YAML Example of a OSCAL System Security Plan - https://github.com/usnistgov/OSCAL/blob/master/json/schema/oscal_ssp_schema.json

oscal-ssp.yaml

"system-security-plan": 
  id: 
  metadata: 
    title: 
    published: 
    "last-modified": 
    version: 
    "oscal-version": 
    "document-ids": 
    properties: 
    links: 
    roles: 
    parties: 
    "responsible-parties": 
      ISSO: 
        "party-ids": 
        properties: 
        annotations: 
        links: 
        remarks: 
    remarks: 
  "import-profile": 
    href: 
    remarks: 
  "system-characteristics": 
    "system-ids": 
    "system-name": 
    "system-name-short": 
    description: 
    properties: 
    annotations: 
    links: 
    "date-authorized": 
    "security-sensitivity-level": low
    "system-information": 
      properties: 
      annotations: 
      links: 
      "information-types": 
    "security-impact-level": 
      "security-objective-confidentiality": fips-199-low
      "security-objective-integrity": fips-199-low
      "security-objective-availability": fips-199-low
    status: 
      state: operational
      remarks: 
    "leveraged-authorizations": 
      - AWS
      - GCP
    "authorization-boundary": 
      description: 
      properties: 
      annotations: 
      links: 
      diagrams: 
        NetworkFlow: 
          description: 
          properties: 
          links: 
          caption: 
          remarks: 
      remarks: 
    "network-architecture": 
      description: 
      properties: 
      annotations: 
      links: 
      diagrams: 
        NetworkArchitecture: 
          description: 
          properties: 
          links: 
          caption: 
          remarks: 
      remarks: 
    "data-flow": 
      description: 
      properties: 
      annotations: 
      links: 
      diagrams: 
        DataFlow: 
          description: 
          properties: 
          links: 
          caption: 
          remarks: 
      remarks: 
    "responsible-parties": 
      ISSO: 
        "party-ids": 
        properties: 
        annotations: 
        links: 
        remarks: 
    remarks: 
  "system-implementation": 
    properties: 
    annotations: 
    links: 
    users: 
      sysadmin: 
        title: 
        "short-name": 
        description: 
        properties: 
        annotations: 
        links: 
        "role-ids": 
        "authorized-privileges": 
        remarks: 
    components: 
      apache: 
        name: 
        "component-type": 
        description: 
        properties: 
        annotations: 
        links: 
        status: 
          state: operational
          remarks: 
        "responsible-roles": 
          SystemOwner: 
            properties: 
            annotations: 
            links: 
            "party-ids": 
            remarks: 
        remarks: 
    services: 
    "ssp-interconnection": 
    "system-inventory": 
      "inventory-items": 
      remarks: 
    remarks: 
  "control-implementation": 
    description: 
    "implemented-requirements": 
  "back-matter": 
    citations: 
    resources: