Additional commentary on the parent item.
	Remarks *Remarks `xml:"remarks,omitempty" json:"remarks,omitempty"`
}

Allows control objectives, users, components, and inventory-items to be defined within the assessment plan or assessment results for circumstances where they are not appropriately defined in the SSP. NOTE: Use the assessment plan or assessment results metadata to define additional locations if needed.

type Metadata

type Metadata = validation_root.Metadata

type Objectives

type Objectives = assessment_common.Objectives

type Remarks

type Remarks = validation_root.Remarks

type User

type User = system_security_plan.User

type UserMultiplexer

type UserMultiplexer = system_security_plan.UserMultiplexer