System Security Plan Model Development Snapshot JSON Format Outline
The following outline is a representation of the JSON format for this model, whose schema can be built using the following instructions. For each property, the name links to the corresponding entry in the JSON Format Reference. The cardinality and data type are also provided for each property where appropriate.
system-security-plan [1]: { … }
metadata [1]: { … },
title [1]: markup-line,
published [0 or 1]: date-time-with-timezone,
oscal-version [1]: string,
revisions [0 or 1]: [ … ],
An array of revision objects [1 to ∞] {
title [0 or 1]: markup-line,
published [0 or 1]: date-time-with-timezone,
last-modified [0 or 1]: date-time-with-timezone,
oscal-version [0 or 1]: string,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
remarks [0 or 1]: markup-multiline,
}
],
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
roles [0 or 1]: [ … ],
An array of role objects [1 to ∞] {
title [1]: markup-line,
short-name [0 or 1]: string,
description [0 or 1]: markup-multiline,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
remarks [0 or 1]: markup-multiline,
}
],
locations [0 or 1]: [ … ],
An array of location objects [1 to ∞] {
title [0 or 1]: markup-line,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
remarks [0 or 1]: markup-multiline,
}
],
parties [0 or 1]: [ … ],
An array of party objects [1 to ∞] {
short-name [0 or 1]: string,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
A choice of:
remarks [0 or 1]: markup-multiline,
}
],
responsible-parties [0 or 1]: [ … ],
An array of responsible-party objects [1 to ∞] {
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
remarks [0 or 1]: markup-multiline,
}
],
actions [0 or 1]: [ … ],
An array of action objects [1 to ∞] {
date [0 or 1]: date-time-with-timezone,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
responsible-parties [0 or 1]: [ … ],
An array of responsible-party objects [1 to ∞] {
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
},
system-characteristics [1]: { … },
system-name [1]: string,
system-name-short [0 or 1]: string,
description [1]: markup-multiline,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
date-authorized [0 or 1]: date,
security-sensitivity-level [0 or 1]: string,
system-information [1]: { … },
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
information-types [1]: [ … ],
An array of information-type objects [1 to ∞] {
title [1]: markup-line,
description [1]: markup-multiline,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
confidentiality-impact [0 or 1]: { … },
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
adjustment-justification [0 or 1]: markup-multiline
},
integrity-impact [0 or 1]: { … },
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
adjustment-justification [0 or 1]: markup-multiline
},
availability-impact [0 or 1]: { … },
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
adjustment-justification [0 or 1]: markup-multiline
},
}
],
},
authorization-boundary [1]: { … },
description [1]: markup-multiline,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
diagrams [0 or 1]: [ … ],
An array of diagram objects [1 to ∞] {
description [0 or 1]: markup-multiline,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
caption [0 or 1]: markup-line,
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
},
network-architecture [0 or 1]: { … },
description [1]: markup-multiline,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
diagrams [0 or 1]: [ … ],
An array of diagram objects [1 to ∞] {
description [0 or 1]: markup-multiline,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
caption [0 or 1]: markup-line,
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
},
data-flow [0 or 1]: { … },
description [1]: markup-multiline,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
diagrams [0 or 1]: [ … ],
An array of diagram objects [1 to ∞] {
description [0 or 1]: markup-multiline,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
caption [0 or 1]: markup-line,
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
},
responsible-parties [0 or 1]: [ … ],
An array of responsible-party objects [1 to ∞] {
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
},
system-implementation [1]: { … },
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
leveraged-authorizations [0 or 1]: [ … ],
An array of leveraged-authorization objects [1 to ∞] {
title [1]: markup-line,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
party-uuid [1]: uuid,
date-authorized [1]: date,
remarks [0 or 1]: markup-multiline,
}
],
users [1]: [ … ],
An array of user objects [1 to ∞] {
title [0 or 1]: markup-line,
short-name [0 or 1]: string,
description [0 or 1]: markup-multiline,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
authorized-privileges [0 or 1]: [ … ],
An array of authorized-privilege objects [1 to ∞] {
title [1]: markup-line,
description [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
}
],
components [1]: [ … ],
An array of component objects [1 to ∞] {
title [1]: markup-line,
description [1]: markup-multiline,
purpose [0 or 1]: markup-line,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
responsible-roles [0 or 1]: [ … ],
An array of responsible-role objects [1 to ∞] {
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
remarks [0 or 1]: markup-multiline,
}
],
protocols [0 or 1]: [ … ],
An array of protocol objects [1 to ∞] {
title [0 or 1]: markup-line,
}
],
remarks [0 or 1]: markup-multiline,
}
],
inventory-items [0 or 1]: [ … ],
An array of inventory-item objects [1 to ∞] {
