usnistgov/OSCAL#959 Repro

959_Repro_Step1_m3_rc1_FedRAMP-SSP-OSCAL-Template.xml

<?xml version="1.0" encoding="UTF-8"?>
<!-- Modified by the OSCAL 1.0.0 RC1 to OSCAL 1.0.0 RC2 conversion XSLT on 2021-06-15T18:40:33.75-04:00 -->
<system-security-plan xmlns="http://csrc.nist.gov/ns/oscal/1.0"
                      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                      xsi:schemaLocation="https://raw.githubusercontent.com/usnistgov/OSCAL/master/xml/schema/oscal_ssp_schema.xsd"
                      uuid="ddc99783-7ec1-40a1-83a9-b2d1ef194787">
   <metadata>
      <title>FedRAMP System Security Plan (SSP)</title>
      <published>2020-07-01T00:00:00.00-04:00</published>
      <last-modified>2021-06-15T18:40:33.75-04:00</last-modified>
      <version>0.0</version>
      <oscal-version>1.0.0-rc2</oscal-version>
      <revisions>
         <revision>
            <published>2019-06-01T00:00:00.00-04:00</published>
            <version>1.0</version>
            <oscal-version>1.0.0-rc2</oscal-version>
            <prop ns="https://fedramp.gov/ns/oscal"
                  name="party-uuid"
                  value="6b286b5d-8f07-4fa7-8847-1dd0d88f73fb"/>
            <remarks>
               <p>Initial publication.</p>
            </remarks>
         </revision>
         <revision>
            <published>2020-06-01T00:00:00.00-04:00</published>
            <version>2.0</version>
            <oscal-version>1.0.0-rc2</oscal-version>
            <prop ns="https://fedramp.gov/ns/oscal" name="party-id" value="csp"/>
            <remarks>
               <p>Updated for annual assessment.</p>
            </remarks>
         </revision>
         <!-- Additional revision assemblies as needed. -->
      </revisions>
      <prop name="marking" value="Controlled Unclassified Information"/>
      <role id="prepared-by">
         <title>Prepared By</title>
         <description>The organization that prepared this SSP. If developed in-house, this is the CSP itself.</description>
      </role>
      <role id="prepared-for">
         <title>Prepared For</title>
         <description>The organization for which this SSP was prepared. Typically the CSP.</description>
      </role>
      <role id="content-approver">
         <title>System Security Plan Approval</title>
         <description>The individual or individuals accountable for the accuracy of this SSP.</description>
      </role>
      <role id="cloud-service-provider">
         <title>Cloud Service Provider</title>
         <short-name>CSP</short-name>
      </role>
      <role id="system-owner">
         <title>Information System Owner</title>
         <description>The individual within the CSP who is ultimately accountable for everything related to this system.</description>
      </role>
      <role id="authorizing-official">
         <title>Authorizing Official</title>
         <description>The individual or individuals who must grant this system an authorization to operate.</description>
      </role>
      <role id="authorizing-official-poc">
         <title>Authorizing Official's Point of Contact</title>
         <description>The individual representing the authorizing official.</description>
      </role>
      <role id="system-poc-management">
         <title>Information System Management Point of Contact (POC)</title>
         <description>The highest level manager who responsible for system operation on behalf of the System Owner.</description>
      </role>
      <role id="system-poc-technical">
         <title>Information System Technical Point of Contact</title>
         <description>The individual or individuals leading the technical operation of the system.</description>
      </role>
      <role id="system-poc-other">
         <title>General Point of Contact (POC)</title>
         <description>A general point of contact for the system, designated by the system owner.</description>
      </role>
      <role id="information-system-security-officer">
         <title>System Information System Security Officer (or Equivalent)</title>
         <description>The individual accountable for the security posture of the system on behalf of the system owner.</description>
      </role>
      <role id="privacy-poc">
         <title>Privacy Official's Point of Contact</title>
         <description>The individual responsible for the privacy threshold analysis and if necessary the privacy impact assessment.</description>
      </role>
      <role id="asset-owner">
         <title>Owner of an inventory item within the system.</title>
      </role>
      <role id="asset-administrator">
         <title>Administrative responsibility an inventory item within the system.</title>
      </role>
      <role id="isa-poc-local">
         <title>ICA POC (Local)</title>
         <description>The point of contact for an interconnection on behalf of this system.</description>
         <remarks>
            <p>Remove this role if there are no ICAs.</p>
         </remarks>
      </role>
      <role id="isa-poc-remote">
         <title>ICA POC (Remote)</title>
         <description>The point of contact for an interconnection on behalf of this external system to which this system connects.</description>
         <remarks>
            <p>Remove this role if there are no ICAs.</p>
         </remarks>
      </role>
      <role id="isa-authorizing-official-local">
         <title>ICA Signatory (Local)</title>
         <description>Responsible for signing an interconnection security agreement on behalf of this system.</description>
         <remarks>
            <p>Remove this role if there are no ICAs.</p>
         </remarks>
      </role>
      <role id="isa-authorizing-official-remote">
         <title>ICA Signatory (Remote)</title>
         <description>Responsible for signing an interconnection security agreement on behalf of the external system to which this system connects.</description>
         <remarks>
            <p>Remove this role if there are no ICAs.</p>
         </remarks>
      </role>
      <role id="consultant">
         <title>Consultant</title>
         <description>Any consultants involved with developing or maintaining this content.</description>
      </role>
      <role id="admin-unix">
         <title>[SAMPLE]Unix Administrator</title>
         <description>This is a sample role.</description>
      </role>
      <role id="admin-client">
         <title>[SAMPLE]Client Administrator</title>
         <description>This is a sample role.</description>
      </role>
      <role id="program-director">
         <title>[SAMPLE]Program Director</title>
         <description>This is a sample role.</description>
      </role>
      <role id="fedramp-pmo">
         <title>Federal Risk and Authorization Management Program (FedRAMP) Program Management Office (PMO)</title>
         <short-name>FedRAMP PMO</short-name>
      </role>
      <role id="fedramp-jab">
         <title>Federal Risk and Authorization Management Program (FedRAMP) Joint Authorization Board (JAB)</title>
         <short-name>FedRAMP JAB</short-name>
      </role>
      <location uuid="27b78960-59ef-4619-82b0-ae20b9c709ac">
         <title>CSP HQ</title>
         <address type="work">
            <addr-line>Suite 0000</addr-line>
            <addr-line>1234 Some Street</addr-line>
            <city>Haven</city>
            <state>ME</state>
            <postal-code>00000</postal-code>
         </address>
         <remarks>
            <p>There must be one location identifying the CSP's primary business address, such as the CSP's HQ, or the address of the system owner's primary business location.</p>
         </remarks>
      </location>
      <location uuid="16adcc8d-65d8-4583-80d3-9cf007744fec">
         <title>Primary Data Center</title>
         <address>
            <addr-line>2222 Main Street</addr-line>
            <city>Anywhere</city>
            <state>--</state>
            <postal-code>00000-0000</postal-code>
         </address>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="data-center"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="primary-data-center"/>
         <remarks>
            <p>There must be one location for each data center.</p>
            <p>There must be at least two data centers.</p>
            <p>For a data center, briefly summarize the components at this location.</p>
            <p>All data centers must have a conformity tag of "data-center".</p>
            <p>A primary data center must also have a conformity tag of "primary-data-center".</p>
         </remarks>
      </location>
      <location uuid="ad321514-7b9f-4374-8409-efb18eea6e5d">
         <title>Secondary Data Center</title>
         <address>
            <addr-line>3333 Small Road</addr-line>
            <city>Anywhere</city>
            <state>--</state>
            <postal-code>00000-0000</postal-code>
         </address>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="data-center"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="alternate-data-center"/>
         <remarks>
            <p>There must be one location for each data center.</p>
            <p>There must be at least two data centers.</p>
            <p>For a data center, briefly summarize the components at this location.</p>
            <p>All data centers must have a conformity tag of "data-center"</p>
            <p>An alternate or backup data center must also have a conformity tag of "alternate-data-center".</p>
         </remarks>
      </location>
      <party uuid="6b286b5d-8f07-4fa7-8847-1dd0d88f73fb" type="organization">
         <name>Cloud Service Provider (CSP) Name</name>
         <short-name>CSP Acronym/Short Name</short-name>
         <location-uuid>27b78960-59ef-4619-82b0-ae20b9c709ac</location-uuid>
         <remarks>
            <p>Replace sample CSP information.</p>
         </remarks>
      </party>
      <party uuid="77e0e2c8-2560-4fe9-ac78-c3ff4ffc9f6d" type="organization">
         <name>Federal Risk and Authorization Management Program: Program Management Office</name>
         <short-name>FedRAMP PMO</short-name>
         <link href="https://fedramp.gov"/>
         <email-address>info@fedramp.gov</email-address>
         <address type="work">
            <addr-line>1800 F St. NW</addr-line>
            <addr-line/>
            <city>Washington</city>
            <state>DC</state>
            <postal-code/>
            <country>US</country>
         </address>
         <remarks>
            <p>This party entry must be present in a FedRAMP SSP.</p>
            <p>The uuid may be different; however, the uuid must be associated with the "fedramp-pmo" role in the responsible-party assemblies.</p>
         </remarks>
      </party>
      <party uuid="49017ec3-9f51-4dbd-9253-858c2b1295fd" type="organization">
         <name>Federal Risk and Authorization Management Program: Joint Authorization Board</name>
         <short-name>FedRAMP JAB</short-name>
         <remarks>
            <p>This party entry must be present in a FedRAMP SSP.</p>
            <p>The uuid may be different; however, the uuid must be associated with the "fedramp-jab" role in the responsible-party assemblies.</p>
         </remarks>
      </party>
      <party uuid="78992555-4a99-4eaa-868c-f2c249679dd3" type="organization">
         <name>External Organization</name>
         <short-name>External</short-name>
         <remarks>
            <p>Generic placeholder for any external organization.</p>
         </remarks>
      </party>
      <party uuid="f595397b-cbe4-4a87-8c86-9bff91c4e7fd" type="organization">
         <name>Agency Name</name>
         <short-name>A.N.</short-name>
         <remarks>
            <p>Generic placeholder for an authorizing agency.</p>
         </remarks>
      </party>
      <party uuid="8e3d39da-4851-4d2a-adb5-4b5585ded952" type="organization">
         <name>Name of Consulting Org</name>
         <short-name>NOCO</short-name>
         <link href="https://consulting.sample"/>
         <email-address>poc@consulting.sample</email-address>
         <address type="work">
            <addr-line>3333 Corporate Way</addr-line>
            <city>Washington</city>
            <state>DC</state>
            <postal-code/>
            <country>US</country>
         </address>
      </party>
      <party uuid="80361ec4-bfce-4b5c-85c8-313d6ebd220b" type="organization">
         <name>[SAMPLE]Remote System Org Name</name>
      </party>
      <party uuid="09ad840f-aa79-43aa-9f22-25182c2ab11b" type="person">
         <name>[SAMPLE]ICA POC's Name</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>person@ica.org.example</email-address>
         <telephone-number>202-555-1212</telephone-number>
         <member-of-organization>80361ec4-bfce-4b5c-85c8-313d6ebd220b</member-of-organization>
      </party>
      <party uuid="f0bc13a4-3303-47dd-80d3-380e159c8362" type="organization">
         <name>[SAMPLE]Example IaaS Provider</name>
         <short-name>E.I.P.</short-name>
         <remarks>
            <p>Underlying service provider. Leveraged Authorization.</p>
         </remarks>
      </party>
      <party uuid="3360e343-9860-4bda-9dfc-ff427c3dfab6" type="person">
         <name>[SAMPLE]Person Name 1</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0001</telephone-number>
         <address>
            <addr-line>Mailstop A-1</addr-line>
         </address>
         <location-uuid>27b78960-59ef-4619-82b0-ae20b9c709ac</location-uuid>
         <member-of-organization>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</member-of-organization>
      </party>
      <party uuid="36b8d6c0-3b25-42cc-b529-cf4066145cdd" type="person">
         <name>[SAMPLE]Person Name 2</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0002</telephone-number>
         <address type="work">
            <addr-line>Address Line</addr-line>
            <city>City</city>
            <state>ST</state>
            <postal-code>00000</postal-code>
            <country>US</country>
         </address>
         <member-of-organization>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</member-of-organization>
      </party>
      <party uuid="0cec09d9-20c6-470b-9ffc-85763375880b" type="person">
         <name>[SAMPLE]Person Name 3</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0003</telephone-number>
         <address type="work">
            <addr-line>Address Line</addr-line>
            <city>City</city>
            <state>ST</state>
            <postal-code>00000</postal-code>
            <country>US</country>
         </address>
         <member-of-organization>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</member-of-organization>
      </party>
      <party uuid="f75e21f6-43d8-46ab-890d-7f2eebc5a830" type="person">
         <name>[SAMPLE]Person Name 4</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0004</telephone-number>
         <address type="work">
            <addr-line>Address Line</addr-line>
            <city>City</city>
            <state>ST</state>
            <postal-code>00000</postal-code>
            <country>US</country>
         </address>
         <member-of-organization>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</member-of-organization>
      </party>
      <party uuid="132953a9-640c-46f7-9de9-3fa15ec99361" type="person">
         <name>[SAMPLE]Person Name 5</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0005</telephone-number>
         <address type="work">
            <addr-line>Address Line</addr-line>
            <city>City</city>
            <state>ST</state>
            <postal-code>00000</postal-code>
            <country>US</country>
         </address>
         <member-of-organization>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</member-of-organization>
      </party>
      <party uuid="4fded5fd-7a65-47ea-bd76-df57c46e27d1" type="person">
         <name>[SAMPLE]Person Name 6</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0006</telephone-number>
         <address type="work">
            <addr-line>Address Line</addr-line>
            <city>City</city>
            <state>ST</state>
            <postal-code>00000</postal-code>
            <country>US</country>
         </address>
         <member-of-organization>78992555-4a99-4eaa-868c-f2c249679dd3</member-of-organization>
      </party>
      <party uuid="db234cb7-1776-425c-9ac4-b067c1723011" type="person">
         <name>[SAMPLE]Person Name 7</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0007</telephone-number>
         <address type="work">
            <addr-line>Address Line</addr-line>
            <city>City</city>
            <state>ST</state>
            <postal-code>00000</postal-code>
            <country>US</country>
         </address>
         <member-of-organization>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</member-of-organization>
      </party>
      <party uuid="b306f5af-b93a-4a7f-a2b2-37a44fc92a79" type="organization">
         <name>[SAMPLE] IT Department</name>
      </party>
      <party uuid="59cdc953-5902-4fa4-a878-f3163854624c" type="organization">
         <name>[SAMPLE]Security Team</name>
      </party>
      <responsible-party role-id="cloud-service-provider">
         <party-uuid>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="prepared-by">
         <party-uuid>3360e343-9860-4bda-9dfc-ff427c3dfab6</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="prepared-for">
         <!-- Exacty one -->
         <party-uuid>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</party-uuid>
      </responsible-party>
      <responsible-party role-id="content-approver">
         <party-uuid>3360e343-9860-4bda-9dfc-ff427c3dfab6</party-uuid>
         <party-uuid>36b8d6c0-3b25-42cc-b529-cf4066145cdd</party-uuid>
         <remarks>
            <p>One or more</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="system-owner">
         <party-uuid>3360e343-9860-4bda-9dfc-ff427c3dfab6</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="authorizing-official">
         <party-uuid>49017ec3-9f51-4dbd-9253-858c2b1295fd</party-uuid>
         <party-uuid>4fded5fd-7a65-47ea-bd76-df57c46e27d1</party-uuid>
         <remarks>
            <p>One or more</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="system-poc-management">
         <party-uuid>0cec09d9-20c6-470b-9ffc-85763375880b</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="system-poc-technical">
         <party-uuid>f75e21f6-43d8-46ab-890d-7f2eebc5a830</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="information-system-security-officer">
         <party-uuid>132953a9-640c-46f7-9de9-3fa15ec99361</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="authorizing-official-poc">
         <party-uuid>4fded5fd-7a65-47ea-bd76-df57c46e27d1</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="privacy-poc">
         <party-uuid>db234cb7-1776-425c-9ac4-b067c1723011</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="fedramp-pmo">
         <party-uuid>77e0e2c8-2560-4fe9-ac78-c3ff4ffc9f6d</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="fedramp-jab">
         <party-uuid>49017ec3-9f51-4dbd-9253-858c2b1295fd</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <remarks>
         <p>This OSCAL-based FedRAMP SSP Template can be used for the FedRAMP Low, Moderate, and
            High baselines.</p>
         <p>Guidance for OSCAL-based FedRAMP Tailored content has not yet been developed.</p>
      </remarks>
   </metadata>
   <!-- ====================================================
      Link this SSP to the appropriate FedRAMP baseline using ONE of the import statements below.
      NOTE: This points to a resource at the end of this file with links to both the XML and JSON
            versions of the baseline. Tools must select the appropriate link 
      FedRAMP HIGH Baseline: 
      <import-profile href="#9f1aae37-7359-411f-86c1-768aaab85e63"/>
      FedRAMP MODERATE Baseline:
      <import-profile href="#890170c3-d4fa-4d25-ab96-8e4bf7cc237c"/>
      FedRAMP LOW Baseline: 
      <import-profile href="#2acaf846-5496-4d36-8565-9a15b48aef2c"/>
   ==================================================== -->
   <import-profile href="#890170c3-d4fa-4d25-ab96-8e4bf7cc237c"/>
   <system-characteristics>
      <!-- Table 1-1 Information System Name and Title -->
      <system-id identifier-type="https://fedramp.gov">F00000000</system-id>
      <system-name>System's Full Name</system-name>
      <system-name-short>System's Short Name or Acronym</system-name-short>
      <!-- Section 9.1 (Old SSP Format Section 8.1) -->
      <description>
         <p>Describe the purpose and functions of this system here.</p>
      </description>
      <!-- FedRAMP Authorizatoin Type: fedramp-jab, fedramp-agency, or fedramp-li-saas -->
      <prop ns="https://fedramp.gov/ns/oscal"
            name="authorization-type"
            value="fedramp-agency"/>
      <!-- Section 2.3 Digital Identity Determination and Attachment 3, Digital Identity Worksheet -->
      <!-- 1 = low, 2= moderate, 3 = high  -->
      <prop ns="https://fedramp.gov/ns/oscal"
            name="security-eauth-level"
            class="security-eauth"
            value="2"/>
      <!-- Attachment 3, Digital Identity Worksheet: Additional Detail - Not Required -->
      <prop name="identity-assurance-level" value="2"/>
      <prop name="authenticator-assurance-level" value="2"/>
      <prop name="federation-assurance-level" value="2"/>
      <!-- Table 8-1 Service Layers Represented in this SSP -->
      <prop name="cloud-service-model" value="saas">
         <remarks>
            <p>Remarks are required if service model is "other". Optional otherwise.</p>
         </remarks>
      </prop>
      <!-- Table 8-2 Cloud Deployment Model Represented in this SSP -->
      <prop name="cloud-deployment-model" value="government-only-cloud">
         <remarks>
            <p>Remarks are required if deployment model is "hybrid-cloud" or "other". Optional
               otherwise.</p>
         </remarks>
      </prop>
      <!-- Table 2-1 Security Categorization and 2-4 Baseline Security Configuration -->
      <security-sensitivity-level>low</security-sensitivity-level>
      <!-- Table 2-2, Table 15-9, and Attachment 4 -->
      <system-information>
         <!-- Attachment 4, PTA/PIA Designation -->
         <prop name="privacy-sensitive" value="yes"/>
         <!-- Attachment 4, PTA Qualifying Questions -->
         <!--Does the ISA collect, maintain, or share PII in any identifiable form? -->
         <prop ns="https://fedramp.gov/ns/oscal"
               name="pta-1"
               class="pta"
               value="yes"/>
         <!--Does the ISA collect, maintain, or share PII information from or about the public? -->
         <prop ns="https://fedramp.gov/ns/oscal"
               name="pta-2"
               class="pta"
               value="yes"/>
         <!--Has a Privacy Impact Assessment ever been performed for the ISA? -->
         <prop ns="https://fedramp.gov/ns/oscal"
               name="pta-3"
               class="pta"
               value="yes"/>
         <!--Is there a Privacy Act System of Records Notice (SORN) for this ISA system? (If so, please specify the SORN ID.) -->
         <prop ns="https://fedramp.gov/ns/oscal"
               name="pta-4"
               class="pta"
               value="no"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="sorn-id"
               class="pta"
               value="[No SORN ID]"/>
         <information-type uuid="06ecba4f-db96-4491-a3a2-7febfa227435">
            <title>Information Type Name</title>
            <description>
               <p>A description of the information.</p>
            </description>
            <categorization system="https://doi.org/10.6028/NIST.SP.800-60v2r1">
               <information-type-id>C.2.4.1</information-type-id>
            </categorization>
            <confidentiality-impact>
               <base>fips-199-moderate</base>
               <selected>fips-199-moderate</selected>
               <adjustment-justification>
                  <p>Required if the base and selected values do not match.</p>
               </adjustment-justification>
            </confidentiality-impact>
            <integrity-impact>
               <base>fips-199-moderate</base>
               <selected>fips-199-moderate</selected>
               <adjustment-justification>
                  <p>Required if the base and selected values do not match.</p>
               </adjustment-justification>
            </integrity-impact>
            <availability-impact>
               <base>fips-199-moderate</base>
               <selected>fips-199-moderate</selected>
               <adjustment-justification>
                  <p>Required if the base and selected values do not match.</p>
               </adjustment-justification>
            </availability-impact>
         </information-type>
      </system-information>
      <!-- Table 2-3 Security Impact Level -->
      <security-impact-level>
         <security-objective-confidentiality>fips-199-moderate</security-objective-confidentiality>
         <security-objective-integrity>fips-199-moderate</security-objective-integrity>
         <security-objective-availability>fips-199-moderate</security-objective-availability>
      </security-impact-level>
      <!-- Section 2.3 Digital Identity Determination & Table 7-1 System Status -->
      <status state="operational">
         <remarks>
            <p>Remarks are required if status/state is "other". Optional otherwise.</p>
         </remarks>
      </status>
      <!-- Table 8-3 Leveraged Authorizations (Typically 0 or 1) -->
      <!-- ***** REWORKING LEVERAGED AUTHORIZATIONS MODEL WITH NIST ****** -->
      <!-- Section 9.2, Figure 9-1. Authorization Boundary Diagram -->
      <authorization-boundary>
         <description>
            <p>A holistic, top-level explanation of the FedRAMP authorization boundary.</p>
         </description>
         <diagram uuid="dbf46c27-52a9-49c4-beb6-b6399cd75497">
            <description>
               <p>A diagram-specific explanation.</p>
            </description>
            <link href="#d2eb3c18-6754-4e3a-a933-03d289e3fad5" rel="diagram"/>
            <caption>Authorization Boundary Diagram</caption>
         </diagram>
      </authorization-boundary>
      <!-- Section 9.4, Figure 9-2. Network Diagram -->
      <network-architecture>
         <description>
            <p>A holistic, top-level explanation of the network architecture.</p>
         </description>
         <diagram uuid="e97c3395-433a-48c1-8cc7-dd1e1555941c">
            <description>
               <p>A diagram-specific explanation.</p>
            </description>
            <link href="#61081e81-850b-43c1-bf43-1ecbddcb9e7f" rel="diagram"/>
            <caption>Network Diagram</caption>
         </diagram>
      </network-architecture>
      <!-- Section 10, Figure 10-1. Data Flow Diagram -->
      <data-flow>
         <description>
            <p>A holistic, top-level explanation of the system's data flows.</p>
         </description>
         <diagram uuid="e3b98448-4219-46a5-b229-412423c566f3">
            <description>
               <p>A diagram-specific explanation.</p>
            </description>
            <link href="#ac5d7535-f3b8-45d3-bf3b-735c82c64547" rel="diagram"/>
            <caption>Data Flow Diagram</caption>
         </diagram>
      </data-flow>
   </system-characteristics>
   <system-implementation>
      <prop ns="https://fedramp.gov/ns/oscal" name="users-internal" value="0"/>
      <prop ns="https://fedramp.gov/ns/oscal" name="users-external" value="0"/>
      <prop ns="https://fedramp.gov/ns/oscal"
            name="users-internal-future"
            value="0"/>
      <prop ns="https://fedramp.gov/ns/oscal"
            name="users-external-future"
            value="0"/>
      <leveraged-authorization uuid="5a9c98ab-8e5e-433d-a7bd-515c07cd1497">
         <title>Name of Underlying System</title>
         <party-uuid>f0bc13a4-3303-47dd-80d3-380e159c8362</party-uuid>
         <date-authorized>2015-01-01</date-authorized>
         <remarks>
            <p>The leveraged-authorizaton assembly is supposed to have a required uuid flag instead of an optional id flag. This will be fixed in the syntax shortly.</p>
            <p>Use one leveraged-authorization assembly for each underlying system. (In the legacy world, these may be general support systems.</p>
         </remarks>
      </leveraged-authorization>
      <user uuid="9cb0fab0-78bd-44ba-bcb8-3e9801cc952f">
         <title>[SAMPLE]Unix System Administrator</title>
         <prop ns="https://fedramp.gov/ns/oscal" name="sensitivity" value="high"/>
         <prop name="privilege-level" value="privileged"/>
         <prop name="type" value="internal"/>
         <role-id>admin-unix</role-id>
         <authorized-privilege>
            <title>Full administrative access (root)</title>
            <function-performed>Add/remove users and hardware</function-performed>
            <function-performed>install and configure software</function-performed>
            <function-performed>OS updates, patches and hotfixes</function-performed>
            <function-performed>perform backups</function-performed>
         </authorized-privilege>
      </user>
      <user uuid="16ec71e7-025c-43e4-9d3f-3acb485fac2e">
         <title>[SAMPLE]Client Administrator</title>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="sensitivity"
               value="moderate"/>
         <prop name="privilege-level" value="non-privileged"/>
         <prop name="type" value="external"/>
         <role-id>external</role-id>
         <authorized-privilege>
            <title>Portal administration</title>
            <function-performed>Add/remove client users</function-performed>
            <function-performed>Create, modify and delete client applications</function-performed>
         </authorized-privilege>
      </user>
      <user uuid="ba7708c1-4041-48ab-9b7b-1ddb5e175fe0">
         <title>[SAMPLE]Program Director</title>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="sensitivity"
               value="limited"/>
         <prop name="privilege-level" value="no-logical-access"/>
         <prop name="type" value="internal"/>
         <role-id>program-director</role-id>
         <authorized-privilege>
            <title>Administrative Access Approver</title>
            <function-performed>Approves access requests for administrative accounts.</function-performed>
         </authorized-privilege>
         <authorized-privilege>
            <title>Access Approver</title>
            <function-performed>Approves access requests for administrative accounts.</function-performed>
         </authorized-privilege>
      </user>
      <component type="this-system" uuid="3d035035-dfca-4240-9787-a7e8561e1c7d">
         <title>This System</title>
         <description>
            <p>The system described by this SSP.</p>
            <p>This text was auto-generated by the OSCAL M3-RC1 data upgrade converter.</p>
         </description>
         <status state="operational"/>
      </component>
      <component uuid="60f92bcf-f353-4236-9803-2a5d417555f4" type="system">
         <title>This System</title>
         <description>
            <p>The entire system as depicted in the system authorization boundary</p>
         </description>
         <status state="operational"/>
      </component>
      <component uuid="e82e6e07-0c62-417e-8a19-3744991b4c65" type="system">
         <title>Name of Leveraged System</title>
         <description>
            <p>If the leveraged system owner provides a UUID for their system (such as in an OSCAL-based CRM), it should be used as the UUID for this component.</p>
         </description>
         <prop name="leveraged-authorization-uuid"
               value="5a9c98ab-8e5e-433d-a7bd-515c07cd1497"/>
         <status state="operational"/>
