Skip to content

Commit

Permalink
Create <define-assembly name="impact"> (fix usnistgov#1129) (usnist…
Browse files Browse the repository at this point in the history 
…gov#1171)

* Create`<define-assembly name="impact">`
* Restored C/I/A formal names and descriptions.

Resolves usnistgov#1129.

Co-authored-by: David Waltermire <[email protected]>
  • Loading branch information
@guyzyl @david-waltermire @aj-stein-nist
2 people authored and aj-stein-nist committed Jan 10, 2023
1 parent feb8356 commit c040810
Showing 1 changed file with 24 additions and 39 deletions.
63 changes: 24 additions & 39 deletions src/metaschema/oscal_ssp_metaschema.xml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -236,51 +236,21 @@
<assembly ref="link" max-occurs="unbounded">
<group-as name="links" in-json="ARRAY"/>
</assembly>
<define-assembly name="confidentiality-impact" min-occurs="1">
<assembly ref="impact">
<formal-name>Confidentiality Impact Level</formal-name>
<description>The expected level of impact resulting from the unauthorized disclosure of the described information.</description>
<model>
<assembly ref="property" max-occurs="unbounded">
<group-as name="props" in-json="ARRAY"/>
</assembly>
<assembly ref="link" max-occurs="unbounded">
<group-as name="links" in-json="ARRAY"/>
</assembly>
<field ref="base" min-occurs="1"/>
<field ref="selected"/>
<field ref="adjustment-justification" in-xml="WITH_WRAPPER"/>
</model>
</define-assembly>
<define-assembly name="integrity-impact" min-occurs="1">
<use-name>confidentiality-impact</use-name>
</assembly>
<assembly ref="impact">
<formal-name>Integrity Impact Level</formal-name>
<description>The expected level of impact resulting from the unauthorized modification of the described information.</description>
<model>
<assembly ref="property" max-occurs="unbounded">
<group-as name="props" in-json="ARRAY"/>
</assembly>
<assembly ref="link" max-occurs="unbounded">
<group-as name="links" in-json="ARRAY"/>
</assembly>
<field ref="base" min-occurs="1"/>
<field ref="selected"/>
<field ref="adjustment-justification" in-xml="WITH_WRAPPER"/>
</model>
</define-assembly>
<define-assembly name="availability-impact" min-occurs="1">
<use-name>integrity-impact</use-name>
</assembly>
<assembly ref="impact">
<formal-name>Availability Impact Level</formal-name>
<description>The expected level of impact resulting from the disruption of access to or use of the described information or the information system.</description>
<model>
<assembly ref="property" max-occurs="unbounded">
<group-as name="props" in-json="ARRAY"/>
</assembly>
<assembly ref="link" max-occurs="unbounded">
<group-as name="links" in-json="ARRAY"/>
</assembly>
<field ref="base" min-occurs="1"/>
<field ref="selected"/>
<field ref="adjustment-justification" in-xml="WITH_WRAPPER"/>
</model>
</define-assembly>
<use-name>availability-impact</use-name>
</assembly>
</model>
<constraint>
<expect level="WARNING" target="." test="@uuid">
Expand Down Expand Up @@ -318,6 +288,21 @@
</allowed-values>
</constraint>
</define-assembly>
<define-assembly name="impact">
<formal-name>Impact Level</formal-name>
<description>The expected level of impact resulting from the described information.</description>
<model>
<assembly ref="property" max-occurs="unbounded">
<group-as name="props" in-json="ARRAY"/>
</assembly>
<assembly ref="link" max-occurs="unbounded">
<group-as name="links" in-json="ARRAY"/>
</assembly>
<field ref="base" min-occurs="1"/>
<field ref="selected"/>
<field ref="adjustment-justification" in-xml="WITH_WRAPPER"/>
</model>
</define-assembly>
<define-field name="base" as-type="string" scope="local">
<formal-name>Base Level (Confidentiality, Integrity, or Availability)</formal-name>
<description>The prescribed base (Confidentiality, Integrity, or Availability) security impact level.</description>
Expand Down

0 comments on commit c040810

Please sign in to comment.