System Security Plan Model v1.0.4 JSON Format Outline
The following outline is a representation of the JSON format for this model. For each property, the name links to the corresponding entry in the JSON Format Reference. The cardinality and data type are also provided for each property where appropriate.
system-security-plan [1]: { … }
metadata [1]: { … },
title [1]: markup-line,
published [0 or 1]: dateTime-with-timezone,
oscal-version [1]: string,
revisions [0 or 1]: [ … ],
An array of revision objects [1 to ∞] {
title [0 or 1]: markup-line,
published [0 or 1]: dateTime-with-timezone,
last-modified [0 or 1]: dateTime-with-timezone,
oscal-version [0 or 1]: string,
remarks [0 or 1]: markup-multiline,
}
],
roles [0 or 1]: [ … ],
An array of role objects [1 to ∞] {
title [1]: markup-line,
short-name [0 or 1]: string,
description [0 or 1]: markup-multiline,
remarks [0 or 1]: markup-multiline,
}
],
locations [0 or 1]: [ … ],
An array of location objects [1 to ∞] {
title [0 or 1]: markup-line,
remarks [0 or 1]: markup-multiline,
}
],
parties [0 or 1]: [ … ],
An array of party objects [1 to ∞] {
short-name [0 or 1]: string,
A choice of:
remarks [0 or 1]: markup-multiline,
}
],
responsible-parties [0 or 1]: [ … ],
An array of responsible-party objects [1 to ∞] {
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
},
system-characteristics [1]: { … },
system-name [1]: string,
system-name-short [0 or 1]: string,
description [1]: markup-multiline,
date-authorized [0 or 1]: date,
system-information [1]: { … },
information-types [1]: [ … ],
An array of information-type objects [1 to ∞] {
title [1]: markup-line,
description [1]: markup-multiline,
confidentiality-impact [1]: { … },
adjustment-justification [0 or 1]: markup-multiline
},
integrity-impact [1]: { … },
adjustment-justification [0 or 1]: markup-multiline
},
availability-impact [1]: { … },
adjustment-justification [0 or 1]: markup-multiline
},
}
],
},
authorization-boundary [1]: { … },
description [1]: markup-multiline,
diagrams [0 or 1]: [ … ],
An array of diagram objects [1 to ∞] {
description [0 or 1]: markup-multiline,
caption [0 or 1]: markup-line,
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
},
network-architecture [0 or 1]: { … },
description [1]: markup-multiline,
diagrams [0 or 1]: [ … ],
An array of diagram objects [1 to ∞] {
description [0 or 1]: markup-multiline,
caption [0 or 1]: markup-line,
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
},
data-flow [0 or 1]: { … },
description [1]: markup-multiline,
diagrams [0 or 1]: [ … ],
An array of diagram objects [1 to ∞] {
description [0 or 1]: markup-multiline,
caption [0 or 1]: markup-line,
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
},
responsible-parties [0 or 1]: [ … ],
An array of responsible-party objects [1 to ∞] {
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
},
system-implementation [1]: { … },
leveraged-authorizations [0 or 1]: [ … ],
An array of leveraged-authorization objects [1 to ∞] {
title [1]: markup-line,
party-uuid [1]: uuid,
date-authorized [1]: date,
remarks [0 or 1]: markup-multiline,
}
],
users [1]: [ … ],
An array of user objects [1 to ∞] {
title [0 or 1]: markup-line,
short-name [0 or 1]: string,
description [0 or 1]: markup-multiline,
authorized-privileges [0 or 1]: [ … ],
An array of authorized-privilege objects [1 to ∞] {
title [1]: markup-line,
description [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
}
],
components [1]: [ … ],
An array of component objects [1 to ∞] {
title [1]: markup-line,
description [1]: markup-multiline,
purpose [0 or 1]: markup-line,
responsible-roles [0 or 1]: [ … ],
An array of responsible-role objects [1 to ∞] {
remarks [0 or 1]: markup-multiline
}
],
protocols [0 or 1]: [ … ],
An array of protocol objects [1 to ∞] {
title [0 or 1]: markup-line,
}
],
remarks [0 or 1]: markup-multiline,
}
],
inventory-items [0 or 1]: [ … ],
An array of inventory-item objects [1 to ∞] {
description [1]: markup-multiline,
responsible-parties [0 or 1]: [ … ],
An array of responsible-party objects [1 to ∞] {
remarks [0 or 1]: markup-multiline,
}
],
implemented-components [0 or 1]: [ … ],