      </component>
      <component uuid="95beec7e-6f82-4aaa-8211-969cd7c1f1ab" type="validation">
         <title>[SAMPLE]Module Name</title>
         <description>
            <p>[SAMPLE]FIPS 140-2 Validated Module</p>
         </description>
         <prop ns="https://fedramp.gov/ns/oscal" name="cert-no" value="0000"/>
         <link href="https://csrc.nist.gov/projects/cryptographic-module-validation-program/Certificate/0000"/>
         <status state="operational"/>
      </component>
      <component uuid="05ceb8df-52e7-49db-9719-891723f366bd" type="software">
         <title>[SAMPLE]Product Name</title>
         <description>
            <p>FUNCTION: Describe typical component function.</p>
         </description>
         <prop name="asset-type" value="os"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="scan-type"
               value="infrastructure"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="vendor-name"
               value="Vendor Name"/>
         <prop name="model" value="Model Number"/>
         <prop name="version" value="Version Number"/>
         <prop name="patch-level" value="Patch Level"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="validation"
               value="fips-module-1"/>
         <status state="operational"/>
         <responsible-role role-id="admin-unix">
            <party-uuid>3360e343-9860-4bda-9dfc-ff427c3dfab6</party-uuid>
         </responsible-role>
         <remarks>
            <p>COMMENTS: Provide other comments as needed.</p>
         </remarks>
      </component>
      <component uuid="1541015b-6d19-42cb-a991-624cc082ed4d" type="hardware">
         <title>[SAMPLE]Product</title>
         <description>
            <p>FUNCTION: Describe typical component function.</p>
         </description>
         <prop name="asset-type" value="database"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="scan-type"
               value="infrastructure"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="scan-type" value="database"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="vendor-name"
               value="Vendor Name"/>
         <prop name="model" value="Model Number"/>
         <prop name="version" value="Version Number"/>
         <status state="operational"/>
         <responsible-role role-id="asset-administrator">
            <party-uuid>b306f5af-b93a-4a7f-a2b2-37a44fc92a79</party-uuid>
         </responsible-role>
         <responsible-role role-id="asset-owner">
            <party-uuid>36b8d6c0-3b25-42cc-b529-cf4066145cdd</party-uuid>
         </responsible-role>
         <remarks>
            <p>COMMENTS: Provide other comments as needed.</p>
         </remarks>
      </component>
      <component uuid="6617f60b-8bac-422d-9939-94f43ddc0f7a" type="os">
         <title>OS Sample</title>
         <description>
            <p>None</p>
         </description>
         <prop name="asset-type" value="os"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="scan-type"
               value="infrastructure"/>
         <prop name="baseline-configuration-name" value="Baseline Config. Name"/>
         <prop name="allows-authenticated-scan" value="yes"/>
         <status state="operational"/>
      </component>
      <component uuid="120f1404-7c9f-4856-a247-63bd89d9e769" type="software">
         <title>Database Sample</title>
         <description>
            <p>None</p>
         </description>
         <prop name="asset-type" value="database"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="scan-type" value="database"/>
         <prop name="baseline-configuration-name" value="Baseline Config. Name"/>
         <prop name="allows-authenticated-scan" value="yes"/>
         <status state="operational"/>
      </component>
      <component uuid="8f230d84-2f9b-44a3-acdb-019566ab2554" type="software">
         <title>Appliance Sample</title>
         <description>
            <p>None</p>
         </description>
         <prop name="asset-type" value="appliance"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="scan-type" value="web"/>
         <prop name="login-url" value="https://admin.offering.com/login"/>
         <prop name="baseline-configuration-name" value="Baseline Config. Name"/>
         <prop name="allows-authenticated-scan" value="no">
            <remarks>
               <p>Vendor appliance. No admin-level access.</p>
            </remarks>
         </prop>
         <status state="operational"/>
      </component>
      <component uuid="d5841417-de4c-4d84-ab3c-39dd1fd32a96" type="service">
         <title>[SAMPLE]Service Name</title>
         <description>
            <p>Describe the service</p>
         </description>
         <purpose>Describe the reason the service is needed.</purpose>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="used-by"
               value="What uses this service?"/>
         <prop name="protocol" value=""/>
         <status state="operational"/>
         <protocol name="http">
            <port-range start="80" end="80" transport="TCP"/>
         </protocol>
         <protocol name="https">
            <port-range start="443" end="443" transport="TCP"/>
         </protocol>
         <remarks>
            <p>Section 10.2, Table 10-1. Ports, Protocols and Services</p>
            <p>
               <b>SERVICES ARE NOW COMPONENTS WITH type='service'</b>
            </p>
         </remarks>
      </component>
      <component uuid="2812ef51-61e7-4505-afbb-da5a073a2a5b" type="interconnection">
         <title>[EXAMPLE]Authorized Connection Information System Name</title>
         <description>
            <p>Briefly describe the interconnection.</p>
         </description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="service-processor"
               value="[SAMPLE]Telco Name"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="ipv4-address"
               class="local"
               value="10.1.1.1"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="ipv4-address"
               class="remote"
               value="10.2.2.2"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="direction"
               value="incoming-outgoing"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="information"
               value="Describe the information being transmitted."/>
         <prop ns="https://fedramp.gov/ns/oscal" name="port" value="80"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="circuit" value="1"/>
         <prop name="connection-security"
               ns="https://fedramp.gov/ns/oscal"
               value="ipsec">
            <remarks>
               <p>If "other", remarks are required. Optional otherwise.</p>
            </remarks>
         </prop>
         <link href="#9d6cf2b4-8e88-4040-a33c-7bc206553a1a" rel="agreement"/>
         <status state="operational"/>
         <responsible-role role-id="isa-poc-remote">
            <party-uuid>09ad840f-aa79-43aa-9f22-25182c2ab11b</party-uuid>
         </responsible-role>
         <responsible-role role-id="isa-poc-local">
            <party-uuid>09ad840f-aa79-43aa-9f22-25182c2ab11b</party-uuid>
         </responsible-role>
         <responsible-role role-id="isa-authorizing-official-remote">
            <party-uuid>09ad840f-aa79-43aa-9f22-25182c2ab11b</party-uuid>
         </responsible-role>
         <responsible-role role-id="isa-authorizing-official-local">
            <party-uuid>09ad840f-aa79-43aa-9f22-25182c2ab11b</party-uuid>
         </responsible-role>
         <remarks>
            <p>Optional notes about this interconnection</p>
         </remarks>
      </component>
      <inventory-item uuid="98e37f90-fbb5-4177-badb-9b55229cc183">
         <description>
            <p>Flat-File Example (No implemented-component).</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.1.1.1"/>
         <prop name="ipv6-address" value="0000:0000:0000:0000"/>
         <prop name="virtual" value="no"/>
         <prop name="public" value="no"/>
         <prop name="fqdn" value="dns.name"/>
         <prop name="uri" value="uniform.resource.identifier"/>
         <prop name="netbios-name" value="netbios-name"/>
         <prop name="mac-address" value="00:00:00:00:00:00"/>
         <prop name="software-name" value="software-name"/>
         <prop name="version" value="V 0.0.0"/>
         <prop name="asset-type" value="os"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="vendor-name"
               value="Vendor Name"/>
         <prop name="model" value="Model Number"/>
         <prop name="patch-level" value="Patch-Level"/>
         <prop name="serial-number" value="Serial #"/>
         <prop name="asset-tag" value="Asset Tag"/>
         <prop name="vlan-id" value="VLAN Identifier"/>
         <prop name="network-id" value="Network Identifier"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="scan-type"
               value="infrastructure"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="scan-type" value="database"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="validation"
               value="component-id"/>
         <prop name="allows-authenticated-scan" value="no">
            <remarks>
               <p>If no, explain why. If yes, omit remarks field.</p>
            </remarks>
         </prop>
         <prop name="baseline-configuration-name" value="Baseline Config. Name"/>
         <prop name="physical-location" value="Physical location of Asset"/>
         <prop name="is-scanned" value="yes">
            <remarks>
               <p>If no, explain why. If yes, omit remarks field.</p>
            </remarks>
         </prop>
         <prop name="function" value="Required brief, text-based description.">
            <remarks>
               <p>Optional, longer, formatted description.</p>
            </remarks>
         </prop>
         <responsible-party role-id="asset-owner">
            <party-uuid>db234cb7-1776-425c-9ac4-b067c1723011</party-uuid>
         </responsible-party>
         <responsible-party role-id="asset-administrator">
            <party-uuid>b306f5af-b93a-4a7f-a2b2-37a44fc92a79</party-uuid>
         </responsible-party>
         <remarks>
            <p>COMMENTS: Additional information about this item.</p>
         </remarks>
      </inventory-item>
      <inventory-item uuid="c916d3c5-229e-4786-bf3f-4d71baa0e7a5">
         <description>
            <p>Component Inventory Example</p>
         </description>
         <prop name="asset-id" value="unique-asset-ID"/>
         <prop name="ipv4-address" value="10.2.2.2"/>
         <prop name="ipv6-address" value="0000:0000:0000:0000"/>
         <prop name="mac-address" value="00:00:00:00:00:00"/>
         <prop name="virtual" value="no"/>
         <prop name="public" value="no"/>
         <prop name="fqdn" value="dns.name"/>
         <prop name="uri" value="uniform.resource.locator"/>
         <prop name="netbios-name" value="netbios-name"/>
         <prop name="patch-level" value="Patch-Level"/>
         <prop name="baseline-configuration-name" value="Baseline Configuration Name"/>
         <prop name="physical-location" value="Physical location of Asset"/>
         <prop name="scan-authenticated"
               ns="https://fedramp.gov/ns/oscal"
               value="no">
            <remarks>
               <p>If no, explain why. If yes, omit remark.</p>
            </remarks>
         </prop>
         <prop name="scan-latest" ns="https://fedramp.gov/ns/oscal" value="yes">
            <remarks>
               <p>If no, explain why. If yes, omit remark.</p>
            </remarks>
         </prop>
         <responsible-party role-id="asset-owner">
            <party-uuid>3360e343-9860-4bda-9dfc-ff427c3dfab6</party-uuid>
         </responsible-party>
         <responsible-party role-id="asset-administrator">
            <party-uuid>b306f5af-b93a-4a7f-a2b2-37a44fc92a79</party-uuid>
         </responsible-party>
         <implemented-component component-uuid="05ceb8df-52e7-49db-9719-891723f366bd"/>
         <remarks>
            <p>COMMENTS: If needed, provide additional information about this inventory item.</p>
         </remarks>
      </inventory-item>
      <inventory-item uuid="37c00d5a-ccf2-4112-a0ee-8460be8cff40">
         <description>
            <p>None.</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.3.3.3"/>
         <prop name="is-scanned" value="yes"/>
         <implemented-component component-uuid="1541015b-6d19-42cb-a991-624cc082ed4d"/>
      </inventory-item>
      <inventory-item uuid="fb7a84fb-7e30-4f5b-9997-2ecd4d270bdd">
         <description>
            <p>None.</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.4.4.4"/>
         <prop name="is-scanned" value="yes"/>
         <implemented-component component-uuid="05ceb8df-52e7-49db-9719-891723f366bd"/>
      </inventory-item>
      <inventory-item uuid="779d4e89-bba6-432c-b50d-d699fe534129">
         <description>
            <p>None.</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.5.5.5"/>
         <prop name="is-scanned" value="yes"/>
         <implemented-component component-uuid="8f230d84-2f9b-44a3-acdb-019566ab2554"/>
      </inventory-item>
      <inventory-item uuid="20b207d5-5e77-4501-b02d-5d2a6e88db85">
         <description>
            <p>None.</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.6.6.6"/>
         <prop name="is-scanned" value="no">
            <remarks>
               <p>Asset wasn't running at time of scan.</p>
            </remarks>
         </prop>
         <implemented-component component-uuid="05ceb8df-52e7-49db-9719-891723f366bd"/>
      </inventory-item>
      <inventory-item uuid="79b4f0d1-91ab-49e8-af28-045c12aa9272">
         <description>
            <p>None.</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.7.7.7"/>
         <prop name="is-scanned" value="yes"/>
         <implemented-component component-uuid="1541015b-6d19-42cb-a991-624cc082ed4d"/>
      </inventory-item>
      <inventory-item uuid="b31b360d-b58b-4c7c-b344-68e17238d858">
         <description>
            <p>None.</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.8.8.8"/>
         <prop name="is-scanned" value="no">
            <remarks>
               <p>Asset wasn't running at time of scan.</p>
            </remarks>
         </prop>
         <implemented-component component-uuid="05ceb8df-52e7-49db-9719-891723f366bd"/>
      </inventory-item>
      <inventory-item uuid="55b55b3d-3bd9-409a-bc87-3b9a2074bacd">
         <description>
            <p>IPv4 Production Subnet.</p>
         </description>
         <prop name="asset-id" value="10.10.10.0"/>
         <prop name="ipv4-subnet" value="10.10.10.0/24"/>
         <prop name="is-scanned" value="yes"/>
      </inventory-item>
      <inventory-item uuid="c0dbefa1-c8e8-4ca8-bd73-67cb7b1fa3f6">
         <description>
            <p>IPv4 Management Subnet.</p>
         </description>
         <prop name="asset-id" value="10.10.20.0"/>
         <prop name="ipv4-subnet" value="10.10.20.0/24"/>
         <prop name="is-scanned" value="yes"/>
      </inventory-item>
   </system-implementation>
   <!-- Section 13 -->
   <control-implementation>
      <description>
         <p>FedRAMP SSP Template Section 13</p>
         <p>This description field is required by OSCAL. FedRAMP does not require any specific
            information here.</p>
      </description>
      <implemented-requirement control-id="ac-1" uuid="eee8697a-bc39-45aa-accc-d3e534932efb">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <set-parameter param-id="ac-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ac-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ac-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="ac-1_stmt.a" uuid="fb4d039a-dc4f-46f5-9c1f-f6343eaf69bc">
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="3f5612a4-cd1d-4c47-8cae-75d2eaa332cd">
               <description>
                  <p>Describe how Part a is satisfied within the system.</p>
               </description>
            </by-component>
            <remarks>
               <p>The specified component is the system itself.</p>
               <p>Any control implementation response that can not be associated with another component is associated with the component representing the system.</p>
            </remarks>
         </statement>
         <statement statement-id="ac-1_stmt.a.1"
                    uuid="0afdccce-b5ed-4127-ae19-cfbdd17d775e">
            <link href="#090ab379-2089-4830-b9fd-26d0729e22e9" rel="policy"/>
            <remarks>
               <p>This identifies a policy (attached in resources) that satisfies this control.</p>
            </remarks>
         </statement>
         <statement statement-id="ac-1_stmt.a.2"
                    uuid="ffaf5e02-3055-40df-bbeb-3b94e834a43f">
            <link href="#att-process-1" rel="process"/>
            <remarks>
               <p>This identifies a process (attached in resources) that satisfies this control.</p>
            </remarks>
         </statement>
         <statement statement-id="ac-1_stmt.b.1"
                    uuid="b46f97ec-55c1-4249-a9b9-3a228f1e3791">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="26afd0af-464a-4a33-8a83-f942ec5ef182">
               <description>
                  <p>Describe how Part b-1 is satisfied.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ac-1_stmt.b.2"
                    uuid="59c67969-3d5c-45f1-8e3e-1e642249633f">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="37e6602e-4c94-486f-ad10-64ac19dfa099">
               <description>
                  <p>Describe how Part b-2 is satisfied.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ac-2" uuid="7a36cf53-156d-4d1f-9a8b-433f61cc57b7">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="Completion Date"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="partial">
            <remarks>
               <p>Describe the portion of the control that is not satisfied.</p>
            </remarks>
         </prop>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="not-applicable">
            <remarks>
               <p>Describe the justification for marking this control Not Applicable.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="customer-configured">
            <remarks>
               <p>Describe any customer-configured requirements for satisfying this control.</p>
            </remarks>
         </prop>
         <set-parameter param-id="ac-2_prm_1">
            <value>[SAMPLE]privileged, non-privileged</value>
         </set-parameter>
         <set-parameter param-id="ac-2_prm_2">
            <value>[SAMPLE]all</value>
         </set-parameter>
         <set-parameter param-id="ac-2_prm_3">
            <value>[SAMPLE]The Access Control Procedure</value>
         </set-parameter>
         <set-parameter param-id="ac-2_prm_4">
            <value>[SAMPLE]annually</value>
         </set-parameter>
         <responsible-role role-id="admin-unix"/>
         <responsible-role role-id="program-director"/>
         <statement statement-id="ac-2_stmt.a" uuid="24a85abb-25ad-4686-850c-5c0e8ab69a0c">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="70bbeee7-f0ae-4502-839f-1db8a8ce9dd9">
               <description>
                  <p>Do not respond to this statement here. Respond within the <code>by-component</code> assembly below.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="8a72663c-28c7-41c2-8739-f1ee2d5761ac">
               <description>
                  <p>For the portion of the control satisfied by this system or its owning organization, describe
                        <strong>how</strong> the control is met.</p>
               </description>
               <prop name="responsibility" value="customer">
                  <remarks>
                     <p>General customer responsibility description.</p>
                  </remarks>
               </prop>
               <remarks>
                  <p>The component-uuid above points to the "this system" component.</p>
                  <p>Any control response content that does not cleanly fit another system component is placed here. This includes customer responsibility content.</p>
                  <p>This can also be used to provide a summary, such as a holistic overview of how multiple components work together.</p>
                  <p>While the "this system" component is not expclicity required within every <code>statement</code>, it will typically be present.</p>
               </remarks>
            </by-component>
            <by-component component-uuid="b7364f67-bf65-4df2-b756-4b9c6b1c4a52"
                          uuid="84de735f-ba37-4bb4-b784-79760f986a40">
               <description>
                  <p>For the portion inherited from an underlying FedRAMP-authorized provider,
                     describe <strong>what</strong> is inherited.</p>
               </description>
               <prop name="responsibility" value="customer">
                  <remarks>
                     <p>Component-specific customer responsibility description.</p>
                  </remarks>
               </prop>
            </by-component>
            <by-component component-uuid="cae07d12-8566-443a-95de-7596b9cac953"
                          uuid="13db02bb-1f33-4f79-8711-ed47c2c3d337">
               <description>
                  <p>For the portion of the control that must be configured by or provided by the
                     customer, describe the customer responsibility here. This is what will appear
                     in the Customer Responsibility Matrix.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="at-1" uuid="c332a6f8-bbe6-4ee9-aaea-d89d251c68df">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <set-parameter param-id="at-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="at-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="at-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <responsible-role role-id="program-director"/>
         <statement statement-id="at-1_stmt.a" uuid="ee5a11fb-9bae-4680-8f8c-575c85d47355">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="8ef2f9ed-bd07-4f93-b897-fd820218a6e6">
               <description>
                  <p>Component-based Approach</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="d3bdee1c-7d84-4ed4-8950-e13256edb7fa">
               <description>
                  <p>Describe how Part a is satisfied.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="at-1_stmt.a.1"
                    uuid="2e8ec7ce-c9c6-4f5f-9d50-3a3b9d3acf65">
            <link href="#090ab379-2089-4830-b9fd-26d0729e22e9" rel="policy"/>
            <remarks>
               <p>This identifies a policy (attached in resources) that satisfies this control.</p>
            </remarks>
         </statement>
         <statement statement-id="at-1_stmt.a.2"
                    uuid="e7f9b618-c092-4b8b-b416-0ee477026726">
            <link href="#att-process-1" rel="process"/>
            <remarks>
               <p>This identifies a process (attached in resources) that satisfies this control.</p>
            </remarks>
         </statement>
         <statement statement-id="at-1_stmt.b.1"
                    uuid="29192f0b-edb1-4820-b951-65ffdc64bb3e">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="ce72c0f1-ec52-49e1-aab3-8580cbca7e5e">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="5a5e5c3e-1108-47f1-a83f-05e0394219db">
               <description>
                  <p>Describe how Part b-1 is satisfied.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="at-1_stmt.b.2"
                    uuid="23a9bfa7-6e3f-4e00-a120-791b26a9157e">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="0ebc6d57-8edf-4275-82af-632afa9b1d18">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="fcc63699-04ab-4b69-b7b9-a13bee6685b3">
               <description>
                  <p>Describe how Part b-2 is satisfied.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="au-1" uuid="381c8d0c-e6ec-41a9-9b16-01657226c70f">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <set-parameter param-id="au-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="au-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="au-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <responsible-role role-id="program-director"/>
         <statement statement-id="au-1_stmt.a" uuid="9a2bd937-226e-4aaf-8261-2cf0c2e3aa10">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="a037eaa7-2fbe-49ab-be46-11d698725918">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="30042cb9-ff85-472f-b769-68bd7bb5bbd9">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="au-1_stmt.b.1"
                    uuid="d01f186f-a14f-4e22-b069-84a55e48a112">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="7d8910b1-109e-48bb-8543-45b8c8dac596">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="f41962c7-b53b-46f8-a84f-4aba25904bb8">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="au-1_stmt.b.2"
                    uuid="ea153acb-2bd0-41d9-8ebd-ba022d31230a">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="39cb5658-b8f6-43e0-9ffe-013dac901c33">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="9ad59f0d-17a2-4f3f-af6a-a8529d692195">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ca-1" uuid="43e388d9-3854-44f6-8c6f-17a6d51ee6a2">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <set-parameter param-id="ca-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ca-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ca-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <responsible-role role-id="program-director"/>
         <statement statement-id="ca-1_stmt.a" uuid="e7bd0a7e-5f92-4769-8cd3-76ad2f663a5c">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="1d38502e-a13f-4da2-aeaa-9e2b3a44c269">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="e5815f1d-ec94-4d98-8896-ec57e339bd7b">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ca-1_stmt.b.1"
                    uuid="b2c3ec86-b976-4e5a-9dc3-4ac2d570765e">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="5cd8b2d9-b194-40ea-a036-4aba6e3ff0cd">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="ca6b2bd5-3ddf-4167-a942-06e1955e49f8">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ca-1_stmt.b.2"
                    uuid="e9474eb8-36d6-4eab-abeb-f9bd17e66b22">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="bad73480-9058-413a-bb09-d111bd8f23aa">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="507b8b9d-2d40-4748-81c9-c5a13c8f8f05">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="cm-1" uuid="c8e45d78-2afe-42ae-80e1-c1e2499a0346">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <set-parameter param-id="cm-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="cm-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="cm-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <responsible-role role-id="program-director"/>
         <statement statement-id="cm-1_stmt.a" uuid="52339583-19b6-4774-9213-50b9f42fe51f">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="8945aafb-fd81-4d38-b9ee-0b153566790f">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="2916ebd5-c45a-466e-b8e9-00dd15b0c94d">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="cm-1_stmt.b.1"
                    uuid="f9cc6f3f-c64f-4fae-9a32-f964ebdc8e74">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="91670e6b-f164-492a-9aad-a9a2d6b8e114">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="678db1d2-a538-4986-ac94-63da312fe3f9">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="cm-1_stmt.b.2"
                    uuid="c548a71f-41d6-4e8c-b400-1764379348c4">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="40745320-eb16-4b16-af80-b18607be9994">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="a871cf91-04c7-4e03-9df6-80b3d5afc9bf">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="cp-1" uuid="13af9343-73e7-4d71-b386-9a0844fa7e45">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <set-parameter param-id="cp-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="cp-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="cp-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <responsible-role role-id="program-director"/>
         <statement statement-id="cp-1_stmt.a" uuid="8bde1fa5-eb81-4a1b-9e6e-5827e176025a">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="ef1ebd70-dc97-44b1-9c83-8e401f6c6920">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="157d7751-938c-441f-9299-02a339d98532">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="cp-1_stmt.b.1"
                    uuid="2fc9eec1-a49f-4cfa-9f7b-c702a1e21619">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="4e9b1a0a-6364-4b3c-8cdc-ec3e1e461c9c">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="6358db78-bab1-4139-b512-f65d3e48248b">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="cp-1_stmt.b.2"
                    uuid="db5b3977-bd51-4505-b3e2-1597bbd4d930">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="c020517e-adda-4f01-a0d1-a0aa3cb6ee5b">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="3de33bbe-1a15-4d10-b35d-56fd85e24571">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ia-1" uuid="4050c933-3ecc-4a8d-8da7-391364685cbb">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <set-parameter param-id="ia-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ia-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ia-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <responsible-role role-id="program-director"/>
         <statement statement-id="ia-1_stmt.a" uuid="ba92e479-705f-47a4-a763-dfc098ba239d">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="9af2df5d-4f00-46d9-8a75-724baa67fa32">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="5add335d-7375-49f0-843c-ac994e4d147b">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ia-1_stmt.b.1"
                    uuid="dba8c469-5758-497e-9856-e472a2e08677">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="70135b8f-c8f6-410e-aded-40be7a0d8fac">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="b04d86a0-b68c-41f0-9c0b-88a8daa457b7">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ia-1_stmt.b.2"
                    uuid="b56e37b1-1f4c-479b-bfa1-a2773c2eebfd">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="be523f20-df87-48d4-960d-1c38f6180fdd">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="c8fde380-9a41-404a-a88b-c20479a21618">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ir-1" uuid="229846dc-83cc-4ff2-a9ed-210490a343d9">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <set-parameter param-id="ir-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ir-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ir-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <responsible-role role-id="program-director"/>
         <statement statement-id="ir-1_stmt.a" uuid="7284efc2-d953-486c-ab8a-3caef6ce06c3">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="169c74fb-e6f4-4046-978e-79ae5814fdcf">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="7b385445-5e7b-4656-98f1-0f1353aab59e">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ir-1_stmt.b.1"
                    uuid="75c37e1a-6e8d-4ef0-99f4-c16f7995706c">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="2e37f6b4-8f45-423f-b93d-1fc9bd16c7a0">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="e7ae4685-2e30-4e00-9ada-b00b5eaf5578">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ir-1_stmt.b.2"
                    uuid="900591ec-2006-4622-bc87-59828d884d4f">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="5eff09b6-1cb0-4f9d-ac16-1d52faa3d5c0">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="f443c391-479d-492d-b7e9-55c9c2c107be">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ma-1" uuid="f0c6b63f-6b94-448f-bb16-db3d54b91734">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <set-parameter param-id="ma-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ma-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ma-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <responsible-role role-id="program-director"/>
         <statement statement-id="ma-1_stmt.a" uuid="d609e538-3976-418e-a368-58fc75cd03c0">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="499d1b82-bf8d-463e-b3c6-22417b11011b">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="93a9b046-63c4-4628-8547-39bc7d8df70c">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ma-1_stmt.b.1"
                    uuid="df1a6dd8-9e18-4408-8783-cb30e0413f22">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="b7adc7f7-ae07-4b17-8cd8-fe5f13f50d09">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="ad14f76a-a3eb-4349-8f6c-54cd99f1c040">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ma-1_stmt.b.2"
                    uuid="f02f759d-7d4c-41f2-b153-f3cc1e157e39">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="88eb79f6-615c-4d18-8e8a-0cf7abc58d93">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="32b337f6-eb61-4945-a139-4d2ae7737488">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="mp-1" uuid="fa3a9747-3451-456a-aae9-9896e03a52c8">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <set-parameter param-id="mp-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="mp-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="mp-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <responsible-role role-id="program-director"/>
         <statement statement-id="mp-1_stmt.a" uuid="bab45ad3-65ee-43bc-9c3e-c3e4e2db8001">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="20b544ef-9e1e-4325-b362-7b3c6f0cca9c">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="6668f521-4d5c-4317-868f-804878675bf2">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="mp-1_stmt.b.1"
                    uuid="ca35d4a5-ca73-4b3a-aa66-6c712c7a4a49">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="2ff6fc5a-1ee7-48b3-b534-0cd3dbbc864d">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="57e65240-5b41-40ee-89b1-f75d8fb259ad">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="mp-1_stmt.b.2"
                    uuid="0c5c6eda-9644-46f2-a29c-16fe4e248621">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="9b315aac-43f9-4ae7-9e78-a0b8d7f7c73c">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="ea6c7fa7-ccbf-414c-8c6b-9c928e914b35">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="pe-1" uuid="a85ff28e-517c-4455-8bd4-866103a2c94a">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <set-parameter param-id="pe-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="pe-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="pe-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <responsible-role role-id="program-director"/>
         <statement statement-id="pe-1_stmt.a" uuid="11fd3e46-4735-4986-91bc-747345fe608a">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="12c05f28-6f97-439b-9eb1-110f0076a5c1">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="dceb4401-c1fd-41a7-9e07-8d82a8042e61">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="pe-1_stmt.b.1"
                    uuid="a37f91e2-190d-40f7-829c-39776c14c8b4">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="218e56e0-fa10-49b5-8d03-0096d6980b8f">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="bbd2b372-b57d-4a3a-90c2-2189dd23664b">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="pe-1_stmt.b.2"
                    uuid="f3d57138-916c-4064-b2fc-aa8dd76849f8">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="bf063b0f-47c6-489e-977d-888caf38650c">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="f4a94538-220f-4f73-9487-73b72b68813e">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="pl-1" uuid="97ba1f95-92a8-480b-a489-960661e4206b">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <set-parameter param-id="pl-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="pl-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="pl-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <responsible-role role-id="program-director"/>
         <statement statement-id="pl-1_stmt.a" uuid="ec7af577-ff22-46bf-ac0a-cf9d75c72ebb">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="baf8d3b0-bb38-4d09-9d72-9e250570a8e8">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="679837fb-601e-4517-abe6-11ff6fc551b4">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="pl-1_stmt.b.1"
                    uuid="438f3e29-670a-49f2-8b9f-05d951318294">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="22cf3cc1-46c1-44ac-8082-342c1a09d4c4">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="ddce2988-ce9b-4f15-a427-6f18e4ba1817">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="pl-1_stmt.b.2"
                    uuid="96a4d13c-bd2b-4038-96c5-0f923f404bbd">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="315dbe5a-3f98-476f-898a-408ad9de9f7c">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="18d7c02e-f21b-4cd2-bf33-d27971ced47f">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ps-1" uuid="5e7498de-b540-4a28-b041-4381b023e98a">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <set-parameter param-id="ps-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ps-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ps-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <responsible-role role-id="program-director"/>
         <statement statement-id="ps-1_stmt.a" uuid="afe1703d-5e59-460b-b048-41b49699c5a1">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="ae5a3811-acf1-4195-8edd-d1c4ab8d7716">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="7d6cafb2-b613-4807-ad61-4f0f649bd5ee">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ps-1_stmt.b.1"
                    uuid="956c93e2-cf8f-482c-aaf7-91ab44c7cbd6">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="8c1af0f0-267c-457d-9a12-6b29c05cb9a7">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="f4fbfbc2-1a94-456d-a713-9d547f18a0c7">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ps-1_stmt.b.2"
                    uuid="6926c688-3fb2-4ab8-9acb-cff0b5acd365">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="7b3919ab-7a62-43ff-8c08-5e6f6460b9d2">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="2f9c701a-0f3e-4e3d-beae-debb08c406ed">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ra-1" uuid="789e6c0f-acda-4a94-9b48-7d41dd4c607c">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <set-parameter param-id="ra-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ra-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ra-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <responsible-role role-id="program-director"/>
         <statement statement-id="ra-1_stmt.a" uuid="8fe541ea-0920-42d0-8561-4e08f04d796c">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="c04523ba-79c6-4275-8e0d-29c087b0968b">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="5894d92b-05bf-4fc4-85dc-f5c37e112bc4">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ra-1_stmt.b.1"
                    uuid="b0e9ed47-fe83-485d-8d79-979833543a83">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="74ee9f12-0907-4fc0-ae20-b8f4fc943910">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="c90ad6ee-5a40-4996-8e6c-d85ff3f7559e">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ra-1_stmt.b.2"
                    uuid="d9a38f95-ded1-4d1d-afe2-242987222ebd">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="afe963d8-5c04-4d98-870d-3fcec147a9ed">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="d6f6ac98-4f15-45f2-9ecc-4447e96af44f">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="sa-1" uuid="55358f60-db9b-4d75-a313-5fa6c328273c">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <set-parameter param-id="sa-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="sa-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="sa-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <responsible-role role-id="program-director"/>
         <statement statement-id="sa-1_stmt.a" uuid="ae3f64be-2e62-4347-b06a-727bc28e4f9b">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="28d5f97a-80c5-4874-b646-4e6a0da49f9a">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="e5864f16-83f2-4faf-b7be-0810c6e58fc4">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="sa-1_stmt.b.1"
                    uuid="959519a9-3e12-47bc-8d76-50d9ab0b6544">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="383e459b-5a24-49a8-bcd7-d51e5e342dc4">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="bed8f51a-1773-493c-8167-c83712e03f01">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="sa-1_stmt.b.2"
                    uuid="9daa3848-9672-469c-9aa0-f363e3339123">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="39ff0aef-81b3-4330-9825-aecb009e48d1">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="518d4987-9436-4c1f-9e07-afa6b332f124">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="sc-1" uuid="9e2852c6-f48a-47b2-9ea5-77cbbb42b365">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <set-parameter param-id="sc-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="sc-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="sc-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <responsible-role role-id="program-director"/>
         <statement statement-id="sc-1_stmt.a" uuid="5e2e8372-c13b-4cf5-90c5-e8833a9fe241">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="8c01ac20-74aa-482b-8e84-2be7a0fc4c48">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="88cfadba-043b-483b-8032-73344aa53c96">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="sc-1_stmt.b.1"
                    uuid="8166980a-86c0-497d-87e4-453adfd0d4bd">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="c3aea0dd-4353-4a72-bb19-94cefa87a9c9">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="9abaeb64-56d2-48a1-bd8d-7b55411d31ca">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="sc-1_stmt.b.2"
                    uuid="eeea34ff-18ab-4c35-bf32-c74dbf746e7b">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="9f91469b-5237-4edb-a477-436608e76f05">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="ad20ff50-8a7c-4ffc-a918-260960f6fb42">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="si-1" uuid="81ba4fe8-1649-437b-9ecf-367fd87336e6">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <set-parameter param-id="si-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="si-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="si-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <responsible-role role-id="program-director"/>
         <statement statement-id="si-1_stmt.a" uuid="915b10d2-2275-4d86-951a-eec23f9ee77a">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="ec810fee-3620-4611-a0f0-17b37c6ad595">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="682311e7-e3f7-4d94-acf9-131149887fda">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="si-1_stmt.b.1"
                    uuid="2a5a6f7f-aeea-4ea4-be1e-859df4bf7521">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="1beeb6ad-7655-4f2c-be2e-fb235dbfcdcd">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="80ee0fe9-7f87-4dfa-887a-ac3bb2131943">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="si-1_stmt.b.2"
                    uuid="c152bbde-57fc-4864-ac51-861bd8bb83b4">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="e9b54d73-7753-46e7-a473-ae735ed7685c">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="78e8f2bb-67d7-49d3-a993-ce4bedcfbc47">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
   </control-implementation>
   <!-- Table 15-1 Names of Provided Attachments -->
   <back-matter>
      <!-- Section 12, Table 12-1, Table 12-2 -->
      <resource uuid="3a5ca2de-0f66-47e6-844d-6ccdf214b767">
         <title>FedRAMP Applicable Laws and Regulations</title>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="fedramp-citations"/>
         <rlink href="https://www.fedramp.gov/assets/resources/templates/SSP-A12-FedRAMP-Laws-and-Regulations-Template.xlsx"/>
      </resource>
      <resource uuid="12da89ef-51dd-4404-948d-e9f0e25b961e">
         <title>FedRAMP Master Acronym and Glossary</title>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="fedramp-acronyms"/>
         <rlink href="https://www.fedramp.gov/assets/resources/documents/FedRAMP_Master_Acronym_and_Glossary.pdf"/>
      </resource>
      <resource uuid="d45612a9-cf25-4ef6-b2dd-69e38ba2967a">
         <title>[SAMPLE]Name or Title of Document</title>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="law"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Publication Date"/>
         <document-id scheme="https://www.doi.org/">Identification Number</document-id>
         <rlink href="https://domain.example/path/to/document.pdf"/>
      </resource>
      <resource uuid="a8a0cc81-800f-479f-93d3-8b8743d9b98d">
         <title>[SAMPLE]Privacy-Related Law Citation</title>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="law"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="pii"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Publication Date"/>
         <document-id scheme="https://www.doi.org/">Identification Number</document-id>
         <rlink href="https://domain.example/path/to/document.pdf"/>
      </resource>
      <resource uuid="545e75c3-537f-48fe-9630-95337916d982">
         <title>[SAMPLE]Regulation Citation</title>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="regulation"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Publication Date"/>
         <document-id scheme="https://www.doi.org/">Identification Number</document-id>
         <rlink href="https://domain.example/path/to/document.pdf"/>
      </resource>
      <resource uuid="9d6cf2b4-8e88-4040-a33c-7bc206553a1a">
         <title>[SAMPLE]Interconnection Security Agreement Title</title>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
      </resource>
      <resource uuid="31a46c4f-2959-4287-bc1c-67297d7da60b">
         <description>CSP Logo</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="prepared-for-logo"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="csp-logo"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./logo.png" media-type="image/png"/>
         <base64>00000000</base64>
      </resource>
      <resource uuid="c5866ad8-8ed7-49b4-844a-0276fa9f8f51">
         <description>Preparer Logo</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="prepared-by-logo"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./party-1-logo.png" media-type="image/png"/>
         <base64>00000000</base64>
      </resource>
      <resource uuid="0846b6ef-cfa4-4bb3-8280-717f7e7b04d4">
         <description>FedRAMP Logo</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="fedramp-logo"/>
         <rlink href="https://github.com/GSA/fedramp-automation/raw/master/assets/FedRAMP_LOGO.png"/>
      </resource>
      <resource uuid="2c1747d6-874a-49a2-8488-2fd9735416bf">
         <description>3PAO Logo</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="3pao-logo"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./logo.png" media-type="image/png"/>
         <base64>00000000</base64>
      </resource>
      <resource uuid="d2eb3c18-6754-4e3a-a933-03d289e3fad5">
         <description>The primary authorization boundary diagram.</description>
         <!-- Use rlink and/or base64 -->
         <rlink href="./diagrams/boundary.png"/>
         <base64>00000000</base64>
         <remarks>
            <p>Section 9.2, Figure 9-1 Authorization Boundary Diagram (graphic)</p>
            <p>This should be referenced in the
               system-characteristics/authorization-boundary/diagram/link/@href flag using a value
               of "#d2eb3c18-6754-4e3a-a933-03d289e3fad5"</p>
         </remarks>
      </resource>
      <resource uuid="61081e81-850b-43c1-bf43-1ecbddcb9e7f">
         <description>The primary network diagram.</description>
         <!-- Use rlink and/or base64 -->
         <rlink href="./diagrams/network.png"/>
         <base64>00000000</base64>
         <remarks>
            <p>Section 9.4, Figure 9-2 Network Diagram (graphic)</p>
            <p>This should be referenced in the
               system-characteristics/network-architecture/diagram/link/@href flag using a value
               of "#61081e81-850b-43c1-bf43-1ecbddcb9e7f"</p>
         </remarks>
      </resource>
      <resource uuid="ac5d7535-f3b8-45d3-bf3b-735c82c64547">
         <description>The primary data flow diagram.</description>
         <!-- Use rlink and/or base64 -->
         <rlink href="./diagrams/dataflow.png"/>
         <base64>00000000</base64>
         <remarks>
            <p>Section 10, Figure 10-1 Data Flow Diagram (graphic)</p>
            <p>This should be referenced in the
               system-characteristics/data-flow/diagram/link/@href flag using a value
               of "#ac5d7535-f3b8-45d3-bf3b-735c82c64547"</p>
         </remarks>
      </resource>
      <resource uuid="090ab379-2089-4830-b9fd-26d0729e22e9">
         <title>Policy Title</title>
         <description>Policy document</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="policy"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./sample_policy.pdf"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Policy Attachment</p>
         </remarks>
      </resource>
      <resource uuid="ab300133-d749-4abb-b858-1cd6ffd8af9e">
         <title>Policy Title</title>
         <description>Policy document</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="policy"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./sample_policy.pdf"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Policy Attachment</p>
         </remarks>
      </resource>
      <resource uuid="1002a58e-9e11-4aa6-9ab4-2bde52995952">
         <title>Procedure Title</title>
         <description>Procedure document</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="procedure"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./sample_procedure.pdf"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Procedure Attachment</p>
         </remarks>
      </resource>
      <resource uuid="4bb1e2e5-261c-4b5c-b22c-e1627c2e8be6">
         <title>Procedure Title</title>
         <description>Procedure document</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="procedure"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./sample_procedure.pdf"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Procedure Attachment</p>
         </remarks>
      </resource>
      <resource uuid="90a128ac-c850-48f6-8fff-a55692f80b41">
         <title>User's Guide</title>
         <description>User's Guide</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="user-guide"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="guide"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./sample_guide.pdf"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: User's Guide Attachment</p>
         </remarks>
      </resource>
      <resource uuid="fab59751-b855-40cb-93c1-492562e20e18">
         <title>Privacy Impact Assessment</title>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="privacy-impact-assessment"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./pia.docx"/>
         <base64 filename="pia.docx">00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Privacy Impact Assessment</p>
         </remarks>
      </resource>
      <resource uuid="489112e1-57f2-4c29-8dd0-95b1442fbf3b">
         <title>Document Title</title>
         <description>Rules of Behavior</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="rules-of-behavior"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="rob"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="https://sample"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Rules of Behavior (ROB)</p>
         </remarks>
      </resource>
      <resource uuid="c7860916-f2f4-43aa-b578-d48cf8e6d381">
         <title>Document Title</title>
         <description>Contingency Plan (CP)</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="plan"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="https://sample"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Contingency Plan (CP) Attachment</p>
         </remarks>
      </resource>
      <resource uuid="ab56cf27-0dae-40d6-89b7-d750137309af">
         <title>Document Title</title>
         <description>Configuration Management (CM) Plan</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="plan"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="https://sample"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Configuration Management (CM) Plan Attachment</p>
         </remarks>
      </resource>
      <resource uuid="3f771ab5-8016-4571-98d1-f0fb962e15e2">
         <title>Document Title</title>
         <description>Incident Response (IR) Plan</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="plan"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="https://sample"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Incident Response (IR) Plan Attachment</p>
         </remarks>
      </resource>
      <resource uuid="49fb4631-1da2-41ca-b0b3-e1b1006d4025">
         <title>Separation of Duties Matrix</title>
         <description>Separation of Duties Matrix</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="https://sample"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Separation of Duties Matrix Attachment</p>
         </remarks>
      </resource>
      <resource uuid="9f1aae37-7359-411f-86c1-768aaab85e63">
         <title>FedRAMP High Baseline</title>
         <rlink media-type="application/xml"
                href="https://raw.githubusercontent.com/usnistgov/OSCAL/v1.0.0-milestone3/content/fedramp.gov/xml/FedRAMP_HIGH-baseline_profile.xml"/>
         <remarks>
            <p>Pointer to High baseline content in OSCAL.</p>
         </remarks>
      </resource>
      <resource uuid="890170c3-d4fa-4d25-ab96-8e4bf7cc237c">
         <title>FedRAMP Moderate Baseline</title>
         <rlink media-type="application/xml"
                href="https://raw.githubusercontent.com/usnistgov/OSCAL/v1.0.0-milestone3/content/fedramp.gov/xml/FedRAMP_MODERATE-baseline_profile.xml"/>
         <remarks>
            <p>Pointer to Moderate baseline content in OSCAL.</p>
         </remarks>
      </resource>
      <resource uuid="2acaf846-5496-4d36-8565-9a15b48aef2c">
         <title>FedRAMP Low Baseline</title>
         <rlink media-type="application/xml"
                href="https://raw.githubusercontent.com/usnistgov/OSCAL/v1.0.0-milestone3/content/fedramp.gov/xml/FedRAMP_LOW-baseline_profile.xml"/>
         <remarks>
            <p>Pointer to Low baseline content in OSCAL.</p>
         </remarks>
      </resource>
   </back-matter>
</system-security-plan>

959_Repro_Step2_rc1_rc2_FedRAMP-SSP-OSCAL-Template.xml

<?xml version="1.0" encoding="UTF-8"?>
<!-- Modified by the OSCAL 1.0.0 RC2 to OSCAL 1.0.0 conversion XSLT on 2021-06-15T18:40:52.631-04:00 -->
<system-security-plan xmlns="http://csrc.nist.gov/ns/oscal/1.0"
                      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                      xsi:schemaLocation="https://raw.githubusercontent.com/usnistgov/OSCAL/master/xml/schema/oscal_ssp_schema.xsd"
                      uuid="4a330034-5024-4718-953e-9a7a36d28967">
   <metadata>
      <title>FedRAMP System Security Plan (SSP)</title>
      <published>2020-07-01T00:00:00.00-04:00</published>
      <last-modified>2021-06-15T18:40:52.631-04:00</last-modified>
      <version>0.0</version>
      <oscal-version>1.0.0</oscal-version>
      <revisions>
         <revision>
            <published>2019-06-01T00:00:00.00-04:00</published>
            <version>1.0</version>
            <oscal-version>1.0.0</oscal-version>
            <prop ns="https://fedramp.gov/ns/oscal"
                  name="party-uuid"
                  value="6b286b5d-8f07-4fa7-8847-1dd0d88f73fb"/>
            <remarks>
               <p>Initial publication.</p>
            </remarks>
         </revision>
         <revision>
            <published>2020-06-01T00:00:00.00-04:00</published>
            <version>2.0</version>
            <oscal-version>1.0.0</oscal-version>
            <prop ns="https://fedramp.gov/ns/oscal" name="party-id" value="csp"/>
            <remarks>
               <p>Updated for annual assessment.</p>
            </remarks>
         </revision>
         <!-- Additional revision assemblies as needed. -->
      </revisions>
      <prop name="marking" value="Controlled Unclassified Information"/>
      <role id="prepared-by">
         <title>Prepared By</title>
         <description>The organization that prepared this SSP. If developed in-house, this is the CSP itself.</description>
      </role>
      <role id="prepared-for">
         <title>Prepared For</title>
         <description>The organization for which this SSP was prepared. Typically the CSP.</description>
      </role>
      <role id="content-approver">
         <title>System Security Plan Approval</title>
         <description>The individual or individuals accountable for the accuracy of this SSP.</description>
      </role>
      <role id="cloud-service-provider">
         <title>Cloud Service Provider</title>
         <short-name>CSP</short-name>
      </role>
      <role id="system-owner">
         <title>Information System Owner</title>
         <description>The individual within the CSP who is ultimately accountable for everything related to this system.</description>
      </role>
      <role id="authorizing-official">
         <title>Authorizing Official</title>
         <description>The individual or individuals who must grant this system an authorization to operate.</description>
      </role>
      <role id="authorizing-official-poc">
         <title>Authorizing Official's Point of Contact</title>
         <description>The individual representing the authorizing official.</description>
      </role>
      <role id="system-poc-management">
         <title>Information System Management Point of Contact (POC)</title>
         <description>The highest level manager who responsible for system operation on behalf of the System Owner.</description>
      </role>
      <role id="system-poc-technical">
         <title>Information System Technical Point of Contact</title>
         <description>The individual or individuals leading the technical operation of the system.</description>
      </role>
      <role id="system-poc-other">
         <title>General Point of Contact (POC)</title>
         <description>A general point of contact for the system, designated by the system owner.</description>
      </role>
      <role id="information-system-security-officer">
         <title>System Information System Security Officer (or Equivalent)</title>
         <description>The individual accountable for the security posture of the system on behalf of the system owner.</description>
      </role>
      <role id="privacy-poc">
         <title>Privacy Official's Point of Contact</title>
         <description>The individual responsible for the privacy threshold analysis and if necessary the privacy impact assessment.</description>
      </role>
      <role id="asset-owner">
         <title>Owner of an inventory item within the system.</title>
      </role>
      <role id="asset-administrator">
         <title>Administrative responsibility an inventory item within the system.</title>
      </role>
      <role id="isa-poc-local">
         <title>ICA POC (Local)</title>
         <description>The point of contact for an interconnection on behalf of this system.</description>
         <remarks>
            <p>Remove this role if there are no ICAs.</p>
         </remarks>
      </role>
      <role id="isa-poc-remote">
         <title>ICA POC (Remote)</title>
         <description>The point of contact for an interconnection on behalf of this external system to which this system connects.</description>
         <remarks>
            <p>Remove this role if there are no ICAs.</p>
         </remarks>
      </role>
      <role id="isa-authorizing-official-local">
         <title>ICA Signatory (Local)</title>
         <description>Responsible for signing an interconnection security agreement on behalf of this system.</description>
         <remarks>
            <p>Remove this role if there are no ICAs.</p>
         </remarks>
      </role>
      <role id="isa-authorizing-official-remote">
         <title>ICA Signatory (Remote)</title>
         <description>Responsible for signing an interconnection security agreement on behalf of the external system to which this system connects.</description>
         <remarks>
            <p>Remove this role if there are no ICAs.</p>
         </remarks>
      </role>
      <role id="consultant">
         <title>Consultant</title>
         <description>Any consultants involved with developing or maintaining this content.</description>
      </role>
      <role id="admin-unix">
         <title>[SAMPLE]Unix Administrator</title>
         <description>This is a sample role.</description>
      </role>
      <role id="admin-client">
         <title>[SAMPLE]Client Administrator</title>
         <description>This is a sample role.</description>
      </role>
      <role id="program-director">
         <title>[SAMPLE]Program Director</title>
         <description>This is a sample role.</description>
      </role>
      <role id="fedramp-pmo">
         <title>Federal Risk and Authorization Management Program (FedRAMP) Program Management Office (PMO)</title>
         <short-name>FedRAMP PMO</short-name>
      </role>
      <role id="fedramp-jab">
         <title>Federal Risk and Authorization Management Program (FedRAMP) Joint Authorization Board (JAB)</title>
         <short-name>FedRAMP JAB</short-name>
      </role>
      <location uuid="27b78960-59ef-4619-82b0-ae20b9c709ac">
         <title>CSP HQ</title>
         <address type="work">
            <addr-line>Suite 0000</addr-line>
            <addr-line>1234 Some Street</addr-line>
            <city>Haven</city>
            <state>ME</state>
            <postal-code>00000</postal-code>
         </address>
         <remarks>
            <p>There must be one location identifying the CSP's primary business address, such as the CSP's HQ, or the address of the system owner's primary business location.</p>
         </remarks>
      </location>
      <location uuid="16adcc8d-65d8-4583-80d3-9cf007744fec">
         <title>Primary Data Center</title>
         <address>
            <addr-line>2222 Main Street</addr-line>
            <city>Anywhere</city>
            <state>--</state>
            <postal-code>00000-0000</postal-code>
         </address>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="data-center"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="primary-data-center"/>
         <remarks>
            <p>There must be one location for each data center.</p>
            <p>There must be at least two data centers.</p>
            <p>For a data center, briefly summarize the components at this location.</p>
            <p>All data centers must have a conformity tag of "data-center".</p>
            <p>A primary data center must also have a conformity tag of "primary-data-center".</p>
         </remarks>
      </location>
      <location uuid="ad321514-7b9f-4374-8409-efb18eea6e5d">
         <title>Secondary Data Center</title>
         <address>
            <addr-line>3333 Small Road</addr-line>
            <city>Anywhere</city>
            <state>--</state>
            <postal-code>00000-0000</postal-code>
         </address>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="data-center"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="alternate-data-center"/>
         <remarks>
            <p>There must be one location for each data center.</p>
            <p>There must be at least two data centers.</p>
            <p>For a data center, briefly summarize the components at this location.</p>
            <p>All data centers must have a conformity tag of "data-center"</p>
            <p>An alternate or backup data center must also have a conformity tag of "alternate-data-center".</p>
         </remarks>
      </location>
      <party uuid="6b286b5d-8f07-4fa7-8847-1dd0d88f73fb" type="organization">
         <name>Cloud Service Provider (CSP) Name</name>
         <short-name>CSP Acronym/Short Name</short-name>
         <location-uuid>27b78960-59ef-4619-82b0-ae20b9c709ac</location-uuid>
         <remarks>
            <p>Replace sample CSP information.</p>
         </remarks>
      </party>
      <party uuid="77e0e2c8-2560-4fe9-ac78-c3ff4ffc9f6d" type="organization">
         <name>Federal Risk and Authorization Management Program: Program Management Office</name>
         <short-name>FedRAMP PMO</short-name>
         <link href="https://fedramp.gov"/>
         <email-address>info@fedramp.gov</email-address>
         <address type="work">
            <addr-line>1800 F St. NW</addr-line>
            <addr-line/>
            <city>Washington</city>
            <state>DC</state>
            <postal-code/>
            <country>US</country>
         </address>
         <remarks>
            <p>This party entry must be present in a FedRAMP SSP.</p>
            <p>The uuid may be different; however, the uuid must be associated with the "fedramp-pmo" role in the responsible-party assemblies.</p>
         </remarks>
      </party>
      <party uuid="49017ec3-9f51-4dbd-9253-858c2b1295fd" type="organization">
         <name>Federal Risk and Authorization Management Program: Joint Authorization Board</name>
         <short-name>FedRAMP JAB</short-name>
         <remarks>
            <p>This party entry must be present in a FedRAMP SSP.</p>
            <p>The uuid may be different; however, the uuid must be associated with the "fedramp-jab" role in the responsible-party assemblies.</p>
         </remarks>
      </party>
      <party uuid="78992555-4a99-4eaa-868c-f2c249679dd3" type="organization">
         <name>External Organization</name>
         <short-name>External</short-name>
         <remarks>
            <p>Generic placeholder for any external organization.</p>
         </remarks>
      </party>
      <party uuid="f595397b-cbe4-4a87-8c86-9bff91c4e7fd" type="organization">
         <name>Agency Name</name>
         <short-name>A.N.</short-name>
         <remarks>
            <p>Generic placeholder for an authorizing agency.</p>
         </remarks>
      </party>
      <party uuid="8e3d39da-4851-4d2a-adb5-4b5585ded952" type="organization">
         <name>Name of Consulting Org</name>
         <short-name>NOCO</short-name>
         <link href="https://consulting.sample"/>
         <email-address>poc@consulting.sample</email-address>
         <address type="work">
            <addr-line>3333 Corporate Way</addr-line>
            <city>Washington</city>
            <state>DC</state>
            <postal-code/>
            <country>US</country>
         </address>
      </party>
      <party uuid="80361ec4-bfce-4b5c-85c8-313d6ebd220b" type="organization">
         <name>[SAMPLE]Remote System Org Name</name>
      </party>
      <party uuid="09ad840f-aa79-43aa-9f22-25182c2ab11b" type="person">
         <name>[SAMPLE]ICA POC's Name</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>person@ica.org.example</email-address>
         <telephone-number>202-555-1212</telephone-number>
         <member-of-organization>80361ec4-bfce-4b5c-85c8-313d6ebd220b</member-of-organization>
      </party>
      <party uuid="f0bc13a4-3303-47dd-80d3-380e159c8362" type="organization">
         <name>[SAMPLE]Example IaaS Provider</name>
         <short-name>E.I.P.</short-name>
         <remarks>
            <p>Underlying service provider. Leveraged Authorization.</p>
         </remarks>
      </party>
      <party uuid="3360e343-9860-4bda-9dfc-ff427c3dfab6" type="person">
         <name>[SAMPLE]Person Name 1</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0001</telephone-number>
         <address>
            <addr-line>Mailstop A-1</addr-line>
         </address>
         <location-uuid>27b78960-59ef-4619-82b0-ae20b9c709ac</location-uuid>
         <member-of-organization>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</member-of-organization>
      </party>
      <party uuid="36b8d6c0-3b25-42cc-b529-cf4066145cdd" type="person">
         <name>[SAMPLE]Person Name 2</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0002</telephone-number>
         <address type="work">
            <addr-line>Address Line</addr-line>
            <city>City</city>
            <state>ST</state>
            <postal-code>00000</postal-code>
            <country>US</country>
         </address>
         <member-of-organization>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</member-of-organization>
      </party>
      <party uuid="0cec09d9-20c6-470b-9ffc-85763375880b" type="person">
         <name>[SAMPLE]Person Name 3</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0003</telephone-number>
         <address type="work">
            <addr-line>Address Line</addr-line>
            <city>City</city>
            <state>ST</state>
            <postal-code>00000</postal-code>
            <country>US</country>
         </address>
         <member-of-organization>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</member-of-organization>
      </party>
      <party uuid="f75e21f6-43d8-46ab-890d-7f2eebc5a830" type="person">
         <name>[SAMPLE]Person Name 4</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0004</telephone-number>
         <address type="work">
            <addr-line>Address Line</addr-line>
            <city>City</city>
            <state>ST</state>
            <postal-code>00000</postal-code>
            <country>US</country>
         </address>
         <member-of-organization>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</member-of-organization>
      </party>
      <party uuid="132953a9-640c-46f7-9de9-3fa15ec99361" type="person">
         <name>[SAMPLE]Person Name 5</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0005</telephone-number>
         <address type="work">
            <addr-line>Address Line</addr-line>
            <city>City</city>
            <state>ST</state>
            <postal-code>00000</postal-code>
            <country>US</country>
         </address>
         <member-of-organization>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</member-of-organization>
      </party>
      <party uuid="4fded5fd-7a65-47ea-bd76-df57c46e27d1" type="person">
         <name>[SAMPLE]Person Name 6</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0006</telephone-number>
         <address type="work">
            <addr-line>Address Line</addr-line>
            <city>City</city>
            <state>ST</state>
            <postal-code>00000</postal-code>
            <country>US</country>
         </address>
         <member-of-organization>78992555-4a99-4eaa-868c-f2c249679dd3</member-of-organization>
      </party>
      <party uuid="db234cb7-1776-425c-9ac4-b067c1723011" type="person">
         <name>[SAMPLE]Person Name 7</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0007</telephone-number>
         <address type="work">
            <addr-line>Address Line</addr-line>
            <city>City</city>
            <state>ST</state>
            <postal-code>00000</postal-code>
            <country>US</country>
         </address>
         <member-of-organization>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</member-of-organization>
      </party>
      <party uuid="b306f5af-b93a-4a7f-a2b2-37a44fc92a79" type="organization">
         <name>[SAMPLE] IT Department</name>
      </party>
      <party uuid="59cdc953-5902-4fa4-a878-f3163854624c" type="organization">
         <name>[SAMPLE]Security Team</name>
      </party>
      <responsible-party role-id="cloud-service-provider">
         <party-uuid>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="prepared-by">
         <party-uuid>3360e343-9860-4bda-9dfc-ff427c3dfab6</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="prepared-for">
         <!-- Exacty one -->
         <party-uuid>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</party-uuid>
      </responsible-party>
      <responsible-party role-id="content-approver">
         <party-uuid>3360e343-9860-4bda-9dfc-ff427c3dfab6</party-uuid>
         <party-uuid>36b8d6c0-3b25-42cc-b529-cf4066145cdd</party-uuid>
         <remarks>
            <p>One or more</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="system-owner">
         <party-uuid>3360e343-9860-4bda-9dfc-ff427c3dfab6</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="authorizing-official">
         <party-uuid>49017ec3-9f51-4dbd-9253-858c2b1295fd</party-uuid>
         <party-uuid>4fded5fd-7a65-47ea-bd76-df57c46e27d1</party-uuid>
         <remarks>
            <p>One or more</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="system-poc-management">
         <party-uuid>0cec09d9-20c6-470b-9ffc-85763375880b</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="system-poc-technical">
         <party-uuid>f75e21f6-43d8-46ab-890d-7f2eebc5a830</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="information-system-security-officer">
         <party-uuid>132953a9-640c-46f7-9de9-3fa15ec99361</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="authorizing-official-poc">
         <party-uuid>4fded5fd-7a65-47ea-bd76-df57c46e27d1</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="privacy-poc">
         <party-uuid>db234cb7-1776-425c-9ac4-b067c1723011</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="fedramp-pmo">
         <party-uuid>77e0e2c8-2560-4fe9-ac78-c3ff4ffc9f6d</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="fedramp-jab">
         <party-uuid>49017ec3-9f51-4dbd-9253-858c2b1295fd</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <remarks>
         <p>This OSCAL-based FedRAMP SSP Template can be used for the FedRAMP Low, Moderate, and
            High baselines.</p>
         <p>Guidance for OSCAL-based FedRAMP Tailored content has not yet been developed.</p>
      </remarks>
   </metadata>
   <!-- ====================================================
      Link this SSP to the appropriate FedRAMP baseline using ONE of the import statements below.
      NOTE: This points to a resource at the end of this file with links to both the XML and JSON
            versions of the baseline. Tools must select the appropriate link 
      FedRAMP HIGH Baseline: 
      <import-profile href="#9f1aae37-7359-411f-86c1-768aaab85e63"/>
      FedRAMP MODERATE Baseline:
      <import-profile href="#890170c3-d4fa-4d25-ab96-8e4bf7cc237c"/>
      FedRAMP LOW Baseline: 
      <import-profile href="#2acaf846-5496-4d36-8565-9a15b48aef2c"/>
   ==================================================== -->
   <import-profile href="#890170c3-d4fa-4d25-ab96-8e4bf7cc237c"/>
   <system-characteristics>
      <!-- Table 1-1 Information System Name and Title -->
      <system-id identifier-type="https://fedramp.gov">F00000000</system-id>
      <system-name>System's Full Name</system-name>
      <system-name-short>System's Short Name or Acronym</system-name-short>
      <!-- Section 9.1 (Old SSP Format Section 8.1) -->
      <description>
         <p>Describe the purpose and functions of this system here.</p>
      </description>
      <!-- FedRAMP Authorizatoin Type: fedramp-jab, fedramp-agency, or fedramp-li-saas -->
      <prop ns="https://fedramp.gov/ns/oscal"
            name="authorization-type"
            value="fedramp-agency"/>
      <!-- Section 2.3 Digital Identity Determination and Attachment 3, Digital Identity Worksheet -->
      <!-- 1 = low, 2= moderate, 3 = high  -->
      <prop ns="https://fedramp.gov/ns/oscal"
            name="security-eauth-level"
            class="security-eauth"
            value="2"/>
      <!-- Attachment 3, Digital Identity Worksheet: Additional Detail - Not Required -->
      <prop name="identity-assurance-level" value="2"/>
      <prop name="authenticator-assurance-level" value="2"/>
      <prop name="federation-assurance-level" value="2"/>
      <!-- Table 8-1 Service Layers Represented in this SSP -->
      <prop name="cloud-service-model" value="saas">
         <remarks>
            <p>Remarks are required if service model is "other". Optional otherwise.</p>
         </remarks>
      </prop>
      <!-- Table 8-2 Cloud Deployment Model Represented in this SSP -->
      <prop name="cloud-deployment-model" value="government-only-cloud">
         <remarks>
            <p>Remarks are required if deployment model is "hybrid-cloud" or "other". Optional
               otherwise.</p>
         </remarks>
      </prop>
      <!-- Table 2-1 Security Categorization and 2-4 Baseline Security Configuration -->
      <security-sensitivity-level>low</security-sensitivity-level>
      <!-- Table 2-2, Table 15-9, and Attachment 4 -->
      <system-information>
         <!-- Attachment 4, PTA/PIA Designation -->
         <prop name="privacy-sensitive" value="yes"/>
         <!-- Attachment 4, PTA Qualifying Questions -->
         <!--Does the ISA collect, maintain, or share PII in any identifiable form? -->
         <prop ns="https://fedramp.gov/ns/oscal"
               name="pta-1"
               class="pta"
               value="yes"/>
         <!--Does the ISA collect, maintain, or share PII information from or about the public? -->
         <prop ns="https://fedramp.gov/ns/oscal"
               name="pta-2"
               class="pta"
               value="yes"/>
         <!--Has a Privacy Impact Assessment ever been performed for the ISA? -->
         <prop ns="https://fedramp.gov/ns/oscal"
               name="pta-3"
               class="pta"
               value="yes"/>
         <!--Is there a Privacy Act System of Records Notice (SORN) for this ISA system? (If so, please specify the SORN ID.) -->
         <prop ns="https://fedramp.gov/ns/oscal"
               name="pta-4"
               class="pta"
               value="no"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="sorn-id"
               class="pta"
               value="[No SORN ID]"/>
         <information-type uuid="06ecba4f-db96-4491-a3a2-7febfa227435">
            <title>Information Type Name</title>
            <description>
               <p>A description of the information.</p>
            </description>
            <categorization system="https://doi.org/10.6028/NIST.SP.800-60v2r1">
               <information-type-id>C.2.4.1</information-type-id>
            </categorization>
            <confidentiality-impact>
               <base>fips-199-moderate</base>
               <selected>fips-199-moderate</selected>
               <adjustment-justification>
                  <p>Required if the base and selected values do not match.</p>
               </adjustment-justification>
            </confidentiality-impact>
            <integrity-impact>
               <base>fips-199-moderate</base>
               <selected>fips-199-moderate</selected>
               <adjustment-justification>
                  <p>Required if the base and selected values do not match.</p>
               </adjustment-justification>
            </integrity-impact>
            <availability-impact>
               <base>fips-199-moderate</base>
               <selected>fips-199-moderate</selected>
               <adjustment-justification>
                  <p>Required if the base and selected values do not match.</p>
               </adjustment-justification>
            </availability-impact>
         </information-type>
      </system-information>
      <!-- Table 2-3 Security Impact Level -->
      <security-impact-level>
         <security-objective-confidentiality>fips-199-moderate</security-objective-confidentiality>
         <security-objective-integrity>fips-199-moderate</security-objective-integrity>
         <security-objective-availability>fips-199-moderate</security-objective-availability>
      </security-impact-level>
      <!-- Section 2.3 Digital Identity Determination & Table 7-1 System Status -->
      <status state="operational">
         <remarks>
            <p>Remarks are required if status/state is "other". Optional otherwise.</p>
         </remarks>
      </status>
      <!-- Table 8-3 Leveraged Authorizations (Typically 0 or 1) -->
      <!-- ***** REWORKING LEVERAGED AUTHORIZATIONS MODEL WITH NIST ****** -->
      <!-- Section 9.2, Figure 9-1. Authorization Boundary Diagram -->
      <authorization-boundary>
         <description>
            <p>A holistic, top-level explanation of the FedRAMP authorization boundary.</p>
         </description>
         <diagram uuid="dbf46c27-52a9-49c4-beb6-b6399cd75497">
            <description>
               <p>A diagram-specific explanation.</p>
            </description>
            <link href="#d2eb3c18-6754-4e3a-a933-03d289e3fad5" rel="diagram"/>
            <caption>Authorization Boundary Diagram</caption>
         </diagram>
      </authorization-boundary>
      <!-- Section 9.4, Figure 9-2. Network Diagram -->
      <network-architecture>
         <description>
            <p>A holistic, top-level explanation of the network architecture.</p>
         </description>
         <diagram uuid="e97c3395-433a-48c1-8cc7-dd1e1555941c">
            <description>
               <p>A diagram-specific explanation.</p>
            </description>
            <link href="#61081e81-850b-43c1-bf43-1ecbddcb9e7f" rel="diagram"/>
            <caption>Network Diagram</caption>
         </diagram>
      </network-architecture>
      <!-- Section 10, Figure 10-1. Data Flow Diagram -->
      <data-flow>
         <description>
            <p>A holistic, top-level explanation of the system's data flows.</p>
         </description>
         <diagram uuid="e3b98448-4219-46a5-b229-412423c566f3">
            <description>
               <p>A diagram-specific explanation.</p>
            </description>
            <link href="#ac5d7535-f3b8-45d3-bf3b-735c82c64547" rel="diagram"/>
            <caption>Data Flow Diagram</caption>
         </diagram>
      </data-flow>
   </system-characteristics>
   <system-implementation>
      <prop ns="https://fedramp.gov/ns/oscal" name="users-internal" value="0"/>
      <prop ns="https://fedramp.gov/ns/oscal" name="users-external" value="0"/>
      <prop ns="https://fedramp.gov/ns/oscal"
            name="users-internal-future"
            value="0"/>
      <prop ns="https://fedramp.gov/ns/oscal"
            name="users-external-future"
            value="0"/>
      <leveraged-authorization uuid="5a9c98ab-8e5e-433d-a7bd-515c07cd1497">
         <title>Name of Underlying System</title>
         <party-uuid>f0bc13a4-3303-47dd-80d3-380e159c8362</party-uuid>
         <date-authorized>2015-01-01</date-authorized>
         <remarks>
            <p>The leveraged-authorizaton assembly is supposed to have a required uuid flag instead of an optional id flag. This will be fixed in the syntax shortly.</p>
            <p>Use one leveraged-authorization assembly for each underlying system. (In the legacy world, these may be general support systems.</p>
         </remarks>
      </leveraged-authorization>
      <user uuid="9cb0fab0-78bd-44ba-bcb8-3e9801cc952f">
         <title>[SAMPLE]Unix System Administrator</title>
         <prop ns="https://fedramp.gov/ns/oscal" name="sensitivity" value="high"/>
         <prop name="privilege-level" value="privileged"/>
         <prop name="type" value="internal"/>
         <role-id>admin-unix</role-id>
         <authorized-privilege>
            <title>Full administrative access (root)</title>
            <function-performed>Add/remove users and hardware</function-performed>
            <function-performed>install and configure software</function-performed>
            <function-performed>OS updates, patches and hotfixes</function-performed>
            <function-performed>perform backups</function-performed>
         </authorized-privilege>
      </user>
      <user uuid="16ec71e7-025c-43e4-9d3f-3acb485fac2e">
         <title>[SAMPLE]Client Administrator</title>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="sensitivity"
               value="moderate"/>
         <prop name="privilege-level" value="non-privileged"/>
         <prop name="type" value="external"/>
         <role-id>external</role-id>
         <authorized-privilege>
            <title>Portal administration</title>
            <function-performed>Add/remove client users</function-performed>
            <function-performed>Create, modify and delete client applications</function-performed>
         </authorized-privilege>
      </user>
      <user uuid="ba7708c1-4041-48ab-9b7b-1ddb5e175fe0">
         <title>[SAMPLE]Program Director</title>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="sensitivity"
               value="limited"/>
         <prop name="privilege-level" value="no-logical-access"/>
         <prop name="type" value="internal"/>
         <role-id>program-director</role-id>
         <authorized-privilege>
            <title>Administrative Access Approver</title>
            <function-performed>Approves access requests for administrative accounts.</function-performed>
         </authorized-privilege>
         <authorized-privilege>
            <title>Access Approver</title>
            <function-performed>Approves access requests for administrative accounts.</function-performed>
         </authorized-privilege>
      </user>
      <component type="this-system" uuid="3d035035-dfca-4240-9787-a7e8561e1c7d">
         <title>This System</title>
         <description>
            <p>The system described by this SSP.</p>
            <p>This text was auto-generated by the OSCAL M3-RC1 data upgrade converter.</p>
         </description>
         <status state="operational"/>
      </component>
      <component uuid="60f92bcf-f353-4236-9803-2a5d417555f4" type="system">
         <title>This System</title>
         <description>
            <p>The entire system as depicted in the system authorization boundary</p>
         </description>
         <status state="operational"/>
      </component>
      <component uuid="e82e6e07-0c62-417e-8a19-3744991b4c65" type="system">
         <title>Name of Leveraged System</title>
         <description>
            <p>If the leveraged system owner provides a UUID for their system (such as in an OSCAL-based CRM), it should be used as the UUID for this component.</p>
         </description>
         <prop name="leveraged-authorization-uuid"
               value="5a9c98ab-8e5e-433d-a7bd-515c07cd1497"/>
         <status state="operational"/>
      </component>
      <component uuid="95beec7e-6f82-4aaa-8211-969cd7c1f1ab" type="validation">
         <title>[SAMPLE]Module Name</title>
         <description>
            <p>[SAMPLE]FIPS 140-2 Validated Module</p>
         </description>
         <prop ns="https://fedramp.gov/ns/oscal" name="cert-no" value="0000"/>
         <link href="https://csrc.nist.gov/projects/cryptographic-module-validation-program/Certificate/0000"/>
         <status state="operational"/>
      </component>
      <component uuid="05ceb8df-52e7-49db-9719-891723f366bd" type="software">
         <title>[SAMPLE]Product Name</title>
         <description>
            <p>FUNCTION: Describe typical component function.</p>
         </description>
         <prop name="asset-type" value="os"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="scan-type"
               value="infrastructure"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="vendor-name"
               value="Vendor Name"/>
         <prop name="model" value="Model Number"/>
         <prop name="version" value="Version Number"/>
         <prop name="patch-level" value="Patch Level"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="validation"
               value="fips-module-1"/>
         <status state="operational"/>
         <responsible-role role-id="admin-unix">
            <party-uuid>3360e343-9860-4bda-9dfc-ff427c3dfab6</party-uuid>
         </responsible-role>
         <remarks>
            <p>COMMENTS: Provide other comments as needed.</p>
         </remarks>
      </component>
      <component uuid="1541015b-6d19-42cb-a991-624cc082ed4d" type="hardware">
         <title>[SAMPLE]Product</title>
         <description>
            <p>FUNCTION: Describe typical component function.</p>
         </description>
         <prop name="asset-type" value="database"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="scan-type"
               value="infrastructure"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="scan-type" value="database"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="vendor-name"
               value="Vendor Name"/>
         <prop name="model" value="Model Number"/>
         <prop name="version" value="Version Number"/>
         <status state="operational"/>
         <responsible-role role-id="asset-administrator">
            <party-uuid>b306f5af-b93a-4a7f-a2b2-37a44fc92a79</party-uuid>
         </responsible-role>
         <responsible-role role-id="asset-owner">
            <party-uuid>36b8d6c0-3b25-42cc-b529-cf4066145cdd</party-uuid>
         </responsible-role>
         <remarks>
            <p>COMMENTS: Provide other comments as needed.</p>
         </remarks>
      </component>
      <component uuid="6617f60b-8bac-422d-9939-94f43ddc0f7a" type="os">
         <title>OS Sample</title>
         <description>
            <p>None</p>
         </description>
         <prop name="asset-type" value="os"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="scan-type"
               value="infrastructure"/>
         <prop name="baseline-configuration-name" value="Baseline Config. Name"/>
         <prop name="allows-authenticated-scan" value="yes"/>
         <status state="operational"/>
      </component>
      <component uuid="120f1404-7c9f-4856-a247-63bd89d9e769" type="software">
         <title>Database Sample</title>
         <description>
            <p>None</p>
         </description>
         <prop name="asset-type" value="database"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="scan-type" value="database"/>
         <prop name="baseline-configuration-name" value="Baseline Config. Name"/>
         <prop name="allows-authenticated-scan" value="yes"/>
         <status state="operational"/>
      </component>
      <component uuid="8f230d84-2f9b-44a3-acdb-019566ab2554" type="software">
         <title>Appliance Sample</title>
         <description>
            <p>None</p>
         </description>
         <prop name="asset-type" value="appliance"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="scan-type" value="web"/>
         <prop name="login-url" value="https://admin.offering.com/login"/>
         <prop name="baseline-configuration-name" value="Baseline Config. Name"/>
         <prop name="allows-authenticated-scan" value="no">
            <remarks>
               <p>Vendor appliance. No admin-level access.</p>
            </remarks>
         </prop>
         <status state="operational"/>
      </component>
      <component uuid="d5841417-de4c-4d84-ab3c-39dd1fd32a96" type="service">
         <title>[SAMPLE]Service Name</title>
         <description>
            <p>Describe the service</p>
         </description>
         <purpose>Describe the reason the service is needed.</purpose>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="used-by"
               value="What uses this service?"/>
         <prop name="protocol" value=""/>
         <status state="operational"/>
         <protocol name="http">
            <port-range start="80" end="80" transport="TCP"/>
         </protocol>
         <protocol name="https">
            <port-range start="443" end="443" transport="TCP"/>
         </protocol>
         <remarks>
            <p>Section 10.2, Table 10-1. Ports, Protocols and Services</p>
            <p>
               <b>SERVICES ARE NOW COMPONENTS WITH type='service'</b>
            </p>
         </remarks>
      </component>
      <component uuid="2812ef51-61e7-4505-afbb-da5a073a2a5b" type="interconnection">
         <title>[EXAMPLE]Authorized Connection Information System Name</title>
         <description>
            <p>Briefly describe the interconnection.</p>
         </description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="service-processor"
               value="[SAMPLE]Telco Name"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="ipv4-address"
               class="local"
               value="10.1.1.1"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="ipv4-address"
               class="remote"
               value="10.2.2.2"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="direction"
               value="incoming-outgoing"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="information"
               value="Describe the information being transmitted."/>
         <prop ns="https://fedramp.gov/ns/oscal" name="port" value="80"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="circuit" value="1"/>
         <prop name="connection-security"
               ns="https://fedramp.gov/ns/oscal"
               value="ipsec">
            <remarks>
               <p>If "other", remarks are required. Optional otherwise.</p>
            </remarks>
         </prop>
         <link href="#9d6cf2b4-8e88-4040-a33c-7bc206553a1a" rel="agreement"/>
         <status state="operational"/>
         <responsible-role role-id="isa-poc-remote">
            <party-uuid>09ad840f-aa79-43aa-9f22-25182c2ab11b</party-uuid>
         </responsible-role>
         <responsible-role role-id="isa-poc-local">
            <party-uuid>09ad840f-aa79-43aa-9f22-25182c2ab11b</party-uuid>
         </responsible-role>
         <responsible-role role-id="isa-authorizing-official-remote">
            <party-uuid>09ad840f-aa79-43aa-9f22-25182c2ab11b</party-uuid>
         </responsible-role>
         <responsible-role role-id="isa-authorizing-official-local">
            <party-uuid>09ad840f-aa79-43aa-9f22-25182c2ab11b</party-uuid>
         </responsible-role>
         <remarks>
            <p>Optional notes about this interconnection</p>
         </remarks>
      </component>
      <inventory-item uuid="98e37f90-fbb5-4177-badb-9b55229cc183">
         <description>
            <p>Flat-File Example (No implemented-component).</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.1.1.1"/>
         <prop name="ipv6-address" value="0000:0000:0000:0000"/>
         <prop name="virtual" value="no"/>
         <prop name="public" value="no"/>
         <prop name="fqdn" value="dns.name"/>
         <prop name="uri" value="uniform.resource.identifier"/>
         <prop name="netbios-name" value="netbios-name"/>
         <prop name="mac-address" value="00:00:00:00:00:00"/>
         <prop name="software-name" value="software-name"/>
         <prop name="version" value="V 0.0.0"/>
         <prop name="asset-type" value="os"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="vendor-name"
               value="Vendor Name"/>
         <prop name="model" value="Model Number"/>
         <prop name="patch-level" value="Patch-Level"/>
         <prop name="serial-number" value="Serial #"/>
         <prop name="asset-tag" value="Asset Tag"/>
         <prop name="vlan-id" value="VLAN Identifier"/>
         <prop name="network-id" value="Network Identifier"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="scan-type"
               value="infrastructure"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="scan-type" value="database"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="validation"
               value="component-id"/>