description [1]: markup-multiline,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
responsible-parties [0 or 1]: [ … ],
An array of responsible-party objects [1 to ∞] {
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
remarks [0 or 1]: markup-multiline,
}
],
implemented-components [0 or 1]: [ … ],
An array of implemented-component objects [1 to ∞] {
component-uuid [1]: uuid,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
responsible-parties [0 or 1]: [ … ],
An array of responsible-party objects [1 to ∞] {
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
},
control-implementation [1]: { … },
description [1]: markup-multiline,
set-parameters [0 or 1]: [ … ],
],
implemented-requirements [1]: [ … ],
An array of implemented-requirement objects [1 to ∞] {
control-id [1]: token,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
set-parameters [0 or 1]: [ … ],
],
responsible-roles [0 or 1]: [ … ],
An array of responsible-role objects [1 to ∞] {
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
remarks [0 or 1]: markup-multiline,
}
],
statements [0 or 1]: [ … ],
An array of statement objects [1 to ∞] {
statement-id [1]: token,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
responsible-roles [0 or 1]: [ … ],
An array of responsible-role objects [1 to ∞] {
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
remarks [0 or 1]: markup-multiline,
}
],
by-components [0 or 1]: [ … ],
An array of by-component objects [1 to ∞] {
component-uuid [1]: uuid,
description [1]: markup-multiline,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
set-parameters [0 or 1]: [ … ],
],
export [0 or 1]: { … },
description [0 or 1]: markup-multiline,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
provided [0 or 1]: [ … ],
An array of provided objects [1 to ∞] {
description [1]: markup-multiline,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
responsible-roles [0 or 1]: [ … ],
An array of responsible-role objects [1 to ∞] {
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
}
],
responsibilities [0 or 1]: [ … ],
An array of responsibility objects [1 to ∞] {
provided-uuid [0 or 1]: uuid,
description [1]: markup-multiline,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
responsible-roles [0 or 1]: [ … ],
An array of responsible-role objects [1 to ∞] {
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
},
inherited [0 or 1]: [ … ],
An array of inherited objects [1 to ∞] {
provided-uuid [0 or 1]: uuid,
description [1]: markup-multiline,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
responsible-roles [0 or 1]: [ … ],
An array of responsible-role objects [1 to ∞] {
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
remarks [0 or 1]: markup-multiline,
}
],
}
],
satisfied [0 or 1]: [ … ],
An array of satisfied objects [1 to ∞] {
responsibility-uuid [0 or 1]: uuid,
description [1]: markup-multiline,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
responsible-roles [0 or 1]: [ … ],
An array of responsible-role objects [1 to ∞] {
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
}
],
responsible-roles [0 or 1]: [ … ],
An array of responsible-role objects [1 to ∞] {
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
}
],
by-components [0 or 1]: [ … ],
An array of by-component objects [1 to ∞] {
component-uuid [1]: uuid,
description [1]: markup-multiline,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
set-parameters [0 or 1]: [ … ],
],
export [0 or 1]: { … },
description [0 or 1]: markup-multiline,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
provided [0 or 1]: [ … ],
An array of provided objects [1 to ∞] {
description [1]: markup-multiline,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
responsible-roles [0 or 1]: [ … ],
An array of responsible-role objects [1 to ∞] {
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
}
],
responsibilities [0 or 1]: [ … ],
An array of responsibility objects [1 to ∞] {
provided-uuid [0 or 1]: uuid,
description [1]: markup-multiline,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
responsible-roles [0 or 1]: [ … ],
An array of responsible-role objects [1 to ∞] {
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
},
inherited [0 or 1]: [ … ],
An array of inherited objects [1 to ∞] {
provided-uuid [0 or 1]: uuid,
description [1]: markup-multiline,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
responsible-roles [0 or 1]: [ … ],
An array of responsible-role objects [1 to ∞] {
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
remarks [0 or 1]: markup-multiline,
}
],
}
],
satisfied [0 or 1]: [ … ],
An array of satisfied objects [1 to ∞] {
responsibility-uuid [0 or 1]: uuid,
description [1]: markup-multiline,
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
responsible-roles [0 or 1]: [ … ],
An array of responsible-role objects [1 to ∞] {
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
}
],
responsible-roles [0 or 1]: [ … ],
An array of responsible-role objects [1 to ∞] {
links [0 or 1]: [ … ],
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
],
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
}
],
},
back-matter [0 or 1]: { … },
resources [0 or 1]: [ … ],
An array of resource objects [1 to ∞] {
title [0 or 1]: markup-line,
description [0 or 1]: markup-multiline,
citation [0 or 1]: { … },
text [1]: markup-line,
links [0 or 1]: [ … ]
An array of link objects [1 to ∞] {
href [1]: uri-reference,
media-type [0 or 1]: string,
resource-fragment [0 or 1]: string,
text [0 or 1]: markup-line,
}
]
},
base64 [0 or 1]: { … },
},
remarks [0 or 1]: markup-multiline,
}
],
},
}