An array of implemented-component objects [1 to ∞] {
component-uuid [1]: uuid,
responsible-parties [0 or 1]: [ … ],
An array of responsible-party objects [1 to ∞] {
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
},
control-implementation [1]: { … },
description [1]: markup-multiline,
set-parameters [0 or 1]: [ … ],
],
implemented-requirements [1]: [ … ],
An array of implemented-requirement objects [1 to ∞] {
control-id [1]: token,
set-parameters [0 or 1]: [ … ],
],
responsible-roles [0 or 1]: [ … ],
An array of responsible-role objects [1 to ∞] {
remarks [0 or 1]: markup-multiline
}
],
statements [0 or 1]: [ … ],
An array of statement objects [1 to ∞] {
statement-id [1]: token,
responsible-roles [0 or 1]: [ … ],
An array of responsible-role objects [1 to ∞] {
remarks [0 or 1]: markup-multiline
}
],
by-components [0 or 1]: [ … ],
An array of by-component objects [1 to ∞] {
component-uuid [1]: uuid,
description [1]: markup-multiline,
set-parameters [0 or 1]: [ … ],
],
export [0 or 1]: { … },
description [0 or 1]: markup-multiline,
provided [0 or 1]: [ … ],
An array of provided objects [1 to ∞] {
description [1]: markup-multiline,
responsible-roles [0 or 1]: [ … ],
An array of responsible-role objects [1 to ∞] {
remarks [0 or 1]: markup-multiline
}
],
remarks [0 or 1]: markup-multiline,
}
],
responsibilities [0 or 1]: [ … ],
An array of responsibility objects [1 to ∞] {
provided-uuid [0 or 1]: uuid,
description [1]: markup-multiline,
responsible-roles [0 or 1]: [ … ],
An array of responsible-role objects [1 to ∞] {
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
},
inherited [0 or 1]: [ … ],
An array of inherited objects [1 to ∞] {
provided-uuid [0 or 1]: uuid,
description [1]: markup-multiline,
responsible-roles [0 or 1]: [ … ],
An array of responsible-role objects [1 to ∞] {
remarks [0 or 1]: markup-multiline
}
],
}
],
satisfied [0 or 1]: [ … ],
An array of satisfied objects [1 to ∞] {
responsibility-uuid [0 or 1]: uuid,
description [1]: markup-multiline,
responsible-roles [0 or 1]: [ … ],
An array of responsible-role objects [1 to ∞] {
remarks [0 or 1]: markup-multiline
}
],
remarks [0 or 1]: markup-multiline,
}
],
responsible-roles [0 or 1]: [ … ],
An array of responsible-role objects [1 to ∞] {
remarks [0 or 1]: markup-multiline
}
],
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
}
],
by-components [0 or 1]: [ … ],
An array of by-component objects [1 to ∞] {
component-uuid [1]: uuid,
description [1]: markup-multiline,
set-parameters [0 or 1]: [ … ],
],
export [0 or 1]: { … },
description [0 or 1]: markup-multiline,
provided [0 or 1]: [ … ],
An array of provided objects [1 to ∞] {
description [1]: markup-multiline,
responsible-roles [0 or 1]: [ … ],
An array of responsible-role objects [1 to ∞] {
remarks [0 or 1]: markup-multiline
}
],
remarks [0 or 1]: markup-multiline,
}
],
responsibilities [0 or 1]: [ … ],
An array of responsibility objects [1 to ∞] {
provided-uuid [0 or 1]: uuid,
description [1]: markup-multiline,
responsible-roles [0 or 1]: [ … ],
An array of responsible-role objects [1 to ∞] {
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
},
inherited [0 or 1]: [ … ],
An array of inherited objects [1 to ∞] {
provided-uuid [0 or 1]: uuid,
description [1]: markup-multiline,
responsible-roles [0 or 1]: [ … ],
An array of responsible-role objects [1 to ∞] {
remarks [0 or 1]: markup-multiline
}
],
}
],
satisfied [0 or 1]: [ … ],
An array of satisfied objects [1 to ∞] {
responsibility-uuid [0 or 1]: uuid,
description [1]: markup-multiline,
responsible-roles [0 or 1]: [ … ],
An array of responsible-role objects [1 to ∞] {
remarks [0 or 1]: markup-multiline
}
],
remarks [0 or 1]: markup-multiline,
}
],
responsible-roles [0 or 1]: [ … ],
An array of responsible-role objects [1 to ∞] {
remarks [0 or 1]: markup-multiline
}
],
remarks [0 or 1]: markup-multiline,
}
],
remarks [0 or 1]: markup-multiline,
}
],
},
back-matter [0 or 1]: { … }
resources [0 or 1]: [ … ],
An array of resource objects [1 to ∞] {
title [0 or 1]: markup-line,
description [0 or 1]: markup-multiline,
citation [0 or 1]: { … },
text [1]: markup-line,
},
base64 [0 or 1]: { … },
},
remarks [0 or 1]: markup-multiline,
}
],
}
}