         <prop name="allows-authenticated-scan" value="no">
            <remarks>
               <p>If no, explain why. If yes, omit remarks field.</p>
            </remarks>
         </prop>
         <prop name="baseline-configuration-name" value="Baseline Config. Name"/>
         <prop name="physical-location" value="Physical location of Asset"/>
         <prop name="is-scanned" value="yes">
            <remarks>
               <p>If no, explain why. If yes, omit remarks field.</p>
            </remarks>
         </prop>
         <prop name="function" value="Required brief, text-based description.">
            <remarks>
               <p>Optional, longer, formatted description.</p>
            </remarks>
         </prop>
         <responsible-party role-id="asset-owner">
            <party-uuid>db234cb7-1776-425c-9ac4-b067c1723011</party-uuid>
         </responsible-party>
         <responsible-party role-id="asset-administrator">
            <party-uuid>b306f5af-b93a-4a7f-a2b2-37a44fc92a79</party-uuid>
         </responsible-party>
         <remarks>
            <p>COMMENTS: Additional information about this item.</p>
         </remarks>
      </inventory-item>
      <inventory-item uuid="c916d3c5-229e-4786-bf3f-4d71baa0e7a5">
         <description>
            <p>Component Inventory Example</p>
         </description>
         <prop name="asset-id" value="unique-asset-ID"/>
         <prop name="ipv4-address" value="10.2.2.2"/>
         <prop name="ipv6-address" value="0000:0000:0000:0000"/>
         <prop name="mac-address" value="00:00:00:00:00:00"/>
         <prop name="virtual" value="no"/>
         <prop name="public" value="no"/>
         <prop name="fqdn" value="dns.name"/>
         <prop name="uri" value="uniform.resource.locator"/>
         <prop name="netbios-name" value="netbios-name"/>
         <prop name="patch-level" value="Patch-Level"/>
         <prop name="baseline-configuration-name" value="Baseline Configuration Name"/>
         <prop name="physical-location" value="Physical location of Asset"/>
         <prop name="scan-authenticated"
               ns="https://fedramp.gov/ns/oscal"
               value="no">
            <remarks>
               <p>If no, explain why. If yes, omit remark.</p>
            </remarks>
         </prop>
         <prop name="scan-latest" ns="https://fedramp.gov/ns/oscal" value="yes">
            <remarks>
               <p>If no, explain why. If yes, omit remark.</p>
            </remarks>
         </prop>
         <responsible-party role-id="asset-owner">
            <party-uuid>3360e343-9860-4bda-9dfc-ff427c3dfab6</party-uuid>
         </responsible-party>
         <responsible-party role-id="asset-administrator">
            <party-uuid>b306f5af-b93a-4a7f-a2b2-37a44fc92a79</party-uuid>
         </responsible-party>
         <implemented-component component-uuid="05ceb8df-52e7-49db-9719-891723f366bd"/>
         <remarks>
            <p>COMMENTS: If needed, provide additional information about this inventory item.</p>
         </remarks>
      </inventory-item>
      <inventory-item uuid="37c00d5a-ccf2-4112-a0ee-8460be8cff40">
         <description>
            <p>None.</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.3.3.3"/>
         <prop name="is-scanned" value="yes"/>
         <implemented-component component-uuid="1541015b-6d19-42cb-a991-624cc082ed4d"/>
      </inventory-item>
      <inventory-item uuid="fb7a84fb-7e30-4f5b-9997-2ecd4d270bdd">
         <description>
            <p>None.</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.4.4.4"/>
         <prop name="is-scanned" value="yes"/>
         <implemented-component component-uuid="05ceb8df-52e7-49db-9719-891723f366bd"/>
      </inventory-item>
      <inventory-item uuid="779d4e89-bba6-432c-b50d-d699fe534129">
         <description>
            <p>None.</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.5.5.5"/>
         <prop name="is-scanned" value="yes"/>
         <implemented-component component-uuid="8f230d84-2f9b-44a3-acdb-019566ab2554"/>
      </inventory-item>
      <inventory-item uuid="20b207d5-5e77-4501-b02d-5d2a6e88db85">
         <description>
            <p>None.</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.6.6.6"/>
         <prop name="is-scanned" value="no">
            <remarks>
               <p>Asset wasn't running at time of scan.</p>
            </remarks>
         </prop>
         <implemented-component component-uuid="05ceb8df-52e7-49db-9719-891723f366bd"/>
      </inventory-item>
      <inventory-item uuid="79b4f0d1-91ab-49e8-af28-045c12aa9272">
         <description>
            <p>None.</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.7.7.7"/>
         <prop name="is-scanned" value="yes"/>
         <implemented-component component-uuid="1541015b-6d19-42cb-a991-624cc082ed4d"/>
      </inventory-item>
      <inventory-item uuid="b31b360d-b58b-4c7c-b344-68e17238d858">
         <description>
            <p>None.</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.8.8.8"/>
         <prop name="is-scanned" value="no">
            <remarks>
               <p>Asset wasn't running at time of scan.</p>
            </remarks>
         </prop>
         <implemented-component component-uuid="05ceb8df-52e7-49db-9719-891723f366bd"/>
      </inventory-item>
      <inventory-item uuid="55b55b3d-3bd9-409a-bc87-3b9a2074bacd">
         <description>
            <p>IPv4 Production Subnet.</p>
         </description>
         <prop name="asset-id" value="10.10.10.0"/>
         <prop name="ipv4-subnet" value="10.10.10.0/24"/>
         <prop name="is-scanned" value="yes"/>
      </inventory-item>
      <inventory-item uuid="c0dbefa1-c8e8-4ca8-bd73-67cb7b1fa3f6">
         <description>
            <p>IPv4 Management Subnet.</p>
         </description>
         <prop name="asset-id" value="10.10.20.0"/>
         <prop name="ipv4-subnet" value="10.10.20.0/24"/>
         <prop name="is-scanned" value="yes"/>
      </inventory-item>
   </system-implementation>
   <!-- Section 13 -->
   <control-implementation>
      <description>
         <p>FedRAMP SSP Template Section 13</p>
         <p>This description field is required by OSCAL. FedRAMP does not require any specific
            information here.</p>
      </description>
      <implemented-requirement control-id="ac-1" uuid="eee8697a-bc39-45aa-accc-d3e534932efb">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <set-parameter param-id="ac-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ac-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ac-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="ac-1_stmt.a" uuid="fb4d039a-dc4f-46f5-9c1f-f6343eaf69bc">
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="3f5612a4-cd1d-4c47-8cae-75d2eaa332cd">
               <description>
                  <p>Describe how Part a is satisfied within the system.</p>
               </description>
            </by-component>
            <remarks>
               <p>The specified component is the system itself.</p>
               <p>Any control implementation response that can not be associated with another component is associated with the component representing the system.</p>
            </remarks>
         </statement>
         <statement statement-id="ac-1_stmt.a.1"
                    uuid="0afdccce-b5ed-4127-ae19-cfbdd17d775e">
            <link href="#090ab379-2089-4830-b9fd-26d0729e22e9" rel="policy"/>
            <remarks>
               <p>This identifies a policy (attached in resources) that satisfies this control.</p>
            </remarks>
         </statement>
         <statement statement-id="ac-1_stmt.a.2"
                    uuid="ffaf5e02-3055-40df-bbeb-3b94e834a43f">
            <link href="#att-process-1" rel="process"/>
            <remarks>
               <p>This identifies a process (attached in resources) that satisfies this control.</p>
            </remarks>
         </statement>
         <statement statement-id="ac-1_stmt.b.1"
                    uuid="b46f97ec-55c1-4249-a9b9-3a228f1e3791">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="26afd0af-464a-4a33-8a83-f942ec5ef182">
               <description>
                  <p>Describe how Part b-1 is satisfied.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ac-1_stmt.b.2"
                    uuid="59c67969-3d5c-45f1-8e3e-1e642249633f">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="37e6602e-4c94-486f-ad10-64ac19dfa099">
               <description>
                  <p>Describe how Part b-2 is satisfied.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ac-2" uuid="7a36cf53-156d-4d1f-9a8b-433f61cc57b7">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="Completion Date"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="partial">
            <remarks>
               <p>Describe the portion of the control that is not satisfied.</p>
            </remarks>
         </prop>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="not-applicable">
            <remarks>
               <p>Describe the justification for marking this control Not Applicable.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="customer-configured">
            <remarks>
               <p>Describe any customer-configured requirements for satisfying this control.</p>
            </remarks>
         </prop>
         <responsible-role role-id="admin-unix"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="ac-2_prm_1">
            <value>[SAMPLE]privileged, non-privileged</value>
         </set-parameter>
         <set-parameter param-id="ac-2_prm_2">
            <value>[SAMPLE]all</value>
         </set-parameter>
         <set-parameter param-id="ac-2_prm_3">
            <value>[SAMPLE]The Access Control Procedure</value>
         </set-parameter>
         <set-parameter param-id="ac-2_prm_4">
            <value>[SAMPLE]annually</value>
         </set-parameter>
         <statement statement-id="ac-2_stmt.a" uuid="24a85abb-25ad-4686-850c-5c0e8ab69a0c">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="70bbeee7-f0ae-4502-839f-1db8a8ce9dd9">
               <description>
                  <p>Do not respond to this statement here. Respond within the <code>by-component</code> assembly below.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="8a72663c-28c7-41c2-8739-f1ee2d5761ac">
               <description>
                  <p>For the portion of the control satisfied by this system or its owning organization, describe
                        <strong>how</strong> the control is met.</p>
               </description>
               <prop name="responsibility" value="customer">
                  <remarks>
                     <p>General customer responsibility description.</p>
                  </remarks>
               </prop>
               <remarks>
                  <p>The component-uuid above points to the "this system" component.</p>
                  <p>Any control response content that does not cleanly fit another system component is placed here. This includes customer responsibility content.</p>
                  <p>This can also be used to provide a summary, such as a holistic overview of how multiple components work together.</p>
                  <p>While the "this system" component is not expclicity required within every <code>statement</code>, it will typically be present.</p>
               </remarks>
            </by-component>
            <by-component component-uuid="b7364f67-bf65-4df2-b756-4b9c6b1c4a52"
                          uuid="84de735f-ba37-4bb4-b784-79760f986a40">
               <description>
                  <p>For the portion inherited from an underlying FedRAMP-authorized provider,
                     describe <strong>what</strong> is inherited.</p>
               </description>
               <prop name="responsibility" value="customer">
                  <remarks>
                     <p>Component-specific customer responsibility description.</p>
                  </remarks>
               </prop>
            </by-component>
            <by-component component-uuid="cae07d12-8566-443a-95de-7596b9cac953"
                          uuid="13db02bb-1f33-4f79-8711-ed47c2c3d337">
               <description>
                  <p>For the portion of the control that must be configured by or provided by the
                     customer, describe the customer responsibility here. This is what will appear
                     in the Customer Responsibility Matrix.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="at-1" uuid="c332a6f8-bbe6-4ee9-aaea-d89d251c68df">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="at-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="at-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="at-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="at-1_stmt.a" uuid="ee5a11fb-9bae-4680-8f8c-575c85d47355">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="8ef2f9ed-bd07-4f93-b897-fd820218a6e6">
               <description>
                  <p>Component-based Approach</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="d3bdee1c-7d84-4ed4-8950-e13256edb7fa">
               <description>
                  <p>Describe how Part a is satisfied.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="at-1_stmt.a.1"
                    uuid="2e8ec7ce-c9c6-4f5f-9d50-3a3b9d3acf65">
            <link href="#090ab379-2089-4830-b9fd-26d0729e22e9" rel="policy"/>
            <remarks>
               <p>This identifies a policy (attached in resources) that satisfies this control.</p>
            </remarks>
         </statement>
         <statement statement-id="at-1_stmt.a.2"
                    uuid="e7f9b618-c092-4b8b-b416-0ee477026726">
            <link href="#att-process-1" rel="process"/>
            <remarks>
               <p>This identifies a process (attached in resources) that satisfies this control.</p>
            </remarks>
         </statement>
         <statement statement-id="at-1_stmt.b.1"
                    uuid="29192f0b-edb1-4820-b951-65ffdc64bb3e">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="ce72c0f1-ec52-49e1-aab3-8580cbca7e5e">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="5a5e5c3e-1108-47f1-a83f-05e0394219db">
               <description>
                  <p>Describe how Part b-1 is satisfied.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="at-1_stmt.b.2"
                    uuid="23a9bfa7-6e3f-4e00-a120-791b26a9157e">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="0ebc6d57-8edf-4275-82af-632afa9b1d18">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="fcc63699-04ab-4b69-b7b9-a13bee6685b3">
               <description>
                  <p>Describe how Part b-2 is satisfied.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="au-1" uuid="381c8d0c-e6ec-41a9-9b16-01657226c70f">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="au-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="au-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="au-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="au-1_stmt.a" uuid="9a2bd937-226e-4aaf-8261-2cf0c2e3aa10">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="a037eaa7-2fbe-49ab-be46-11d698725918">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="30042cb9-ff85-472f-b769-68bd7bb5bbd9">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="au-1_stmt.b.1"
                    uuid="d01f186f-a14f-4e22-b069-84a55e48a112">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="7d8910b1-109e-48bb-8543-45b8c8dac596">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="f41962c7-b53b-46f8-a84f-4aba25904bb8">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="au-1_stmt.b.2"
                    uuid="ea153acb-2bd0-41d9-8ebd-ba022d31230a">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="39cb5658-b8f6-43e0-9ffe-013dac901c33">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="9ad59f0d-17a2-4f3f-af6a-a8529d692195">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ca-1" uuid="43e388d9-3854-44f6-8c6f-17a6d51ee6a2">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="ca-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ca-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ca-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="ca-1_stmt.a" uuid="e7bd0a7e-5f92-4769-8cd3-76ad2f663a5c">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="1d38502e-a13f-4da2-aeaa-9e2b3a44c269">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="e5815f1d-ec94-4d98-8896-ec57e339bd7b">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ca-1_stmt.b.1"
                    uuid="b2c3ec86-b976-4e5a-9dc3-4ac2d570765e">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="5cd8b2d9-b194-40ea-a036-4aba6e3ff0cd">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="ca6b2bd5-3ddf-4167-a942-06e1955e49f8">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ca-1_stmt.b.2"
                    uuid="e9474eb8-36d6-4eab-abeb-f9bd17e66b22">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="bad73480-9058-413a-bb09-d111bd8f23aa">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="507b8b9d-2d40-4748-81c9-c5a13c8f8f05">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="cm-1" uuid="c8e45d78-2afe-42ae-80e1-c1e2499a0346">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="cm-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="cm-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="cm-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="cm-1_stmt.a" uuid="52339583-19b6-4774-9213-50b9f42fe51f">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="8945aafb-fd81-4d38-b9ee-0b153566790f">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="2916ebd5-c45a-466e-b8e9-00dd15b0c94d">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="cm-1_stmt.b.1"
                    uuid="f9cc6f3f-c64f-4fae-9a32-f964ebdc8e74">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="91670e6b-f164-492a-9aad-a9a2d6b8e114">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="678db1d2-a538-4986-ac94-63da312fe3f9">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="cm-1_stmt.b.2"
                    uuid="c548a71f-41d6-4e8c-b400-1764379348c4">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="40745320-eb16-4b16-af80-b18607be9994">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="a871cf91-04c7-4e03-9df6-80b3d5afc9bf">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="cp-1" uuid="13af9343-73e7-4d71-b386-9a0844fa7e45">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="cp-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="cp-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="cp-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="cp-1_stmt.a" uuid="8bde1fa5-eb81-4a1b-9e6e-5827e176025a">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="ef1ebd70-dc97-44b1-9c83-8e401f6c6920">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="157d7751-938c-441f-9299-02a339d98532">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="cp-1_stmt.b.1"
                    uuid="2fc9eec1-a49f-4cfa-9f7b-c702a1e21619">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="4e9b1a0a-6364-4b3c-8cdc-ec3e1e461c9c">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="6358db78-bab1-4139-b512-f65d3e48248b">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="cp-1_stmt.b.2"
                    uuid="db5b3977-bd51-4505-b3e2-1597bbd4d930">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="c020517e-adda-4f01-a0d1-a0aa3cb6ee5b">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="3de33bbe-1a15-4d10-b35d-56fd85e24571">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ia-1" uuid="4050c933-3ecc-4a8d-8da7-391364685cbb">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="ia-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ia-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ia-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="ia-1_stmt.a" uuid="ba92e479-705f-47a4-a763-dfc098ba239d">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="9af2df5d-4f00-46d9-8a75-724baa67fa32">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="5add335d-7375-49f0-843c-ac994e4d147b">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ia-1_stmt.b.1"
                    uuid="dba8c469-5758-497e-9856-e472a2e08677">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="70135b8f-c8f6-410e-aded-40be7a0d8fac">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="b04d86a0-b68c-41f0-9c0b-88a8daa457b7">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ia-1_stmt.b.2"
                    uuid="b56e37b1-1f4c-479b-bfa1-a2773c2eebfd">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="be523f20-df87-48d4-960d-1c38f6180fdd">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="c8fde380-9a41-404a-a88b-c20479a21618">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ir-1" uuid="229846dc-83cc-4ff2-a9ed-210490a343d9">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="ir-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ir-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ir-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="ir-1_stmt.a" uuid="7284efc2-d953-486c-ab8a-3caef6ce06c3">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="169c74fb-e6f4-4046-978e-79ae5814fdcf">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="7b385445-5e7b-4656-98f1-0f1353aab59e">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ir-1_stmt.b.1"
                    uuid="75c37e1a-6e8d-4ef0-99f4-c16f7995706c">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="2e37f6b4-8f45-423f-b93d-1fc9bd16c7a0">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="e7ae4685-2e30-4e00-9ada-b00b5eaf5578">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ir-1_stmt.b.2"
                    uuid="900591ec-2006-4622-bc87-59828d884d4f">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="5eff09b6-1cb0-4f9d-ac16-1d52faa3d5c0">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="f443c391-479d-492d-b7e9-55c9c2c107be">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ma-1" uuid="f0c6b63f-6b94-448f-bb16-db3d54b91734">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="ma-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ma-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ma-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="ma-1_stmt.a" uuid="d609e538-3976-418e-a368-58fc75cd03c0">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="499d1b82-bf8d-463e-b3c6-22417b11011b">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="93a9b046-63c4-4628-8547-39bc7d8df70c">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ma-1_stmt.b.1"
                    uuid="df1a6dd8-9e18-4408-8783-cb30e0413f22">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="b7adc7f7-ae07-4b17-8cd8-fe5f13f50d09">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="ad14f76a-a3eb-4349-8f6c-54cd99f1c040">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ma-1_stmt.b.2"
                    uuid="f02f759d-7d4c-41f2-b153-f3cc1e157e39">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="88eb79f6-615c-4d18-8e8a-0cf7abc58d93">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="32b337f6-eb61-4945-a139-4d2ae7737488">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="mp-1" uuid="fa3a9747-3451-456a-aae9-9896e03a52c8">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="mp-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="mp-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="mp-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="mp-1_stmt.a" uuid="bab45ad3-65ee-43bc-9c3e-c3e4e2db8001">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="20b544ef-9e1e-4325-b362-7b3c6f0cca9c">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="6668f521-4d5c-4317-868f-804878675bf2">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="mp-1_stmt.b.1"
                    uuid="ca35d4a5-ca73-4b3a-aa66-6c712c7a4a49">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="2ff6fc5a-1ee7-48b3-b534-0cd3dbbc864d">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="57e65240-5b41-40ee-89b1-f75d8fb259ad">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="mp-1_stmt.b.2"
                    uuid="0c5c6eda-9644-46f2-a29c-16fe4e248621">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="9b315aac-43f9-4ae7-9e78-a0b8d7f7c73c">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="ea6c7fa7-ccbf-414c-8c6b-9c928e914b35">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="pe-1" uuid="a85ff28e-517c-4455-8bd4-866103a2c94a">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="pe-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="pe-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="pe-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="pe-1_stmt.a" uuid="11fd3e46-4735-4986-91bc-747345fe608a">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="12c05f28-6f97-439b-9eb1-110f0076a5c1">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="dceb4401-c1fd-41a7-9e07-8d82a8042e61">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="pe-1_stmt.b.1"
                    uuid="a37f91e2-190d-40f7-829c-39776c14c8b4">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="218e56e0-fa10-49b5-8d03-0096d6980b8f">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="bbd2b372-b57d-4a3a-90c2-2189dd23664b">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="pe-1_stmt.b.2"
                    uuid="f3d57138-916c-4064-b2fc-aa8dd76849f8">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="bf063b0f-47c6-489e-977d-888caf38650c">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="f4a94538-220f-4f73-9487-73b72b68813e">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="pl-1" uuid="97ba1f95-92a8-480b-a489-960661e4206b">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="pl-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="pl-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="pl-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="pl-1_stmt.a" uuid="ec7af577-ff22-46bf-ac0a-cf9d75c72ebb">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="baf8d3b0-bb38-4d09-9d72-9e250570a8e8">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="679837fb-601e-4517-abe6-11ff6fc551b4">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="pl-1_stmt.b.1"
                    uuid="438f3e29-670a-49f2-8b9f-05d951318294">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="22cf3cc1-46c1-44ac-8082-342c1a09d4c4">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="ddce2988-ce9b-4f15-a427-6f18e4ba1817">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="pl-1_stmt.b.2"
                    uuid="96a4d13c-bd2b-4038-96c5-0f923f404bbd">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="315dbe5a-3f98-476f-898a-408ad9de9f7c">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="18d7c02e-f21b-4cd2-bf33-d27971ced47f">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ps-1" uuid="5e7498de-b540-4a28-b041-4381b023e98a">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="ps-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ps-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ps-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="ps-1_stmt.a" uuid="afe1703d-5e59-460b-b048-41b49699c5a1">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="ae5a3811-acf1-4195-8edd-d1c4ab8d7716">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="7d6cafb2-b613-4807-ad61-4f0f649bd5ee">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ps-1_stmt.b.1"
                    uuid="956c93e2-cf8f-482c-aaf7-91ab44c7cbd6">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="8c1af0f0-267c-457d-9a12-6b29c05cb9a7">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="f4fbfbc2-1a94-456d-a713-9d547f18a0c7">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ps-1_stmt.b.2"
                    uuid="6926c688-3fb2-4ab8-9acb-cff0b5acd365">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="7b3919ab-7a62-43ff-8c08-5e6f6460b9d2">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="2f9c701a-0f3e-4e3d-beae-debb08c406ed">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ra-1" uuid="789e6c0f-acda-4a94-9b48-7d41dd4c607c">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="ra-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ra-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ra-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="ra-1_stmt.a" uuid="8fe541ea-0920-42d0-8561-4e08f04d796c">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="c04523ba-79c6-4275-8e0d-29c087b0968b">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="5894d92b-05bf-4fc4-85dc-f5c37e112bc4">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ra-1_stmt.b.1"
                    uuid="b0e9ed47-fe83-485d-8d79-979833543a83">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="74ee9f12-0907-4fc0-ae20-b8f4fc943910">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="c90ad6ee-5a40-4996-8e6c-d85ff3f7559e">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ra-1_stmt.b.2"
                    uuid="d9a38f95-ded1-4d1d-afe2-242987222ebd">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="afe963d8-5c04-4d98-870d-3fcec147a9ed">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="d6f6ac98-4f15-45f2-9ecc-4447e96af44f">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="sa-1" uuid="55358f60-db9b-4d75-a313-5fa6c328273c">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="sa-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="sa-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="sa-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="sa-1_stmt.a" uuid="ae3f64be-2e62-4347-b06a-727bc28e4f9b">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="28d5f97a-80c5-4874-b646-4e6a0da49f9a">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="e5864f16-83f2-4faf-b7be-0810c6e58fc4">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="sa-1_stmt.b.1"
                    uuid="959519a9-3e12-47bc-8d76-50d9ab0b6544">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="383e459b-5a24-49a8-bcd7-d51e5e342dc4">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="bed8f51a-1773-493c-8167-c83712e03f01">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="sa-1_stmt.b.2"
                    uuid="9daa3848-9672-469c-9aa0-f363e3339123">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="39ff0aef-81b3-4330-9825-aecb009e48d1">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="518d4987-9436-4c1f-9e07-afa6b332f124">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="sc-1" uuid="9e2852c6-f48a-47b2-9ea5-77cbbb42b365">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="sc-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="sc-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="sc-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="sc-1_stmt.a" uuid="5e2e8372-c13b-4cf5-90c5-e8833a9fe241">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="8c01ac20-74aa-482b-8e84-2be7a0fc4c48">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="88cfadba-043b-483b-8032-73344aa53c96">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="sc-1_stmt.b.1"
                    uuid="8166980a-86c0-497d-87e4-453adfd0d4bd">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="c3aea0dd-4353-4a72-bb19-94cefa87a9c9">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="9abaeb64-56d2-48a1-bd8d-7b55411d31ca">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="sc-1_stmt.b.2"
                    uuid="eeea34ff-18ab-4c35-bf32-c74dbf746e7b">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="9f91469b-5237-4edb-a477-436608e76f05">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="ad20ff50-8a7c-4ffc-a918-260960f6fb42">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="si-1" uuid="81ba4fe8-1649-437b-9ecf-367fd87336e6">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="si-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="si-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="si-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="si-1_stmt.a" uuid="915b10d2-2275-4d86-951a-eec23f9ee77a">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="ec810fee-3620-4611-a0f0-17b37c6ad595">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="682311e7-e3f7-4d94-acf9-131149887fda">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="si-1_stmt.b.1"
