From f66f1af63376cfaa03ec9e539d08959c28e77177 Mon Sep 17 00:00:00 2001
From: Alexander Stein <alexander.stein@nist.gov>
Date: Wed, 26 Jan 2022 17:03:12 -0500
Subject: [PATCH] Make @control-id for alter statements in profile required.
 (#1111)

Resolves #1053.

Discussed with the team and agreed that this is in fact a bug that
requires a backward-breaking compatibility change to fix.
---
 src/metaschema/oscal_profile_metaschema.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/metaschema/oscal_profile_metaschema.xml b/src/metaschema/oscal_profile_metaschema.xml
index e4efce81f3..69b8f2cae5 100644
--- a/src/metaschema/oscal_profile_metaschema.xml
+++ b/src/metaschema/oscal_profile_metaschema.xml
@@ -335,7 +335,7 @@
       <define-assembly name="alter">
             <formal-name>Alteration</formal-name>
             <description>An Alter element specifies changes to be made to an included control when a profile is resolved.</description>
-            <flag ref="control-id"/>
+            <flag ref="control-id" required="yes"/>
             <model>
                   <assembly ref="remove" max-occurs="unbounded">
                         <group-as name="removes" in-json="ARRAY"/>