Class ReviewedControls


  • @MetaschemaAssembly(formalName="Reviewed Controls and Control Objectives",
                        description="Identifies the controls being assessed and their control objectives.",
                        name="reviewed-controls",
                        metaschema=OscalAssessmentCommonMetaschema.class,
                        remarks="In the context of an assessment plan, this construct is used to identify the controls and control objectives that are to be assessed. In the context of an assessment result, this construct is used to identify the actual controls and objectives that were assessed, reflecting any changes from the plan.\n\nWhen resolving the selection of controls and control objectives, the following processing will occur:\n\n1. Controls will be resolved by creating a set of controls based on the control-selections by first handling the includes, and then removing any excluded controls.\n\n2. The set of control objectives will be resolved from the set of controls that was generated in the previous step. The set of control objectives is based on the control-objective-selection by first handling the includes, and then removing any excluded control objectives.")
    public class ReviewedControls
    extends Object
    Identifies the controls being assessed and their control objectives.