                    uuid="2a5a6f7f-aeea-4ea4-be1e-859df4bf7521">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="1beeb6ad-7655-4f2c-be2e-fb235dbfcdcd">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="80ee0fe9-7f87-4dfa-887a-ac3bb2131943">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="si-1_stmt.b.2"
                    uuid="c152bbde-57fc-4864-ac51-861bd8bb83b4">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="e9b54d73-7753-46e7-a473-ae735ed7685c">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="78e8f2bb-67d7-49d3-a993-ce4bedcfbc47">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
   </control-implementation>
   <!-- Table 15-1 Names of Provided Attachments -->
   <back-matter>
      <!-- Section 12, Table 12-1, Table 12-2 -->
      <resource uuid="3a5ca2de-0f66-47e6-844d-6ccdf214b767">
         <title>FedRAMP Applicable Laws and Regulations</title>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="fedramp-citations"/>
         <rlink href="https://www.fedramp.gov/assets/resources/templates/SSP-A12-FedRAMP-Laws-and-Regulations-Template.xlsx"/>
      </resource>
      <resource uuid="12da89ef-51dd-4404-948d-e9f0e25b961e">
         <title>FedRAMP Master Acronym and Glossary</title>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="fedramp-acronyms"/>
         <rlink href="https://www.fedramp.gov/assets/resources/documents/FedRAMP_Master_Acronym_and_Glossary.pdf"/>
      </resource>
      <resource uuid="d45612a9-cf25-4ef6-b2dd-69e38ba2967a">
         <title>[SAMPLE]Name or Title of Document</title>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="law"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Publication Date"/>
         <document-id scheme="https://www.doi.org/">Identification Number</document-id>
         <rlink href="https://domain.example/path/to/document.pdf"/>
      </resource>
      <resource uuid="a8a0cc81-800f-479f-93d3-8b8743d9b98d">
         <title>[SAMPLE]Privacy-Related Law Citation</title>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="law"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="pii"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Publication Date"/>
         <document-id scheme="https://www.doi.org/">Identification Number</document-id>
         <rlink href="https://domain.example/path/to/document.pdf"/>
      </resource>
      <resource uuid="545e75c3-537f-48fe-9630-95337916d982">
         <title>[SAMPLE]Regulation Citation</title>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="regulation"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Publication Date"/>
         <document-id scheme="https://www.doi.org/">Identification Number</document-id>
         <rlink href="https://domain.example/path/to/document.pdf"/>
      </resource>
      <resource uuid="9d6cf2b4-8e88-4040-a33c-7bc206553a1a">
         <title>[SAMPLE]Interconnection Security Agreement Title</title>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
      </resource>
      <resource uuid="31a46c4f-2959-4287-bc1c-67297d7da60b">
         <description>CSP Logo</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="prepared-for-logo"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="csp-logo"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./logo.png" media-type="image/png"/>
         <base64>00000000</base64>
      </resource>
      <resource uuid="c5866ad8-8ed7-49b4-844a-0276fa9f8f51">
         <description>Preparer Logo</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="prepared-by-logo"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./party-1-logo.png" media-type="image/png"/>
         <base64>00000000</base64>
      </resource>
      <resource uuid="0846b6ef-cfa4-4bb3-8280-717f7e7b04d4">
         <description>FedRAMP Logo</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="fedramp-logo"/>
         <rlink href="https://github.com/GSA/fedramp-automation/raw/master/assets/FedRAMP_LOGO.png"/>
      </resource>
      <resource uuid="2c1747d6-874a-49a2-8488-2fd9735416bf">
         <description>3PAO Logo</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="3pao-logo"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./logo.png" media-type="image/png"/>
         <base64>00000000</base64>
      </resource>
      <resource uuid="d2eb3c18-6754-4e3a-a933-03d289e3fad5">
         <description>The primary authorization boundary diagram.</description>
         <!-- Use rlink and/or base64 -->
         <rlink href="./diagrams/boundary.png"/>
         <base64>00000000</base64>
         <remarks>
            <p>Section 9.2, Figure 9-1 Authorization Boundary Diagram (graphic)</p>
            <p>This should be referenced in the
               system-characteristics/authorization-boundary/diagram/link/@href flag using a value
               of "#d2eb3c18-6754-4e3a-a933-03d289e3fad5"</p>
         </remarks>
      </resource>
      <resource uuid="61081e81-850b-43c1-bf43-1ecbddcb9e7f">
         <description>The primary network diagram.</description>
         <!-- Use rlink and/or base64 -->
         <rlink href="./diagrams/network.png"/>
         <base64>00000000</base64>
         <remarks>
            <p>Section 9.4, Figure 9-2 Network Diagram (graphic)</p>
            <p>This should be referenced in the
               system-characteristics/network-architecture/diagram/link/@href flag using a value
               of "#61081e81-850b-43c1-bf43-1ecbddcb9e7f"</p>
         </remarks>
      </resource>
      <resource uuid="ac5d7535-f3b8-45d3-bf3b-735c82c64547">
         <description>The primary data flow diagram.</description>
         <!-- Use rlink and/or base64 -->
         <rlink href="./diagrams/dataflow.png"/>
         <base64>00000000</base64>
         <remarks>
            <p>Section 10, Figure 10-1 Data Flow Diagram (graphic)</p>
            <p>This should be referenced in the
               system-characteristics/data-flow/diagram/link/@href flag using a value
               of "#ac5d7535-f3b8-45d3-bf3b-735c82c64547"</p>
         </remarks>
      </resource>
      <resource uuid="090ab379-2089-4830-b9fd-26d0729e22e9">
         <title>Policy Title</title>
         <description>Policy document</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="policy"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./sample_policy.pdf"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Policy Attachment</p>
         </remarks>
      </resource>
      <resource uuid="ab300133-d749-4abb-b858-1cd6ffd8af9e">
         <title>Policy Title</title>
         <description>Policy document</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="policy"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./sample_policy.pdf"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Policy Attachment</p>
         </remarks>
      </resource>
      <resource uuid="1002a58e-9e11-4aa6-9ab4-2bde52995952">
         <title>Procedure Title</title>
         <description>Procedure document</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="procedure"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./sample_procedure.pdf"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Procedure Attachment</p>
         </remarks>
      </resource>
      <resource uuid="4bb1e2e5-261c-4b5c-b22c-e1627c2e8be6">
         <title>Procedure Title</title>
         <description>Procedure document</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="procedure"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./sample_procedure.pdf"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Procedure Attachment</p>
         </remarks>
      </resource>
      <resource uuid="90a128ac-c850-48f6-8fff-a55692f80b41">
         <title>User's Guide</title>
         <description>User's Guide</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="user-guide"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="guide"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./sample_guide.pdf"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: User's Guide Attachment</p>
         </remarks>
      </resource>
      <resource uuid="fab59751-b855-40cb-93c1-492562e20e18">
         <title>Privacy Impact Assessment</title>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="privacy-impact-assessment"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./pia.docx"/>
         <base64 filename="pia.docx">00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Privacy Impact Assessment</p>
         </remarks>
      </resource>
      <resource uuid="489112e1-57f2-4c29-8dd0-95b1442fbf3b">
         <title>Document Title</title>
         <description>Rules of Behavior</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="rules-of-behavior"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="rob"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="https://sample"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Rules of Behavior (ROB)</p>
         </remarks>
      </resource>
      <resource uuid="c7860916-f2f4-43aa-b578-d48cf8e6d381">
         <title>Document Title</title>
         <description>Contingency Plan (CP)</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="plan"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="https://sample"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Contingency Plan (CP) Attachment</p>
         </remarks>
      </resource>
      <resource uuid="ab56cf27-0dae-40d6-89b7-d750137309af">
         <title>Document Title</title>
         <description>Configuration Management (CM) Plan</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="plan"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="https://sample"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Configuration Management (CM) Plan Attachment</p>
         </remarks>
      </resource>
      <resource uuid="3f771ab5-8016-4571-98d1-f0fb962e15e2">
         <title>Document Title</title>
         <description>Incident Response (IR) Plan</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="plan"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="https://sample"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Incident Response (IR) Plan Attachment</p>
         </remarks>
      </resource>
      <resource uuid="49fb4631-1da2-41ca-b0b3-e1b1006d4025">
         <title>Separation of Duties Matrix</title>
         <description>Separation of Duties Matrix</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="https://sample"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Separation of Duties Matrix Attachment</p>
         </remarks>
      </resource>
      <resource uuid="9f1aae37-7359-411f-86c1-768aaab85e63">
         <title>FedRAMP High Baseline</title>
         <rlink media-type="application/xml"
                href="https://raw.githubusercontent.com/usnistgov/OSCAL/v1.0.0-milestone3/content/fedramp.gov/xml/FedRAMP_HIGH-baseline_profile.xml"/>
         <remarks>
            <p>Pointer to High baseline content in OSCAL.</p>
         </remarks>
      </resource>
      <resource uuid="890170c3-d4fa-4d25-ab96-8e4bf7cc237c">
         <title>FedRAMP Moderate Baseline</title>
         <rlink media-type="application/xml"
                href="https://raw.githubusercontent.com/usnistgov/OSCAL/v1.0.0-milestone3/content/fedramp.gov/xml/FedRAMP_MODERATE-baseline_profile.xml"/>
         <remarks>
            <p>Pointer to Moderate baseline content in OSCAL.</p>
         </remarks>
      </resource>
      <resource uuid="2acaf846-5496-4d36-8565-9a15b48aef2c">
         <title>FedRAMP Low Baseline</title>
         <rlink media-type="application/xml"
                href="https://raw.githubusercontent.com/usnistgov/OSCAL/v1.0.0-milestone3/content/fedramp.gov/xml/FedRAMP_LOW-baseline_profile.xml"/>
         <remarks>
            <p>Pointer to Low baseline content in OSCAL.</p>
         </remarks>
      </resource>
   </back-matter>
</system-security-plan>

959_Repro_Step3_rc2_100final_FedRAMP-SSP-OSCAL-Template.xml

<?xml version="1.0" encoding="UTF-8"?>
<?xml-model href="https://raw.githubusercontent.com/usnistgov/OSCAL/release-1.0/xml/schema/oscal_complete_schema.xsd" schematypens="http://www.w3.org/2001/XMLSchema" title="OSCAL complete schema"?>
<!-- Modified by the OSCAL 1.0.0 RC2 to OSCAL 1.0.0 conversion XSLT on 2021-06-15T18:40:52.631-04:00 -->
<system-security-plan xmlns="http://csrc.nist.gov/ns/oscal/1.0"
                      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                      xsi:schemaLocation="https://raw.githubusercontent.com/usnistgov/OSCAL/master/xml/schema/oscal_ssp_schema.xsd"
                      uuid="4a330034-5024-4718-953e-9a7a36d28967">
   <metadata>
      <title>FedRAMP System Security Plan (SSP)</title>
      <published>2020-07-01T00:00:00.00-04:00</published>
      <last-modified>2021-06-15T18:40:52.631-04:00</last-modified>
      <version>0.0</version>
      <oscal-version>1.0.0</oscal-version>
      <revisions>
         <revision>
            <published>2019-06-01T00:00:00.00-04:00</published>
            <version>1.0</version>
            <oscal-version>1.0.0</oscal-version>
            <prop ns="https://fedramp.gov/ns/oscal"
                  name="party-uuid"
                  value="6b286b5d-8f07-4fa7-8847-1dd0d88f73fb"/>
            <remarks>
               <p>Initial publication.</p>
            </remarks>
         </revision>
         <revision>
            <published>2020-06-01T00:00:00.00-04:00</published>
            <version>2.0</version>
            <oscal-version>1.0.0</oscal-version>
            <prop ns="https://fedramp.gov/ns/oscal" name="party-id" value="csp"/>
            <remarks>
               <p>Updated for annual assessment.</p>
            </remarks>
         </revision>
         <!-- Additional revision assemblies as needed. -->
      </revisions>
      <prop name="marking" value="Controlled Unclassified Information"/>
      <role id="prepared-by">
         <title>Prepared By</title>
         <description>The organization that prepared this SSP. If developed in-house, this is the CSP itself.</description>
      </role>
      <role id="prepared-for">
         <title>Prepared For</title>
         <description>The organization for which this SSP was prepared. Typically the CSP.</description>
      </role>
      <role id="content-approver">
         <title>System Security Plan Approval</title>
         <description>The individual or individuals accountable for the accuracy of this SSP.</description>
      </role>
      <role id="cloud-service-provider">
         <title>Cloud Service Provider</title>
         <short-name>CSP</short-name>
      </role>
      <role id="system-owner">
         <title>Information System Owner</title>
         <description>The individual within the CSP who is ultimately accountable for everything related to this system.</description>
      </role>
      <role id="authorizing-official">
         <title>Authorizing Official</title>
         <description>The individual or individuals who must grant this system an authorization to operate.</description>
      </role>
      <role id="authorizing-official-poc">
         <title>Authorizing Official's Point of Contact</title>
         <description>The individual representing the authorizing official.</description>
      </role>
      <role id="system-poc-management">
         <title>Information System Management Point of Contact (POC)</title>
         <description>The highest level manager who responsible for system operation on behalf of the System Owner.</description>
      </role>
      <role id="system-poc-technical">
         <title>Information System Technical Point of Contact</title>
         <description>The individual or individuals leading the technical operation of the system.</description>
      </role>
      <role id="system-poc-other">
         <title>General Point of Contact (POC)</title>
         <description>A general point of contact for the system, designated by the system owner.</description>
      </role>
      <role id="information-system-security-officer">
         <title>System Information System Security Officer (or Equivalent)</title>
         <description>The individual accountable for the security posture of the system on behalf of the system owner.</description>
      </role>
      <role id="privacy-poc">
         <title>Privacy Official's Point of Contact</title>
         <description>The individual responsible for the privacy threshold analysis and if necessary the privacy impact assessment.</description>
      </role>
      <role id="asset-owner">
         <title>Owner of an inventory item within the system.</title>
      </role>
      <role id="asset-administrator">
         <title>Administrative responsibility an inventory item within the system.</title>
      </role>
      <role id="isa-poc-local">
         <title>ICA POC (Local)</title>
         <description>The point of contact for an interconnection on behalf of this system.</description>
         <remarks>
            <p>Remove this role if there are no ICAs.</p>
         </remarks>
      </role>
      <role id="isa-poc-remote">
         <title>ICA POC (Remote)</title>
         <description>The point of contact for an interconnection on behalf of this external system to which this system connects.</description>
         <remarks>
            <p>Remove this role if there are no ICAs.</p>
         </remarks>
      </role>
      <role id="isa-authorizing-official-local">
         <title>ICA Signatory (Local)</title>
         <description>Responsible for signing an interconnection security agreement on behalf of this system.</description>
         <remarks>
            <p>Remove this role if there are no ICAs.</p>
         </remarks>
      </role>
      <role id="isa-authorizing-official-remote">
         <title>ICA Signatory (Remote)</title>
         <description>Responsible for signing an interconnection security agreement on behalf of the external system to which this system connects.</description>
         <remarks>
            <p>Remove this role if there are no ICAs.</p>
         </remarks>
      </role>
      <role id="consultant">
         <title>Consultant</title>
         <description>Any consultants involved with developing or maintaining this content.</description>
      </role>
      <role id="admin-unix">
         <title>[SAMPLE]Unix Administrator</title>
         <description>This is a sample role.</description>
      </role>
      <role id="admin-client">
         <title>[SAMPLE]Client Administrator</title>
         <description>This is a sample role.</description>
      </role>
      <role id="program-director">
         <title>[SAMPLE]Program Director</title>
         <description>This is a sample role.</description>
      </role>
      <role id="fedramp-pmo">
         <title>Federal Risk and Authorization Management Program (FedRAMP) Program Management Office (PMO)</title>
         <short-name>FedRAMP PMO</short-name>
      </role>
      <role id="fedramp-jab">
         <title>Federal Risk and Authorization Management Program (FedRAMP) Joint Authorization Board (JAB)</title>
         <short-name>FedRAMP JAB</short-name>
      </role>
      <location uuid="27b78960-59ef-4619-82b0-ae20b9c709ac">
         <title>CSP HQ</title>
         <address type="work">
            <addr-line>Suite 0000</addr-line>
            <addr-line>1234 Some Street</addr-line>
            <city>Haven</city>
            <state>ME</state>
            <postal-code>00000</postal-code>
         </address>
         <remarks>
            <p>There must be one location identifying the CSP's primary business address, such as the CSP's HQ, or the address of the system owner's primary business location.</p>
         </remarks>
      </location>
      <location uuid="16adcc8d-65d8-4583-80d3-9cf007744fec">
         <title>Primary Data Center</title>
         <address>
            <addr-line>2222 Main Street</addr-line>
            <city>Anywhere</city>
            <state>--</state>
            <postal-code>00000-0000</postal-code>
         </address>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="data-center"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="primary-data-center"/>
         <remarks>
            <p>There must be one location for each data center.</p>
            <p>There must be at least two data centers.</p>
            <p>For a data center, briefly summarize the components at this location.</p>
            <p>All data centers must have a conformity tag of "data-center".</p>
            <p>A primary data center must also have a conformity tag of "primary-data-center".</p>
         </remarks>
      </location>
      <location uuid="ad321514-7b9f-4374-8409-efb18eea6e5d">
         <title>Secondary Data Center</title>
         <address>
            <addr-line>3333 Small Road</addr-line>
            <city>Anywhere</city>
            <state>--</state>
            <postal-code>00000-0000</postal-code>
         </address>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="data-center"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="alternate-data-center"/>
         <remarks>
            <p>There must be one location for each data center.</p>
            <p>There must be at least two data centers.</p>
            <p>For a data center, briefly summarize the components at this location.</p>
            <p>All data centers must have a conformity tag of "data-center"</p>
            <p>An alternate or backup data center must also have a conformity tag of "alternate-data-center".</p>
         </remarks>
      </location>
      <party uuid="6b286b5d-8f07-4fa7-8847-1dd0d88f73fb" type="organization">
         <name>Cloud Service Provider (CSP) Name</name>
         <short-name>CSP Acronym/Short Name</short-name>
         <location-uuid>27b78960-59ef-4619-82b0-ae20b9c709ac</location-uuid>
         <remarks>
            <p>Replace sample CSP information.</p>
         </remarks>
      </party>
      <party uuid="77e0e2c8-2560-4fe9-ac78-c3ff4ffc9f6d" type="organization">
         <name>Federal Risk and Authorization Management Program: Program Management Office</name>
         <short-name>FedRAMP PMO</short-name>
         <link href="https://fedramp.gov"/>
         <email-address>info@fedramp.gov</email-address>
         <address type="work">
            <addr-line>1800 F St. NW</addr-line>
            <addr-line/>
            <city>Washington</city>
            <state>DC</state>
            <postal-code/>
            <country>US</country>
         </address>
         <remarks>
            <p>This party entry must be present in a FedRAMP SSP.</p>
            <p>The uuid may be different; however, the uuid must be associated with the "fedramp-pmo" role in the responsible-party assemblies.</p>
         </remarks>
      </party>
      <party uuid="49017ec3-9f51-4dbd-9253-858c2b1295fd" type="organization">
         <name>Federal Risk and Authorization Management Program: Joint Authorization Board</name>
         <short-name>FedRAMP JAB</short-name>
         <remarks>
            <p>This party entry must be present in a FedRAMP SSP.</p>
            <p>The uuid may be different; however, the uuid must be associated with the "fedramp-jab" role in the responsible-party assemblies.</p>
         </remarks>
      </party>
      <party uuid="78992555-4a99-4eaa-868c-f2c249679dd3" type="organization">
         <name>External Organization</name>
         <short-name>External</short-name>
         <remarks>
            <p>Generic placeholder for any external organization.</p>
         </remarks>
      </party>
      <party uuid="f595397b-cbe4-4a87-8c86-9bff91c4e7fd" type="organization">
         <name>Agency Name</name>
         <short-name>A.N.</short-name>
         <remarks>
            <p>Generic placeholder for an authorizing agency.</p>
         </remarks>
      </party>
      <party uuid="8e3d39da-4851-4d2a-adb5-4b5585ded952" type="organization">
         <name>Name of Consulting Org</name>
         <short-name>NOCO</short-name>
         <link href="https://consulting.sample"/>
         <email-address>poc@consulting.sample</email-address>
         <address type="work">
            <addr-line>3333 Corporate Way</addr-line>
            <city>Washington</city>
            <state>DC</state>
            <postal-code/>
            <country>US</country>
         </address>
      </party>
      <party uuid="80361ec4-bfce-4b5c-85c8-313d6ebd220b" type="organization">
         <name>[SAMPLE]Remote System Org Name</name>
      </party>
      <party uuid="09ad840f-aa79-43aa-9f22-25182c2ab11b" type="person">
         <name>[SAMPLE]ICA POC's Name</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>person@ica.org.example</email-address>
         <telephone-number>202-555-1212</telephone-number>
         <member-of-organization>80361ec4-bfce-4b5c-85c8-313d6ebd220b</member-of-organization>
      </party>
      <party uuid="f0bc13a4-3303-47dd-80d3-380e159c8362" type="organization">
         <name>[SAMPLE]Example IaaS Provider</name>
         <short-name>E.I.P.</short-name>
         <remarks>
            <p>Underlying service provider. Leveraged Authorization.</p>
         </remarks>
      </party>
      <party uuid="3360e343-9860-4bda-9dfc-ff427c3dfab6" type="person">
         <name>[SAMPLE]Person Name 1</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0001</telephone-number>
         <address>
            <addr-line>Mailstop A-1</addr-line>
         </address>
         <location-uuid>27b78960-59ef-4619-82b0-ae20b9c709ac</location-uuid>
         <member-of-organization>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</member-of-organization>
      </party>
      <party uuid="36b8d6c0-3b25-42cc-b529-cf4066145cdd" type="person">
         <name>[SAMPLE]Person Name 2</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0002</telephone-number>
         <address type="work">
            <addr-line>Address Line</addr-line>
            <city>City</city>
            <state>ST</state>
            <postal-code>00000</postal-code>
            <country>US</country>
         </address>
         <member-of-organization>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</member-of-organization>
      </party>
      <party uuid="0cec09d9-20c6-470b-9ffc-85763375880b" type="person">
         <name>[SAMPLE]Person Name 3</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0003</telephone-number>
         <address type="work">
            <addr-line>Address Line</addr-line>
            <city>City</city>
            <state>ST</state>
            <postal-code>00000</postal-code>
            <country>US</country>
         </address>
         <member-of-organization>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</member-of-organization>
      </party>
      <party uuid="f75e21f6-43d8-46ab-890d-7f2eebc5a830" type="person">
         <name>[SAMPLE]Person Name 4</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0004</telephone-number>
         <address type="work">
            <addr-line>Address Line</addr-line>
            <city>City</city>
            <state>ST</state>
            <postal-code>00000</postal-code>
            <country>US</country>
         </address>
         <member-of-organization>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</member-of-organization>
      </party>
      <party uuid="132953a9-640c-46f7-9de9-3fa15ec99361" type="person">
         <name>[SAMPLE]Person Name 5</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0005</telephone-number>
         <address type="work">
            <addr-line>Address Line</addr-line>
            <city>City</city>
            <state>ST</state>
            <postal-code>00000</postal-code>
            <country>US</country>
         </address>
         <member-of-organization>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</member-of-organization>
      </party>
      <party uuid="4fded5fd-7a65-47ea-bd76-df57c46e27d1" type="person">
         <name>[SAMPLE]Person Name 6</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0006</telephone-number>
         <address type="work">
            <addr-line>Address Line</addr-line>
            <city>City</city>
            <state>ST</state>
            <postal-code>00000</postal-code>
            <country>US</country>
         </address>
         <member-of-organization>78992555-4a99-4eaa-868c-f2c249679dd3</member-of-organization>
      </party>
      <party uuid="db234cb7-1776-425c-9ac4-b067c1723011" type="person">
         <name>[SAMPLE]Person Name 7</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0007</telephone-number>
         <address type="work">
            <addr-line>Address Line</addr-line>
            <city>City</city>
            <state>ST</state>
            <postal-code>00000</postal-code>
            <country>US</country>
         </address>
         <member-of-organization>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</member-of-organization>
      </party>
      <party uuid="b306f5af-b93a-4a7f-a2b2-37a44fc92a79" type="organization">
         <name>[SAMPLE] IT Department</name>
      </party>
      <party uuid="59cdc953-5902-4fa4-a878-f3163854624c" type="organization">
         <name>[SAMPLE]Security Team</name>
      </party>
      <responsible-party role-id="cloud-service-provider">
         <party-uuid>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="prepared-by">
         <party-uuid>3360e343-9860-4bda-9dfc-ff427c3dfab6</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="prepared-for">
         <!-- Exacty one -->
         <party-uuid>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</party-uuid>
      </responsible-party>
      <responsible-party role-id="content-approver">
         <party-uuid>3360e343-9860-4bda-9dfc-ff427c3dfab6</party-uuid>
         <party-uuid>36b8d6c0-3b25-42cc-b529-cf4066145cdd</party-uuid>
         <remarks>
            <p>One or more</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="system-owner">
         <party-uuid>3360e343-9860-4bda-9dfc-ff427c3dfab6</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="authorizing-official">
         <party-uuid>49017ec3-9f51-4dbd-9253-858c2b1295fd</party-uuid>
         <party-uuid>4fded5fd-7a65-47ea-bd76-df57c46e27d1</party-uuid>
         <remarks>
            <p>One or more</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="system-poc-management">
         <party-uuid>0cec09d9-20c6-470b-9ffc-85763375880b</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="system-poc-technical">
         <party-uuid>f75e21f6-43d8-46ab-890d-7f2eebc5a830</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="information-system-security-officer">
         <party-uuid>132953a9-640c-46f7-9de9-3fa15ec99361</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="authorizing-official-poc">
         <party-uuid>4fded5fd-7a65-47ea-bd76-df57c46e27d1</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="privacy-poc">
         <party-uuid>db234cb7-1776-425c-9ac4-b067c1723011</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="fedramp-pmo">
         <party-uuid>77e0e2c8-2560-4fe9-ac78-c3ff4ffc9f6d</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="fedramp-jab">
         <party-uuid>49017ec3-9f51-4dbd-9253-858c2b1295fd</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <remarks>
         <p>This OSCAL-based FedRAMP SSP Template can be used for the FedRAMP Low, Moderate, and
            High baselines.</p>
         <p>Guidance for OSCAL-based FedRAMP Tailored content has not yet been developed.</p>
      </remarks>
   </metadata>
   <!-- ====================================================
      Link this SSP to the appropriate FedRAMP baseline using ONE of the import statements below.
