Package gov.nist.secauto.oscal.lib.model

Class Response

  • @MetaschemaAssembly(formalName="Risk Response",
                    description="Describes either recommended or an actual plan for addressing the risk.",
                    name="response",
                    metaschema=OscalAssessmentCommonMetaschema.class)
@AllowedValues(level=ERROR,target="prop[has-oscal-namespace(\'http://csrc.nist.gov/ns/oscal\')]/@name",values=@AllowedValue(value="type",description="")) @AllowedValues(level=ERROR,target="prop[has-oscal-namespace(\'http://csrc.nist.gov/ns/oscal\') and @name=\'type\']/@value",values={@AllowedValue(value="avoid",description="The risk will be eliminated."),@AllowedValue(value="mitigate",description="The risk will be reduced."),@AllowedValue(value="transfer",description="The risk will be transferred to another organization or entity."),@AllowedValue(value="accept",description="The risk will continue to exist without further efforts to address it. (Sometimes referred to as \"Operationally required\")"),@AllowedValue(value="share",description="The risk will be partially transferred to another organization or entity."),@AllowedValue(value="contingency",description="Plans will be made to address the risk impact if the risk occurs. (This is a form of mitigation.)"),@AllowedValue(value="none",description="No response, such as when the identified risk is found to be a false positive.")})
public class Response
extends Object
    Describes either recommended or an actual plan for addressing the risk.