Documentation ¶
Overview ¶
Code generated by https://github.com/GoComply/metaschema; DO NOT EDIT.
Code generated by https://github.com/GoComply/metaschema; DO NOT EDIT. Multiplexers are indirect models needed for serialization/deserialization as json and xml files differ materially in their structure.
Index ¶
- type AssessmentActivities
- type AssessmentResults
- type AssessmentSubjects
- type Assets
- type BackMatter
- type Component
- type ComponentMultiplexer
- type ExcludeSubject
- type ImportAp
- type IncludeSubject
- type InventoryItem
- type InventoryItemMultiplexer
- type LocalDefinitions
- type Metadata
- type Objectives
- type Remarks
- type Results
- type ResultsMultiplexer
- type User
- type UserMultiplexer
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type AssessmentActivities ¶
type AssessmentActivities = assessment_common.AssessmentActivities
type AssessmentResults ¶
type AssessmentResults struct { // A RFC 4122 version 4 Universally Unique Identifier (UUID) for the containing object. Uuid string `xml:"uuid,attr,omitempty" json:"uuid,omitempty"` // Provides information about the publication and availability of the containing document. Metadata *Metadata `xml:"metadata,omitempty" json:"metadata,omitempty"` // Used by the SAR to import information about the original plan for assessing the system. ImportAp *ImportAp `xml:"import-ap,omitempty" json:"import-ap,omitempty"` // Identifies the controls and control being assessed and their control objectives. In the assessment plans, these are the planned controls and objectives. In the assessment results, these are the actual controls and objectives, and reflects any changes from the plan. Objectives *Objectives `xml:"objectives,omitempty" json:"objectives,omitempty"` // Identifies system elements being assessed, such as components, inventory items, and locations. In the assessment plan, this identifies the planned assessment subject. In the assessment results this is the actual assessment subject, and reflects any changes from the plan. AssessmentSubjects *AssessmentSubjects `xml:"assessment-subjects,omitempty" json:"assessment-subjects,omitempty"` // Identifies the assets used to perform this assessment, such as the assessment team, scanning tools, and assumptions. Assets *Assets `xml:"assets,omitempty" json:"assets,omitempty"` // Identifies the assessment activities and schedule. In the assessment plan, these are planned activities. In the assessment results, these are the actual activities performed. AssessmentActivities *AssessmentActivities `xml:"assessment-activities,omitempty" json:"assessment-activities,omitempty"` // Used by the assessment results and POA&M. In the assessment results, this identifies all of the assessment observations and findings, initial and residual risks, deviations, and disposition. In the POA&M, this identifies initial and residual risks, deviations, and disposition. ResultsGroup ResultsMultiplexer `xml:"results,omitempty" json:"results_group,omitempty"` // A collection of citations and resource references. BackMatter *BackMatter `xml:"back-matter,omitempty" json:"back-matter,omitempty"` }
Security assessment results, such as those provided by a FedRAMP assessor in the FedRAMP Security Assessment Report.
type AssessmentSubjects ¶
type AssessmentSubjects struct { // Identifies exactly what will be the focus of this assessment. Anything not explicitly defined is out-of-scope. Includes []IncludeSubject `xml:"include-subject,omitempty" json:"includes,omitempty"` // Identifies what is explicitly excluded from this assessment. Used to remove a subset of items from groups of explicitly included items. Also used to explicitly clarify off-limit items, such as hosts to avoid scanning. Excludes []ExcludeSubject `xml:"exclude-subject,omitempty" json:"excludes,omitempty"` // Allows control objectives, users, components, and inventory-items to be defined within the assessment plan or assessment results for circumstances where they are not appropriately defined in the SSP. NOTE: Use the assessment plan or assessment results metadata to define additional locations if needed. LocalDefinitions *LocalDefinitions `xml:"local-definitions,omitempty" json:"local-definitions,omitempty"` // Additional commentary on the parent item. Remarks *Remarks `xml:"remarks,omitempty" json:"remarks,omitempty"` }
Identifies system elements being assessed, such as components, inventory items, and locations. In the assessment plan, this identifies the planned assessment subject. In the assessment results this is the actual assessment subject, and reflects any changes from the plan.
type Assets ¶
type Assets = assessment_common.Assets
type BackMatter ¶
type BackMatter = validation_root.BackMatter
type Component ¶
type Component = system_security_plan.Component
type ComponentMultiplexer ¶
type ComponentMultiplexer = system_security_plan.ComponentMultiplexer
type ExcludeSubject ¶
type ExcludeSubject = assessment_common.ExcludeSubject
type ImportAp ¶
type ImportAp = assessment_common.ImportAp
type IncludeSubject ¶
type IncludeSubject = assessment_common.IncludeSubject
type InventoryItem ¶
type InventoryItem = system_security_plan.InventoryItem
type InventoryItemMultiplexer ¶
type InventoryItemMultiplexer = system_security_plan.InventoryItemMultiplexer
type LocalDefinitions ¶
type LocalDefinitions struct { // Used to add any components, not defined via the System Security Plan (AR->AP->SSP) Components ComponentMultiplexer `xml:"component,omitempty" json:"components,omitempty"` // Used to add any inventory-items, not defined via the System Security Plan (AR->AP->SSP) InventoryItems InventoryItemMultiplexer `xml:"inventory-item,omitempty" json:"inventory-items,omitempty"` // Used to add any users, not defined via the System Security Plan (AR->AP->SSP) Users UserMultiplexer `xml:"user,omitempty" json:"users,omitempty"` // Additional commentary on the parent item. Remarks *Remarks `xml:"remarks,omitempty" json:"remarks,omitempty"` }
Allows control objectives, users, components, and inventory-items to be defined within the assessment plan or assessment results for circumstances where they are not appropriately defined in the SSP. NOTE: Use the assessment plan or assessment results metadata to define additional locations if needed.
type Metadata ¶
type Metadata = validation_root.Metadata
type Objectives ¶
type Objectives = assessment_common.Objectives
type Remarks ¶
type Remarks = validation_root.Remarks
type Results ¶
type Results = assessment_common.Results
type ResultsMultiplexer ¶
type ResultsMultiplexer []Results
func (*ResultsMultiplexer) MarshalJSON ¶
func (mplex *ResultsMultiplexer) MarshalJSON() ([]byte, error)
func (*ResultsMultiplexer) UnmarshalJSON ¶
func (mplex *ResultsMultiplexer) UnmarshalJSON(b []byte) error
type User ¶
type User = system_security_plan.User
type UserMultiplexer ¶
type UserMultiplexer = system_security_plan.UserMultiplexer