      NOTE: This points to a resource at the end of this file with links to both the XML and JSON
            versions of the baseline. Tools must select the appropriate link 
      FedRAMP HIGH Baseline: 
      <import-profile href="#9f1aae37-7359-411f-86c1-768aaab85e63"/>
      FedRAMP MODERATE Baseline:
      <import-profile href="#890170c3-d4fa-4d25-ab96-8e4bf7cc237c"/>
      FedRAMP LOW Baseline: 
      <import-profile href="#2acaf846-5496-4d36-8565-9a15b48aef2c"/>
   ==================================================== -->
   <import-profile href="#890170c3-d4fa-4d25-ab96-8e4bf7cc237c"/>
   <system-characteristics>
      <!-- Table 1-1 Information System Name and Title -->
      <system-id identifier-type="https://fedramp.gov">F00000000</system-id>
      <system-name>System's Full Name</system-name>
      <system-name-short>System's Short Name or Acronym</system-name-short>
      <!-- Section 9.1 (Old SSP Format Section 8.1) -->
      <description>
         <p>Describe the purpose and functions of this system here.</p>
      </description>
      <!-- FedRAMP Authorizatoin Type: fedramp-jab, fedramp-agency, or fedramp-li-saas -->
      <prop ns="https://fedramp.gov/ns/oscal"
            name="authorization-type"
            value="fedramp-agency"/>
      <!-- Section 2.3 Digital Identity Determination and Attachment 3, Digital Identity Worksheet -->
      <!-- 1 = low, 2= moderate, 3 = high  -->
      <prop ns="https://fedramp.gov/ns/oscal"
            name="security-eauth-level"
            class="security-eauth"
            value="2"/>
      <!-- Attachment 3, Digital Identity Worksheet: Additional Detail - Not Required -->
      <prop name="identity-assurance-level" value="2"/>
      <prop name="authenticator-assurance-level" value="2"/>
      <prop name="federation-assurance-level" value="2"/>
      <!-- Table 8-1 Service Layers Represented in this SSP -->
      <prop name="cloud-service-model" value="saas">
         <remarks>
            <p>Remarks are required if service model is "other". Optional otherwise.</p>
         </remarks>
      </prop>
      <!-- Table 8-2 Cloud Deployment Model Represented in this SSP -->
      <prop name="cloud-deployment-model" value="government-only-cloud">
         <remarks>
            <p>Remarks are required if deployment model is "hybrid-cloud" or "other". Optional
               otherwise.</p>
         </remarks>
      </prop>
      <!-- Table 2-1 Security Categorization and 2-4 Baseline Security Configuration -->
      <security-sensitivity-level>low</security-sensitivity-level>
      <!-- Table 2-2, Table 15-9, and Attachment 4 -->
      <system-information>
         <!-- Attachment 4, PTA/PIA Designation -->
         <prop name="privacy-sensitive" value="yes"/>
         <!-- Attachment 4, PTA Qualifying Questions -->
         <!--Does the ISA collect, maintain, or share PII in any identifiable form? -->
         <prop ns="https://fedramp.gov/ns/oscal"
               name="pta-1"
               class="pta"
               value="yes"/>
         <!--Does the ISA collect, maintain, or share PII information from or about the public? -->
         <prop ns="https://fedramp.gov/ns/oscal"
               name="pta-2"
               class="pta"
               value="yes"/>
         <!--Has a Privacy Impact Assessment ever been performed for the ISA? -->
         <prop ns="https://fedramp.gov/ns/oscal"
               name="pta-3"
               class="pta"
               value="yes"/>
         <!--Is there a Privacy Act System of Records Notice (SORN) for this ISA system? (If so, please specify the SORN ID.) -->
         <prop ns="https://fedramp.gov/ns/oscal"
               name="pta-4"
               class="pta"
               value="no"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="sorn-id"
               class="pta"
               value="[No SORN ID]"/>
         <information-type uuid="06ecba4f-db96-4491-a3a2-7febfa227435">
            <title>Information Type Name</title>
            <description>
               <p>A description of the information.</p>
            </description>
            <categorization system="https://doi.org/10.6028/NIST.SP.800-60v2r1">
               <information-type-id>C.2.4.1</information-type-id>
            </categorization>
            <confidentiality-impact>
               <base>fips-199-moderate</base>
               <selected>fips-199-moderate</selected>
               <adjustment-justification>
                  <p>Required if the base and selected values do not match.</p>
               </adjustment-justification>
            </confidentiality-impact>
            <integrity-impact>
               <base>fips-199-moderate</base>
               <selected>fips-199-moderate</selected>
               <adjustment-justification>
                  <p>Required if the base and selected values do not match.</p>
               </adjustment-justification>
            </integrity-impact>
            <availability-impact>
               <base>fips-199-moderate</base>
               <selected>fips-199-moderate</selected>
               <adjustment-justification>
                  <p>Required if the base and selected values do not match.</p>
               </adjustment-justification>
            </availability-impact>
         </information-type>
      </system-information>
      <!-- Table 2-3 Security Impact Level -->
      <security-impact-level>
         <security-objective-confidentiality>fips-199-moderate</security-objective-confidentiality>
         <security-objective-integrity>fips-199-moderate</security-objective-integrity>
         <security-objective-availability>fips-199-moderate</security-objective-availability>
      </security-impact-level>
      <!-- Section 2.3 Digital Identity Determination & Table 7-1 System Status -->
      <status state="operational">
         <remarks>
            <p>Remarks are required if status/state is "other". Optional otherwise.</p>
         </remarks>
      </status>
      <!-- Table 8-3 Leveraged Authorizations (Typically 0 or 1) -->
      <!-- ***** REWORKING LEVERAGED AUTHORIZATIONS MODEL WITH NIST ****** -->
      <!-- Section 9.2, Figure 9-1. Authorization Boundary Diagram -->
      <authorization-boundary>
         <description>
            <p>A holistic, top-level explanation of the FedRAMP authorization boundary.</p>
         </description>
         <diagram uuid="dbf46c27-52a9-49c4-beb6-b6399cd75497">
            <description>
               <p>A diagram-specific explanation.</p>
            </description>
            <link href="#d2eb3c18-6754-4e3a-a933-03d289e3fad5" rel="diagram"/>
            <caption>Authorization Boundary Diagram</caption>
         </diagram>
      </authorization-boundary>
      <!-- Section 9.4, Figure 9-2. Network Diagram -->
      <network-architecture>
         <description>
            <p>A holistic, top-level explanation of the network architecture.</p>
         </description>
         <diagram uuid="e97c3395-433a-48c1-8cc7-dd1e1555941c">
            <description>
               <p>A diagram-specific explanation.</p>
            </description>
            <link href="#61081e81-850b-43c1-bf43-1ecbddcb9e7f" rel="diagram"/>
            <caption>Network Diagram</caption>
         </diagram>
      </network-architecture>
      <!-- Section 10, Figure 10-1. Data Flow Diagram -->
      <data-flow>
         <description>
            <p>A holistic, top-level explanation of the system's data flows.</p>
         </description>
         <diagram uuid="e3b98448-4219-46a5-b229-412423c566f3">
            <description>
               <p>A diagram-specific explanation.</p>
            </description>
            <link href="#ac5d7535-f3b8-45d3-bf3b-735c82c64547" rel="diagram"/>
            <caption>Data Flow Diagram</caption>
         </diagram>
      </data-flow>
   </system-characteristics>
   <system-implementation>
      <prop ns="https://fedramp.gov/ns/oscal" name="users-internal" value="0"/>
      <prop ns="https://fedramp.gov/ns/oscal" name="users-external" value="0"/>
      <prop ns="https://fedramp.gov/ns/oscal"
            name="users-internal-future"
            value="0"/>
      <prop ns="https://fedramp.gov/ns/oscal"
            name="users-external-future"
            value="0"/>
      <leveraged-authorization uuid="5a9c98ab-8e5e-433d-a7bd-515c07cd1497">
         <title>Name of Underlying System</title>
         <party-uuid>f0bc13a4-3303-47dd-80d3-380e159c8362</party-uuid>
         <date-authorized>2015-01-01</date-authorized>
         <remarks>
            <p>The leveraged-authorizaton assembly is supposed to have a required uuid flag instead of an optional id flag. This will be fixed in the syntax shortly.</p>
            <p>Use one leveraged-authorization assembly for each underlying system. (In the legacy world, these may be general support systems.</p>
         </remarks>
      </leveraged-authorization>
      <user uuid="9cb0fab0-78bd-44ba-bcb8-3e9801cc952f">
         <title>[SAMPLE]Unix System Administrator</title>
         <prop ns="https://fedramp.gov/ns/oscal" name="sensitivity" value="high"/>
         <prop name="privilege-level" value="privileged"/>
         <prop name="type" value="internal"/>
         <role-id>admin-unix</role-id>
         <authorized-privilege>
            <title>Full administrative access (root)</title>
            <function-performed>Add/remove users and hardware</function-performed>
            <function-performed>install and configure software</function-performed>
            <function-performed>OS updates, patches and hotfixes</function-performed>
            <function-performed>perform backups</function-performed>
         </authorized-privilege>
      </user>
      <user uuid="16ec71e7-025c-43e4-9d3f-3acb485fac2e">
         <title>[SAMPLE]Client Administrator</title>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="sensitivity"
               value="moderate"/>
         <prop name="privilege-level" value="non-privileged"/>
         <prop name="type" value="external"/>
         <role-id>external</role-id>
         <authorized-privilege>
            <title>Portal administration</title>
            <function-performed>Add/remove client users</function-performed>
            <function-performed>Create, modify and delete client applications</function-performed>
         </authorized-privilege>
      </user>
      <user uuid="ba7708c1-4041-48ab-9b7b-1ddb5e175fe0">
         <title>[SAMPLE]Program Director</title>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="sensitivity"
               value="limited"/>
         <prop name="privilege-level" value="no-logical-access"/>
         <prop name="type" value="internal"/>
         <role-id>program-director</role-id>
         <authorized-privilege>
            <title>Administrative Access Approver</title>
            <function-performed>Approves access requests for administrative accounts.</function-performed>
         </authorized-privilege>
         <authorized-privilege>
            <title>Access Approver</title>
            <function-performed>Approves access requests for administrative accounts.</function-performed>
         </authorized-privilege>
      </user>
      <component type="this-system" uuid="3d035035-dfca-4240-9787-a7e8561e1c7d">
         <title>This System</title>
         <description>
            <p>The system described by this SSP.</p>
            <p>This text was auto-generated by the OSCAL M3-RC1 data upgrade converter.</p>
         </description>
         <status state="operational"/>
      </component>
      <component uuid="60f92bcf-f353-4236-9803-2a5d417555f4" type="system">
         <title>This System</title>
         <description>
            <p>The entire system as depicted in the system authorization boundary</p>
         </description>
         <status state="operational"/>
      </component>
      <component uuid="e82e6e07-0c62-417e-8a19-3744991b4c65" type="system">
         <title>Name of Leveraged System</title>
         <description>
            <p>If the leveraged system owner provides a UUID for their system (such as in an OSCAL-based CRM), it should be used as the UUID for this component.</p>
         </description>
         <prop name="leveraged-authorization-uuid"
               value="5a9c98ab-8e5e-433d-a7bd-515c07cd1497"/>
         <status state="operational"/>
      </component>
      <component uuid="95beec7e-6f82-4aaa-8211-969cd7c1f1ab" type="validation">
         <title>[SAMPLE]Module Name</title>
         <description>
            <p>[SAMPLE]FIPS 140-2 Validated Module</p>
         </description>
         <prop ns="https://fedramp.gov/ns/oscal" name="cert-no" value="0000"/>
         <link href="https://csrc.nist.gov/projects/cryptographic-module-validation-program/Certificate/0000"/>
         <status state="operational"/>
      </component>
      <component uuid="05ceb8df-52e7-49db-9719-891723f366bd" type="software">
         <title>[SAMPLE]Product Name</title>
         <description>
            <p>FUNCTION: Describe typical component function.</p>
         </description>
         <prop name="asset-type" value="os"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="scan-type"
               value="infrastructure"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="vendor-name"
               value="Vendor Name"/>
         <prop name="model" value="Model Number"/>
         <prop name="version" value="Version Number"/>
         <prop name="patch-level" value="Patch Level"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="validation"
               value="fips-module-1"/>
         <status state="operational"/>
         <responsible-role role-id="admin-unix">
            <party-uuid>3360e343-9860-4bda-9dfc-ff427c3dfab6</party-uuid>
         </responsible-role>
         <remarks>
            <p>COMMENTS: Provide other comments as needed.</p>
         </remarks>
      </component>
      <component uuid="1541015b-6d19-42cb-a991-624cc082ed4d" type="hardware">
         <title>[SAMPLE]Product</title>
         <description>
            <p>FUNCTION: Describe typical component function.</p>
         </description>
         <prop name="asset-type" value="database"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="scan-type"
               value="infrastructure"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="scan-type" value="database"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="vendor-name"
               value="Vendor Name"/>
         <prop name="model" value="Model Number"/>
         <prop name="version" value="Version Number"/>
         <status state="operational"/>
         <responsible-role role-id="asset-administrator">
            <party-uuid>b306f5af-b93a-4a7f-a2b2-37a44fc92a79</party-uuid>
         </responsible-role>
         <responsible-role role-id="asset-owner">
            <party-uuid>36b8d6c0-3b25-42cc-b529-cf4066145cdd</party-uuid>
         </responsible-role>
         <remarks>
            <p>COMMENTS: Provide other comments as needed.</p>
         </remarks>
      </component>
      <component uuid="6617f60b-8bac-422d-9939-94f43ddc0f7a" type="os">
         <title>OS Sample</title>
         <description>
            <p>None</p>
         </description>
         <prop name="asset-type" value="os"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="scan-type"
               value="infrastructure"/>
         <prop name="baseline-configuration-name" value="Baseline Config. Name"/>
         <prop name="allows-authenticated-scan" value="yes"/>
         <status state="operational"/>
      </component>
      <component uuid="120f1404-7c9f-4856-a247-63bd89d9e769" type="software">
         <title>Database Sample</title>
         <description>
            <p>None</p>
         </description>
         <prop name="asset-type" value="database"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="scan-type" value="database"/>
         <prop name="baseline-configuration-name" value="Baseline Config. Name"/>
         <prop name="allows-authenticated-scan" value="yes"/>
         <status state="operational"/>
      </component>
      <component uuid="8f230d84-2f9b-44a3-acdb-019566ab2554" type="software">
         <title>Appliance Sample</title>
         <description>
            <p>None</p>
         </description>
         <prop name="asset-type" value="appliance"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="scan-type" value="web"/>
         <prop name="login-url" value="https://admin.offering.com/login"/>
         <prop name="baseline-configuration-name" value="Baseline Config. Name"/>
         <prop name="allows-authenticated-scan" value="no">
            <remarks>
               <p>Vendor appliance. No admin-level access.</p>
            </remarks>
         </prop>
         <status state="operational"/>
      </component>
      <component uuid="d5841417-de4c-4d84-ab3c-39dd1fd32a96" type="service">
         <title>[SAMPLE]Service Name</title>
         <description>
            <p>Describe the service</p>
         </description>
         <purpose>Describe the reason the service is needed.</purpose>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="used-by"
               value="What uses this service?"/>
         <prop name="protocol" value=""/>
         <status state="operational"/>
         <protocol name="http">
            <port-range start="80" end="80" transport="TCP"/>
         </protocol>
         <protocol name="https">
            <port-range start="443" end="443" transport="TCP"/>
         </protocol>
         <remarks>
            <p>Section 10.2, Table 10-1. Ports, Protocols and Services</p>
            <p>
               <b>SERVICES ARE NOW COMPONENTS WITH type='service'</b>
            </p>
         </remarks>
      </component>
      <component uuid="2812ef51-61e7-4505-afbb-da5a073a2a5b" type="interconnection">
         <title>[EXAMPLE]Authorized Connection Information System Name</title>
         <description>
            <p>Briefly describe the interconnection.</p>
         </description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="service-processor"
               value="[SAMPLE]Telco Name"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="ipv4-address"
               class="local"
               value="10.1.1.1"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="ipv4-address"
               class="remote"
               value="10.2.2.2"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="direction"
               value="incoming-outgoing"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="information"
               value="Describe the information being transmitted."/>
         <prop ns="https://fedramp.gov/ns/oscal" name="port" value="80"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="circuit" value="1"/>
         <prop name="connection-security"
               ns="https://fedramp.gov/ns/oscal"
               value="ipsec">
            <remarks>
               <p>If "other", remarks are required. Optional otherwise.</p>
            </remarks>
         </prop>
         <link href="#9d6cf2b4-8e88-4040-a33c-7bc206553a1a" rel="agreement"/>
         <status state="operational"/>
         <responsible-role role-id="isa-poc-remote">
            <party-uuid>09ad840f-aa79-43aa-9f22-25182c2ab11b</party-uuid>
         </responsible-role>
         <responsible-role role-id="isa-poc-local">
            <party-uuid>09ad840f-aa79-43aa-9f22-25182c2ab11b</party-uuid>
         </responsible-role>
         <responsible-role role-id="isa-authorizing-official-remote">
            <party-uuid>09ad840f-aa79-43aa-9f22-25182c2ab11b</party-uuid>
         </responsible-role>
         <responsible-role role-id="isa-authorizing-official-local">
            <party-uuid>09ad840f-aa79-43aa-9f22-25182c2ab11b</party-uuid>
         </responsible-role>
         <remarks>
            <p>Optional notes about this interconnection</p>
         </remarks>
      </component>
      <inventory-item uuid="98e37f90-fbb5-4177-badb-9b55229cc183">
         <description>
            <p>Flat-File Example (No implemented-component).</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.1.1.1"/>
         <prop name="ipv6-address" value="0000:0000:0000:0000"/>
         <prop name="virtual" value="no"/>
         <prop name="public" value="no"/>
         <prop name="fqdn" value="dns.name"/>
         <prop name="uri" value="uniform.resource.identifier"/>
         <prop name="netbios-name" value="netbios-name"/>
         <prop name="mac-address" value="00:00:00:00:00:00"/>
         <prop name="software-name" value="software-name"/>
         <prop name="version" value="V 0.0.0"/>
         <prop name="asset-type" value="os"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="vendor-name"
               value="Vendor Name"/>
         <prop name="model" value="Model Number"/>
         <prop name="patch-level" value="Patch-Level"/>
         <prop name="serial-number" value="Serial #"/>
         <prop name="asset-tag" value="Asset Tag"/>
         <prop name="vlan-id" value="VLAN Identifier"/>
         <prop name="network-id" value="Network Identifier"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="scan-type"
               value="infrastructure"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="scan-type" value="database"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="validation"
               value="component-id"/>
         <prop name="allows-authenticated-scan" value="no">
            <remarks>
               <p>If no, explain why. If yes, omit remarks field.</p>
            </remarks>
         </prop>
         <prop name="baseline-configuration-name" value="Baseline Config. Name"/>
         <prop name="physical-location" value="Physical location of Asset"/>
         <prop name="is-scanned" value="yes">
            <remarks>
               <p>If no, explain why. If yes, omit remarks field.</p>
            </remarks>
         </prop>
         <prop name="function" value="Required brief, text-based description.">
            <remarks>
               <p>Optional, longer, formatted description.</p>
            </remarks>
         </prop>
         <responsible-party role-id="asset-owner">
            <party-uuid>db234cb7-1776-425c-9ac4-b067c1723011</party-uuid>
         </responsible-party>
         <responsible-party role-id="asset-administrator">
            <party-uuid>b306f5af-b93a-4a7f-a2b2-37a44fc92a79</party-uuid>
         </responsible-party>
         <remarks>
            <p>COMMENTS: Additional information about this item.</p>
         </remarks>
      </inventory-item>
      <inventory-item uuid="c916d3c5-229e-4786-bf3f-4d71baa0e7a5">
         <description>
            <p>Component Inventory Example</p>
         </description>
         <prop name="asset-id" value="unique-asset-ID"/>
         <prop name="ipv4-address" value="10.2.2.2"/>
         <prop name="ipv6-address" value="0000:0000:0000:0000"/>
         <prop name="mac-address" value="00:00:00:00:00:00"/>
         <prop name="virtual" value="no"/>
         <prop name="public" value="no"/>
         <prop name="fqdn" value="dns.name"/>
         <prop name="uri" value="uniform.resource.locator"/>
         <prop name="netbios-name" value="netbios-name"/>
         <prop name="patch-level" value="Patch-Level"/>
         <prop name="baseline-configuration-name" value="Baseline Configuration Name"/>
         <prop name="physical-location" value="Physical location of Asset"/>
         <prop name="scan-authenticated"
               ns="https://fedramp.gov/ns/oscal"
               value="no">
            <remarks>
               <p>If no, explain why. If yes, omit remark.</p>
            </remarks>
         </prop>
         <prop name="scan-latest" ns="https://fedramp.gov/ns/oscal" value="yes">
            <remarks>
               <p>If no, explain why. If yes, omit remark.</p>
            </remarks>
         </prop>
         <responsible-party role-id="asset-owner">
            <party-uuid>3360e343-9860-4bda-9dfc-ff427c3dfab6</party-uuid>
         </responsible-party>
         <responsible-party role-id="asset-administrator">
            <party-uuid>b306f5af-b93a-4a7f-a2b2-37a44fc92a79</party-uuid>
         </responsible-party>
         <implemented-component component-uuid="05ceb8df-52e7-49db-9719-891723f366bd"/>
         <remarks>
            <p>COMMENTS: If needed, provide additional information about this inventory item.</p>
         </remarks>
      </inventory-item>
      <inventory-item uuid="37c00d5a-ccf2-4112-a0ee-8460be8cff40">
         <description>
            <p>None.</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.3.3.3"/>
         <prop name="is-scanned" value="yes"/>
         <implemented-component component-uuid="1541015b-6d19-42cb-a991-624cc082ed4d"/>
      </inventory-item>
      <inventory-item uuid="fb7a84fb-7e30-4f5b-9997-2ecd4d270bdd">
         <description>
            <p>None.</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.4.4.4"/>
         <prop name="is-scanned" value="yes"/>
         <implemented-component component-uuid="05ceb8df-52e7-49db-9719-891723f366bd"/>
      </inventory-item>
      <inventory-item uuid="779d4e89-bba6-432c-b50d-d699fe534129">
         <description>
            <p>None.</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.5.5.5"/>
         <prop name="is-scanned" value="yes"/>
         <implemented-component component-uuid="8f230d84-2f9b-44a3-acdb-019566ab2554"/>
      </inventory-item>
      <inventory-item uuid="20b207d5-5e77-4501-b02d-5d2a6e88db85">
         <description>
            <p>None.</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.6.6.6"/>
         <prop name="is-scanned" value="no">
            <remarks>
               <p>Asset wasn't running at time of scan.</p>
            </remarks>
         </prop>
         <implemented-component component-uuid="05ceb8df-52e7-49db-9719-891723f366bd"/>
      </inventory-item>
      <inventory-item uuid="79b4f0d1-91ab-49e8-af28-045c12aa9272">
         <description>
            <p>None.</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.7.7.7"/>
         <prop name="is-scanned" value="yes"/>
         <implemented-component component-uuid="1541015b-6d19-42cb-a991-624cc082ed4d"/>
      </inventory-item>
      <inventory-item uuid="b31b360d-b58b-4c7c-b344-68e17238d858">
         <description>
            <p>None.</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.8.8.8"/>
         <prop name="is-scanned" value="no">
            <remarks>
               <p>Asset wasn't running at time of scan.</p>
            </remarks>
         </prop>
         <implemented-component component-uuid="05ceb8df-52e7-49db-9719-891723f366bd"/>
      </inventory-item>
      <inventory-item uuid="55b55b3d-3bd9-409a-bc87-3b9a2074bacd">
         <description>
            <p>IPv4 Production Subnet.</p>
         </description>
         <prop name="asset-id" value="10.10.10.0"/>
         <prop name="ipv4-subnet" value="10.10.10.0/24"/>
         <prop name="is-scanned" value="yes"/>
      </inventory-item>
      <inventory-item uuid="c0dbefa1-c8e8-4ca8-bd73-67cb7b1fa3f6">
         <description>
            <p>IPv4 Management Subnet.</p>
         </description>
         <prop name="asset-id" value="10.10.20.0"/>
         <prop name="ipv4-subnet" value="10.10.20.0/24"/>
         <prop name="is-scanned" value="yes"/>
      </inventory-item>
   </system-implementation>
   <!-- Section 13 -->
   <control-implementation>
      <description>
         <p>FedRAMP SSP Template Section 13</p>
         <p>This description field is required by OSCAL. FedRAMP does not require any specific
            information here.</p>
      </description>
      <implemented-requirement control-id="ac-1" uuid="eee8697a-bc39-45aa-accc-d3e534932efb">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <set-parameter param-id="ac-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ac-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ac-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="ac-1_stmt.a" uuid="fb4d039a-dc4f-46f5-9c1f-f6343eaf69bc">
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="3f5612a4-cd1d-4c47-8cae-75d2eaa332cd">
               <description>
                  <p>Describe how Part a is satisfied within the system.</p>
               </description>
            </by-component>
            <remarks>
               <p>The specified component is the system itself.</p>
               <p>Any control implementation response that can not be associated with another component is associated with the component representing the system.</p>
            </remarks>
         </statement>
         <statement statement-id="ac-1_stmt.a.1"
                    uuid="0afdccce-b5ed-4127-ae19-cfbdd17d775e">
            <link href="#090ab379-2089-4830-b9fd-26d0729e22e9" rel="policy"/>
            <remarks>
               <p>This identifies a policy (attached in resources) that satisfies this control.</p>
            </remarks>
         </statement>
         <statement statement-id="ac-1_stmt.a.2"
                    uuid="ffaf5e02-3055-40df-bbeb-3b94e834a43f">
            <link href="#att-process-1" rel="process"/>
            <remarks>
               <p>This identifies a process (attached in resources) that satisfies this control.</p>
            </remarks>
         </statement>
         <statement statement-id="ac-1_stmt.b.1"
                    uuid="b46f97ec-55c1-4249-a9b9-3a228f1e3791">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="26afd0af-464a-4a33-8a83-f942ec5ef182">
               <description>
                  <p>Describe how Part b-1 is satisfied.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ac-1_stmt.b.2"
                    uuid="59c67969-3d5c-45f1-8e3e-1e642249633f">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="37e6602e-4c94-486f-ad10-64ac19dfa099">
               <description>
                  <p>Describe how Part b-2 is satisfied.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ac-2" uuid="7a36cf53-156d-4d1f-9a8b-433f61cc57b7">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="Completion Date"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="partial">
            <remarks>
               <p>Describe the portion of the control that is not satisfied.</p>
            </remarks>
         </prop>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="not-applicable">
            <remarks>
               <p>Describe the justification for marking this control Not Applicable.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="customer-configured">
            <remarks>
               <p>Describe any customer-configured requirements for satisfying this control.</p>
            </remarks>
         </prop>
         <responsible-role role-id="admin-unix"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="ac-2_prm_1">
            <value>[SAMPLE]privileged, non-privileged</value>
         </set-parameter>
         <set-parameter param-id="ac-2_prm_2">
            <value>[SAMPLE]all</value>
         </set-parameter>
         <set-parameter param-id="ac-2_prm_3">
            <value>[SAMPLE]The Access Control Procedure</value>
