Package gov.nist.secauto.oscal.lib.model

Class Risk

  • @MetaschemaAssembly(formalName="Identified Risk",
                    description="An identified risk.",
                    name="risk",
                    metaschema=OscalAssessmentCommonMetaschema.class)
@ValueConstraints(allowedValues=@AllowedValues(level=ERROR,target="prop[has-oscal-namespace(\'http://csrc.nist.gov/ns/oscal\')]/@name",values={@AllowedValue(value="false-positive",description="The risk has been confirmed to be a false positive."),@AllowedValue(value="accepted",description="The risk has been accepted. No further action will be taken."),@AllowedValue(value="risk-adjusted",description="The risk has been adjusted."),@AllowedValue(value="priority",description="A numeric value indicating the sequence in which risks should be addressed. (Lower numbers are higher priority)")}),
                  matches=@Matches(level=ERROR,target="prop[has-oscal-namespace(\'http://csrc.nist.gov/ns/oscal\') and @name=\'priority\']/@value",typeAdapter=gov.nist.secauto.metaschema.model.common.datatype.adapter.IntegerAdapter.class))
public class Risk
extends Object
    An identified risk.