Package gov.nist.secauto.oscal.lib.model

Class Risk.RiskLog.Entry

  • Enclosing class:
    Risk.RiskLog
    @MetaschemaAssembly(formalName="Risk Log Entry",
                    description="Identifies an individual risk response that occurred as part of managing an identified risk.",
                    name="entry",
                    metaschema=OscalAssessmentCommonMetaschema.class)
@AllowedValues(level=ERROR,target="prop[has-oscal-namespace(\'http://csrc.nist.gov/ns/oscal\')]/@name",values=@AllowedValue(value="type",description="The type of remediation tracking entry. Can be multi-valued.")) @AllowedValues(level=ERROR,target="prop[has-oscal-namespace(\'http://csrc.nist.gov/ns/oscal\') and @name=\'type\']/@value",allowOthers=true,values={@AllowedValue(value="vendor-check-in",description="Contacted vendor to determine the status of a pending fix to a known vulnerability."),@AllowedValue(value="status-update",description="Information related to the current state of response to this risk."),@AllowedValue(value="milestone-complete",description="A significant step in the response plan has been achieved."),@AllowedValue(value="mitigation",description="An activity was completed that reduces the likelihood or impact of this risk."),@AllowedValue(value="remediated",description="An activity was completed that eliminates the likelihood or impact of this risk."),@AllowedValue(value="closed",description="The risk is no longer applicable to the system."),@AllowedValue(value="dr-submission",description="A deviation request was made to the authorizing official."),@AllowedValue(value="dr-updated",description="A previously submitted deviation request has been modified."),@AllowedValue(value="dr-approved",description="The authorizing official approved the deviation."),@AllowedValue(value="dr-rejected",description="The authorizing official rejected the deviation.")})
public static class Risk.RiskLog.Entry
extends Object
    Identifies an individual risk response that occurred as part of managing an identified risk.