plan_of_action_and_milestones

Documentation

Overview

Code generated by https://github.com/GoComply/metaschema; DO NOT EDIT.

Index

• type Annotation
• type BackMatter
• type Collected
• type Component
• type ComponentMultiplexer
• type Description
• type End
• type Expires
• type ImplementationStatementUuid
• type ImportSsp
• type InventoryItem
• type InventoryItemMultiplexer
• type LocalDefinitions
• type Metadata
• type ObjectiveStatus
• type Observation
• type PartyUuid
• type PlanOfActionAndMilestones
• type PoamItem
• type PoamItems
• type Prop
• type Remarks
• type Risk
• type Start
• type SystemId
• type ThreatId
• type Title

Types

type Annotation

type Annotation = validation_root.Annotation

type BackMatter

type BackMatter = validation_root.BackMatter

type Collected

type Collected = assessment_common.Collected

type Component

type Component = system_security_plan.Component

type ComponentMultiplexer

type ComponentMultiplexer = system_security_plan.ComponentMultiplexer

type Description

type Description = validation_root.Description

type End

type End = assessment_common.End

type Expires

type Expires = assessment_common.Expires

type ImplementationStatementUuid

type ImplementationStatementUuid = assessment_common.ImplementationStatementUuid

type ImportSsp

type ImportSsp = assessment_common.ImportSsp

type InventoryItem

type InventoryItem = system_security_plan.InventoryItem

type InventoryItemMultiplexer

type InventoryItemMultiplexer = system_security_plan.InventoryItemMultiplexer

type LocalDefinitions

type LocalDefinitions struct {

	// Used to add any components, not defined via the System Security Plan (AR->AP->SSP)
	Components ComponentMultiplexer `xml:"component,omitempty" json:"components,omitempty"`
	// Used to add any inventory-items, not defined via the System Security Plan (AR->AP->SSP)
	InventoryItems InventoryItemMultiplexer `xml:"inventory-item,omitempty" json:"inventory-items,omitempty"`
	// Additional commentary on the parent item.
	Remarks *Remarks `xml:"remarks,omitempty" json:"remarks,omitempty"`
}

Allows components, and inventory-items to be defined within the POA&M for circumstances where no OSCAL-based SSP exists, or is not delivered with the POA&M.

type Metadata

type Metadata = validation_root.Metadata

type ObjectiveStatus

type ObjectiveStatus = assessment_common.ObjectiveStatus

type Observation

type Observation = assessment_common.Observation

type PartyUuid

type PartyUuid = validation_root.PartyUuid

type PlanOfActionAndMilestones

type PlanOfActionAndMilestones struct {

	// A RFC 4122 version 4 Universally Unique Identifier (UUID) for the containing object.
	Uuid string `xml:"uuid,attr,omitempty" json:"uuid,omitempty"`

	// Provides information about the publication and availability of the containing document.
	Metadata *Metadata `xml:"metadata,omitempty" json:"metadata,omitempty"`
	// Used by the POA&M to import information about the system.
	ImportSsp *ImportSsp `xml:"import-ssp,omitempty" json:"import-ssp,omitempty"`
	// A unique identifier for the system described by this system security plan.
	SystemId *SystemId `xml:"system-id,omitempty" json:"system-id,omitempty"`
	// Allows components, and inventory-items to be defined within the POA&M for circumstances where no OSCAL-based SSP exists, or is not delivered with the POA&M.
	LocalDefinitions *LocalDefinitions `xml:"local-definitions,omitempty" json:"local-definitions,omitempty"`
	// This identifies initial and residual risks, deviations, and disposition.
	PoamItems *PoamItems `xml:"poam-items,omitempty" json:"poam-items,omitempty"`
	// A collection of citations and resource references.
	BackMatter *BackMatter `xml:"back-matter,omitempty" json:"back-matter,omitempty"`
}

A plan of action and milestones, such as those required by FedRAMP.

type PoamItem

type PoamItem struct {

	// A RFC 4122 version 4 Universally Unique Identifier (UUID) for the containing object.
	Uuid string `xml:"uuid,attr,omitempty" json:"uuid,omitempty"`

	// A title for display and navigation
	Title *Title `xml:"title,omitempty" json:"title,omitempty"`
	// A description supporting the parent item.
	Description *Description `xml:"description,omitempty" json:"description,omitempty"`
	// Provided as means of extending the OSCAL syntax.
	Properties []Prop `xml:"prop,omitempty" json:"properties,omitempty"`
	// Provided as means of extending the OSCAL syntax.
	Annotations []Annotation `xml:"annotation,omitempty" json:"annotations,omitempty"`
	// Date/time stamp identifying when the finding information was collected.
	Collected Collected `xml:"collected,omitempty" json:"collected,omitempty"`
	// Date/time identifying when the finding information is out-of-date and no longer valid. Typically used with continuous assessment scenarios.
	Expires Expires `xml:"expires,omitempty" json:"expires,omitempty"`
	// Captures an assessors conclusions as to whether an objective is fully satisfied.
	ObjectiveStatus *ObjectiveStatus `xml:"objective-status,omitempty" json:"objective-status,omitempty"`
	// Identifies the implementation statement in the SSP to which this finding is related.
	ImplementationStatementUuid ImplementationStatementUuid `xml:"implementation-statement-uuid,omitempty" json:"implementation-statement-uuid,omitempty"`
	// Describes an individual observation.
	Observations []Observation `xml:"observation,omitempty" json:"observations,omitempty"`
	// A pointer, by ID, to an externally-defined threat.
	ThreatIds []ThreatId `xml:"threat-id,omitempty" json:"threat-ids,omitempty"`
	// An identified risk.
	Risks []Risk `xml:"risk,omitempty" json:"risks,omitempty"`
	// The person who collected the evidence or made the observation.
	PartyUuids []PartyUuid `xml:"party-uuid,omitempty" json:"party-uuids,omitempty"`
	// Additional commentary on the parent item.
	Remarks *Remarks `xml:"remarks,omitempty" json:"remarks,omitempty"`
}

Describes an individual POA&M item.

type PoamItems

type PoamItems struct {

	// A title for display and navigation
	Title *Title `xml:"title,omitempty" json:"title,omitempty"`
	// A description supporting the parent item.
	Description *Description `xml:"description,omitempty" json:"description,omitempty"`
	// Provided as means of extending the OSCAL syntax.
	Properties []Prop `xml:"prop,omitempty" json:"properties,omitempty"`
	// Provided as means of extending the OSCAL syntax.
	Annotations []Annotation `xml:"annotation,omitempty" json:"annotations,omitempty"`
	// Date/time stamp identifying the start of the evidence collection reflected in these results.
	Start Start `xml:"start,omitempty" json:"start,omitempty"`
	// Date/time stamp identifying the end of the evidence collection reflected in these results. In a continuous monitoring scenario, this may be omitted or contain the same value as start if appropriate.
	End End `xml:"end,omitempty" json:"end,omitempty"`
	// Describes an individual POA&M item.
	PoamItemGroup []PoamItem `xml:"poam-item,omitempty" json:"poam-item-group,omitempty"`
	// Additional commentary on the parent item.
	Remarks *Remarks `xml:"remarks,omitempty" json:"remarks,omitempty"`
}

This identifies initial and residual risks, deviations, and disposition.

type Prop

type Prop = validation_root.Prop

type Remarks

type Remarks = validation_root.Remarks

type Risk

type Risk = assessment_common.Risk

type Start

type Start = assessment_common.Start

type SystemId

type SystemId = system_security_plan.SystemId

type ThreatId

type ThreatId = assessment_common.ThreatId

type Title

type Title = validation_root.Title