         </set-parameter>
         <set-parameter param-id="ac-2_prm_4">
            <value>[SAMPLE]annually</value>
         </set-parameter>
         <statement statement-id="ac-2_stmt.a" uuid="24a85abb-25ad-4686-850c-5c0e8ab69a0c">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="70bbeee7-f0ae-4502-839f-1db8a8ce9dd9">
               <description>
                  <p>Do not respond to this statement here. Respond within the <code>by-component</code> assembly below.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="8a72663c-28c7-41c2-8739-f1ee2d5761ac">
               <description>
                  <p>For the portion of the control satisfied by this system or its owning organization, describe
                        <strong>how</strong> the control is met.</p>
               </description>
               <prop name="responsibility" value="customer">
                  <remarks>
                     <p>General customer responsibility description.</p>
                  </remarks>
               </prop>
               <remarks>
                  <p>The component-uuid above points to the "this system" component.</p>
                  <p>Any control response content that does not cleanly fit another system component is placed here. This includes customer responsibility content.</p>
                  <p>This can also be used to provide a summary, such as a holistic overview of how multiple components work together.</p>
                  <p>While the "this system" component is not expclicity required within every <code>statement</code>, it will typically be present.</p>
               </remarks>
            </by-component>
            <by-component component-uuid="b7364f67-bf65-4df2-b756-4b9c6b1c4a52"
                          uuid="84de735f-ba37-4bb4-b784-79760f986a40">
               <description>
                  <p>For the portion inherited from an underlying FedRAMP-authorized provider,
                     describe <strong>what</strong> is inherited.</p>
               </description>
               <prop name="responsibility" value="customer">
                  <remarks>
                     <p>Component-specific customer responsibility description.</p>
                  </remarks>
               </prop>
            </by-component>
            <by-component component-uuid="cae07d12-8566-443a-95de-7596b9cac953"
                          uuid="13db02bb-1f33-4f79-8711-ed47c2c3d337">
               <description>
                  <p>For the portion of the control that must be configured by or provided by the
                     customer, describe the customer responsibility here. This is what will appear
                     in the Customer Responsibility Matrix.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="at-1" uuid="c332a6f8-bbe6-4ee9-aaea-d89d251c68df">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="at-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="at-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="at-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="at-1_stmt.a" uuid="ee5a11fb-9bae-4680-8f8c-575c85d47355">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="8ef2f9ed-bd07-4f93-b897-fd820218a6e6">
               <description>
                  <p>Component-based Approach</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="d3bdee1c-7d84-4ed4-8950-e13256edb7fa">
               <description>
                  <p>Describe how Part a is satisfied.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="at-1_stmt.a.1"
                    uuid="2e8ec7ce-c9c6-4f5f-9d50-3a3b9d3acf65">
            <link href="#090ab379-2089-4830-b9fd-26d0729e22e9" rel="policy"/>
            <remarks>
               <p>This identifies a policy (attached in resources) that satisfies this control.</p>
            </remarks>
         </statement>
         <statement statement-id="at-1_stmt.a.2"
                    uuid="e7f9b618-c092-4b8b-b416-0ee477026726">
            <link href="#att-process-1" rel="process"/>
            <remarks>
               <p>This identifies a process (attached in resources) that satisfies this control.</p>
            </remarks>
         </statement>
         <statement statement-id="at-1_stmt.b.1"
                    uuid="29192f0b-edb1-4820-b951-65ffdc64bb3e">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="ce72c0f1-ec52-49e1-aab3-8580cbca7e5e">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="5a5e5c3e-1108-47f1-a83f-05e0394219db">
               <description>
                  <p>Describe how Part b-1 is satisfied.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="at-1_stmt.b.2"
                    uuid="23a9bfa7-6e3f-4e00-a120-791b26a9157e">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="0ebc6d57-8edf-4275-82af-632afa9b1d18">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="fcc63699-04ab-4b69-b7b9-a13bee6685b3">
               <description>
                  <p>Describe how Part b-2 is satisfied.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="au-1" uuid="381c8d0c-e6ec-41a9-9b16-01657226c70f">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="au-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="au-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="au-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="au-1_stmt.a" uuid="9a2bd937-226e-4aaf-8261-2cf0c2e3aa10">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="a037eaa7-2fbe-49ab-be46-11d698725918">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="30042cb9-ff85-472f-b769-68bd7bb5bbd9">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="au-1_stmt.b.1"
                    uuid="d01f186f-a14f-4e22-b069-84a55e48a112">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="7d8910b1-109e-48bb-8543-45b8c8dac596">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="f41962c7-b53b-46f8-a84f-4aba25904bb8">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="au-1_stmt.b.2"
                    uuid="ea153acb-2bd0-41d9-8ebd-ba022d31230a">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="39cb5658-b8f6-43e0-9ffe-013dac901c33">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="9ad59f0d-17a2-4f3f-af6a-a8529d692195">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ca-1" uuid="43e388d9-3854-44f6-8c6f-17a6d51ee6a2">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="ca-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ca-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ca-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="ca-1_stmt.a" uuid="e7bd0a7e-5f92-4769-8cd3-76ad2f663a5c">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="1d38502e-a13f-4da2-aeaa-9e2b3a44c269">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="e5815f1d-ec94-4d98-8896-ec57e339bd7b">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ca-1_stmt.b.1"
                    uuid="b2c3ec86-b976-4e5a-9dc3-4ac2d570765e">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="5cd8b2d9-b194-40ea-a036-4aba6e3ff0cd">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="ca6b2bd5-3ddf-4167-a942-06e1955e49f8">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ca-1_stmt.b.2"
                    uuid="e9474eb8-36d6-4eab-abeb-f9bd17e66b22">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="bad73480-9058-413a-bb09-d111bd8f23aa">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="507b8b9d-2d40-4748-81c9-c5a13c8f8f05">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="cm-1" uuid="c8e45d78-2afe-42ae-80e1-c1e2499a0346">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="cm-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="cm-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="cm-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="cm-1_stmt.a" uuid="52339583-19b6-4774-9213-50b9f42fe51f">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="8945aafb-fd81-4d38-b9ee-0b153566790f">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="2916ebd5-c45a-466e-b8e9-00dd15b0c94d">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="cm-1_stmt.b.1"
                    uuid="f9cc6f3f-c64f-4fae-9a32-f964ebdc8e74">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="91670e6b-f164-492a-9aad-a9a2d6b8e114">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="678db1d2-a538-4986-ac94-63da312fe3f9">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="cm-1_stmt.b.2"
                    uuid="c548a71f-41d6-4e8c-b400-1764379348c4">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="40745320-eb16-4b16-af80-b18607be9994">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="a871cf91-04c7-4e03-9df6-80b3d5afc9bf">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="cp-1" uuid="13af9343-73e7-4d71-b386-9a0844fa7e45">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="cp-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="cp-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="cp-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="cp-1_stmt.a" uuid="8bde1fa5-eb81-4a1b-9e6e-5827e176025a">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="ef1ebd70-dc97-44b1-9c83-8e401f6c6920">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="157d7751-938c-441f-9299-02a339d98532">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="cp-1_stmt.b.1"
                    uuid="2fc9eec1-a49f-4cfa-9f7b-c702a1e21619">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="4e9b1a0a-6364-4b3c-8cdc-ec3e1e461c9c">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="6358db78-bab1-4139-b512-f65d3e48248b">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="cp-1_stmt.b.2"
                    uuid="db5b3977-bd51-4505-b3e2-1597bbd4d930">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="c020517e-adda-4f01-a0d1-a0aa3cb6ee5b">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="3de33bbe-1a15-4d10-b35d-56fd85e24571">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ia-1" uuid="4050c933-3ecc-4a8d-8da7-391364685cbb">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="ia-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ia-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ia-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="ia-1_stmt.a" uuid="ba92e479-705f-47a4-a763-dfc098ba239d">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="9af2df5d-4f00-46d9-8a75-724baa67fa32">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="5add335d-7375-49f0-843c-ac994e4d147b">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ia-1_stmt.b.1"
                    uuid="dba8c469-5758-497e-9856-e472a2e08677">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="70135b8f-c8f6-410e-aded-40be7a0d8fac">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="b04d86a0-b68c-41f0-9c0b-88a8daa457b7">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ia-1_stmt.b.2"
                    uuid="b56e37b1-1f4c-479b-bfa1-a2773c2eebfd">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="be523f20-df87-48d4-960d-1c38f6180fdd">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="c8fde380-9a41-404a-a88b-c20479a21618">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ir-1" uuid="229846dc-83cc-4ff2-a9ed-210490a343d9">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="ir-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ir-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ir-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="ir-1_stmt.a" uuid="7284efc2-d953-486c-ab8a-3caef6ce06c3">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="169c74fb-e6f4-4046-978e-79ae5814fdcf">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="7b385445-5e7b-4656-98f1-0f1353aab59e">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ir-1_stmt.b.1"
                    uuid="75c37e1a-6e8d-4ef0-99f4-c16f7995706c">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="2e37f6b4-8f45-423f-b93d-1fc9bd16c7a0">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="e7ae4685-2e30-4e00-9ada-b00b5eaf5578">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ir-1_stmt.b.2"
                    uuid="900591ec-2006-4622-bc87-59828d884d4f">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="5eff09b6-1cb0-4f9d-ac16-1d52faa3d5c0">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="f443c391-479d-492d-b7e9-55c9c2c107be">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ma-1" uuid="f0c6b63f-6b94-448f-bb16-db3d54b91734">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="ma-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ma-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ma-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="ma-1_stmt.a" uuid="d609e538-3976-418e-a368-58fc75cd03c0">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="499d1b82-bf8d-463e-b3c6-22417b11011b">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="93a9b046-63c4-4628-8547-39bc7d8df70c">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ma-1_stmt.b.1"
                    uuid="df1a6dd8-9e18-4408-8783-cb30e0413f22">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="b7adc7f7-ae07-4b17-8cd8-fe5f13f50d09">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="ad14f76a-a3eb-4349-8f6c-54cd99f1c040">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ma-1_stmt.b.2"
                    uuid="f02f759d-7d4c-41f2-b153-f3cc1e157e39">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="88eb79f6-615c-4d18-8e8a-0cf7abc58d93">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="32b337f6-eb61-4945-a139-4d2ae7737488">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="mp-1" uuid="fa3a9747-3451-456a-aae9-9896e03a52c8">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="mp-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="mp-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="mp-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="mp-1_stmt.a" uuid="bab45ad3-65ee-43bc-9c3e-c3e4e2db8001">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="20b544ef-9e1e-4325-b362-7b3c6f0cca9c">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="6668f521-4d5c-4317-868f-804878675bf2">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="mp-1_stmt.b.1"
                    uuid="ca35d4a5-ca73-4b3a-aa66-6c712c7a4a49">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="2ff6fc5a-1ee7-48b3-b534-0cd3dbbc864d">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="57e65240-5b41-40ee-89b1-f75d8fb259ad">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="mp-1_stmt.b.2"
                    uuid="0c5c6eda-9644-46f2-a29c-16fe4e248621">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="9b315aac-43f9-4ae7-9e78-a0b8d7f7c73c">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="ea6c7fa7-ccbf-414c-8c6b-9c928e914b35">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="pe-1" uuid="a85ff28e-517c-4455-8bd4-866103a2c94a">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="pe-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="pe-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="pe-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="pe-1_stmt.a" uuid="11fd3e46-4735-4986-91bc-747345fe608a">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="12c05f28-6f97-439b-9eb1-110f0076a5c1">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="dceb4401-c1fd-41a7-9e07-8d82a8042e61">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="pe-1_stmt.b.1"
                    uuid="a37f91e2-190d-40f7-829c-39776c14c8b4">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="218e56e0-fa10-49b5-8d03-0096d6980b8f">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="bbd2b372-b57d-4a3a-90c2-2189dd23664b">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="pe-1_stmt.b.2"
                    uuid="f3d57138-916c-4064-b2fc-aa8dd76849f8">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="bf063b0f-47c6-489e-977d-888caf38650c">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="f4a94538-220f-4f73-9487-73b72b68813e">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="pl-1" uuid="97ba1f95-92a8-480b-a489-960661e4206b">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="pl-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="pl-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="pl-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="pl-1_stmt.a" uuid="ec7af577-ff22-46bf-ac0a-cf9d75c72ebb">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="baf8d3b0-bb38-4d09-9d72-9e250570a8e8">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="679837fb-601e-4517-abe6-11ff6fc551b4">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="pl-1_stmt.b.1"
                    uuid="438f3e29-670a-49f2-8b9f-05d951318294">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="22cf3cc1-46c1-44ac-8082-342c1a09d4c4">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="ddce2988-ce9b-4f15-a427-6f18e4ba1817">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="pl-1_stmt.b.2"
                    uuid="96a4d13c-bd2b-4038-96c5-0f923f404bbd">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="315dbe5a-3f98-476f-898a-408ad9de9f7c">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="18d7c02e-f21b-4cd2-bf33-d27971ced47f">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ps-1" uuid="5e7498de-b540-4a28-b041-4381b023e98a">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="ps-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ps-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ps-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="ps-1_stmt.a" uuid="afe1703d-5e59-460b-b048-41b49699c5a1">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="ae5a3811-acf1-4195-8edd-d1c4ab8d7716">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="7d6cafb2-b613-4807-ad61-4f0f649bd5ee">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ps-1_stmt.b.1"
                    uuid="956c93e2-cf8f-482c-aaf7-91ab44c7cbd6">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="8c1af0f0-267c-457d-9a12-6b29c05cb9a7">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="f4fbfbc2-1a94-456d-a713-9d547f18a0c7">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ps-1_stmt.b.2"
                    uuid="6926c688-3fb2-4ab8-9acb-cff0b5acd365">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="7b3919ab-7a62-43ff-8c08-5e6f6460b9d2">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="2f9c701a-0f3e-4e3d-beae-debb08c406ed">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ra-1" uuid="789e6c0f-acda-4a94-9b48-7d41dd4c607c">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="ra-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ra-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ra-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="ra-1_stmt.a" uuid="8fe541ea-0920-42d0-8561-4e08f04d796c">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="c04523ba-79c6-4275-8e0d-29c087b0968b">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="5894d92b-05bf-4fc4-85dc-f5c37e112bc4">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ra-1_stmt.b.1"
                    uuid="b0e9ed47-fe83-485d-8d79-979833543a83">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="74ee9f12-0907-4fc0-ae20-b8f4fc943910">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="c90ad6ee-5a40-4996-8e6c-d85ff3f7559e">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ra-1_stmt.b.2"
                    uuid="d9a38f95-ded1-4d1d-afe2-242987222ebd">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="afe963d8-5c04-4d98-870d-3fcec147a9ed">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="d6f6ac98-4f15-45f2-9ecc-4447e96af44f">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="sa-1" uuid="55358f60-db9b-4d75-a313-5fa6c328273c">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="sa-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="sa-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="sa-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="sa-1_stmt.a" uuid="ae3f64be-2e62-4347-b06a-727bc28e4f9b">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="28d5f97a-80c5-4874-b646-4e6a0da49f9a">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="e5864f16-83f2-4faf-b7be-0810c6e58fc4">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="sa-1_stmt.b.1"
                    uuid="959519a9-3e12-47bc-8d76-50d9ab0b6544">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="383e459b-5a24-49a8-bcd7-d51e5e342dc4">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="bed8f51a-1773-493c-8167-c83712e03f01">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="sa-1_stmt.b.2"
                    uuid="9daa3848-9672-469c-9aa0-f363e3339123">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="39ff0aef-81b3-4330-9825-aecb009e48d1">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="518d4987-9436-4c1f-9e07-afa6b332f124">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="sc-1" uuid="9e2852c6-f48a-47b2-9ea5-77cbbb42b365">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="sc-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="sc-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="sc-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="sc-1_stmt.a" uuid="5e2e8372-c13b-4cf5-90c5-e8833a9fe241">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="8c01ac20-74aa-482b-8e84-2be7a0fc4c48">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="88cfadba-043b-483b-8032-73344aa53c96">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="sc-1_stmt.b.1"
                    uuid="8166980a-86c0-497d-87e4-453adfd0d4bd">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="c3aea0dd-4353-4a72-bb19-94cefa87a9c9">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="9abaeb64-56d2-48a1-bd8d-7b55411d31ca">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="sc-1_stmt.b.2"
                    uuid="eeea34ff-18ab-4c35-bf32-c74dbf746e7b">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="9f91469b-5237-4edb-a477-436608e76f05">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="ad20ff50-8a7c-4ffc-a918-260960f6fb42">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="si-1" uuid="81ba4fe8-1649-437b-9ecf-367fd87336e6">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="si-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="si-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="si-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="si-1_stmt.a" uuid="915b10d2-2275-4d86-951a-eec23f9ee77a">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="ec810fee-3620-4611-a0f0-17b37c6ad595">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="682311e7-e3f7-4d94-acf9-131149887fda">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="si-1_stmt.b.1"
                    uuid="2a5a6f7f-aeea-4ea4-be1e-859df4bf7521">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="1beeb6ad-7655-4f2c-be2e-fb235dbfcdcd">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="80ee0fe9-7f87-4dfa-887a-ac3bb2131943">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="si-1_stmt.b.2"
                    uuid="c152bbde-57fc-4864-ac51-861bd8bb83b4">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="e9b54d73-7753-46e7-a473-ae735ed7685c">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="78e8f2bb-67d7-49d3-a993-ce4bedcfbc47">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
   </control-implementation>
   <!-- Table 15-1 Names of Provided Attachments -->
   <back-matter>
      <!-- Section 12, Table 12-1, Table 12-2 -->
      <resource uuid="3a5ca2de-0f66-47e6-844d-6ccdf214b767">
         <title>FedRAMP Applicable Laws and Regulations</title>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="fedramp-citations"/>
         <rlink href="https://www.fedramp.gov/assets/resources/templates/SSP-A12-FedRAMP-Laws-and-Regulations-Template.xlsx"/>
      </resource>
      <resource uuid="12da89ef-51dd-4404-948d-e9f0e25b961e">
         <title>FedRAMP Master Acronym and Glossary</title>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="fedramp-acronyms"/>
         <rlink href="https://www.fedramp.gov/assets/resources/documents/FedRAMP_Master_Acronym_and_Glossary.pdf"/>
      </resource>
      <resource uuid="d45612a9-cf25-4ef6-b2dd-69e38ba2967a">
         <title>[SAMPLE]Name or Title of Document</title>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="law"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Publication Date"/>
         <document-id scheme="https://www.doi.org/">Identification Number</document-id>
         <rlink href="https://domain.example/path/to/document.pdf"/>
      </resource>
      <resource uuid="a8a0cc81-800f-479f-93d3-8b8743d9b98d">
         <title>[SAMPLE]Privacy-Related Law Citation</title>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="law"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="pii"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Publication Date"/>
         <document-id scheme="https://www.doi.org/">Identification Number</document-id>
         <rlink href="https://domain.example/path/to/document.pdf"/>
      </resource>
      <resource uuid="545e75c3-537f-48fe-9630-95337916d982">
         <title>[SAMPLE]Regulation Citation</title>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="regulation"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Publication Date"/>
         <document-id scheme="https://www.doi.org/">Identification Number</document-id>
         <rlink href="https://domain.example/path/to/document.pdf"/>
      </resource>
      <resource uuid="9d6cf2b4-8e88-4040-a33c-7bc206553a1a">
         <title>[SAMPLE]Interconnection Security Agreement Title</title>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
      </resource>
      <resource uuid="31a46c4f-2959-4287-bc1c-67297d7da60b">
         <description>CSP Logo</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="prepared-for-logo"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="csp-logo"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./logo.png" media-type="image/png"/>
         <base64>00000000</base64>
      </resource>
      <resource uuid="c5866ad8-8ed7-49b4-844a-0276fa9f8f51">
         <description>Preparer Logo</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="prepared-by-logo"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./party-1-logo.png" media-type="image/png"/>
         <base64>00000000</base64>
      </resource>
      <resource uuid="0846b6ef-cfa4-4bb3-8280-717f7e7b04d4">
         <description>FedRAMP Logo</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="fedramp-logo"/>
         <rlink href="https://github.com/GSA/fedramp-automation/raw/master/assets/FedRAMP_LOGO.png"/>
      </resource>
      <resource uuid="2c1747d6-874a-49a2-8488-2fd9735416bf">
         <description>3PAO Logo</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="3pao-logo"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./logo.png" media-type="image/png"/>
         <base64>00000000</base64>
      </resource>
      <resource uuid="d2eb3c18-6754-4e3a-a933-03d289e3fad5">
         <description>The primary authorization boundary diagram.</description>
         <!-- Use rlink and/or base64 -->
         <rlink href="./diagrams/boundary.png"/>
         <base64>00000000</base64>
         <remarks>
            <p>Section 9.2, Figure 9-1 Authorization Boundary Diagram (graphic)</p>
            <p>This should be referenced in the
               system-characteristics/authorization-boundary/diagram/link/@href flag using a value
               of "#d2eb3c18-6754-4e3a-a933-03d289e3fad5"</p>
         </remarks>
      </resource>
      <resource uuid="61081e81-850b-43c1-bf43-1ecbddcb9e7f">
         <description>The primary network diagram.</description>
         <!-- Use rlink and/or base64 -->
         <rlink href="./diagrams/network.png"/>
         <base64>00000000</base64>
         <remarks>
            <p>Section 9.4, Figure 9-2 Network Diagram (graphic)</p>
            <p>This should be referenced in the
               system-characteristics/network-architecture/diagram/link/@href flag using a value
               of "#61081e81-850b-43c1-bf43-1ecbddcb9e7f"</p>
         </remarks>
      </resource>
      <resource uuid="ac5d7535-f3b8-45d3-bf3b-735c82c64547">
         <description>The primary data flow diagram.</description>
         <!-- Use rlink and/or base64 -->
         <rlink href="./diagrams/dataflow.png"/>
         <base64>00000000</base64>
         <remarks>
            <p>Section 10, Figure 10-1 Data Flow Diagram (graphic)</p>
            <p>This should be referenced in the
               system-characteristics/data-flow/diagram/link/@href flag using a value
               of "#ac5d7535-f3b8-45d3-bf3b-735c82c64547"</p>
         </remarks>
      </resource>
      <resource uuid="090ab379-2089-4830-b9fd-26d0729e22e9">
         <title>Policy Title</title>
         <description>Policy document</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="policy"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./sample_policy.pdf"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Policy Attachment</p>
         </remarks>
      </resource>
      <resource uuid="ab300133-d749-4abb-b858-1cd6ffd8af9e">
         <title>Policy Title</title>
         <description>Policy document</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="policy"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./sample_policy.pdf"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Policy Attachment</p>
         </remarks>
      </resource>
      <resource uuid="1002a58e-9e11-4aa6-9ab4-2bde52995952">
         <title>Procedure Title</title>
         <description>Procedure document</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="procedure"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./sample_procedure.pdf"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Procedure Attachment</p>
         </remarks>
      </resource>
      <resource uuid="4bb1e2e5-261c-4b5c-b22c-e1627c2e8be6">
         <title>Procedure Title</title>
         <description>Procedure document</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="procedure"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./sample_procedure.pdf"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Procedure Attachment</p>
         </remarks>
      </resource>
      <resource uuid="90a128ac-c850-48f6-8fff-a55692f80b41">
         <title>User's Guide</title>
         <description>User's Guide</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="user-guide"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="guide"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./sample_guide.pdf"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: User's Guide Attachment</p>
         </remarks>
      </resource>
      <resource uuid="fab59751-b855-40cb-93c1-492562e20e18">
         <title>Privacy Impact Assessment</title>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="privacy-impact-assessment"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./pia.docx"/>
         <base64 filename="pia.docx">00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Privacy Impact Assessment</p>
         </remarks>
      </resource>
      <resource uuid="489112e1-57f2-4c29-8dd0-95b1442fbf3b">
         <title>Document Title</title>
         <description>Rules of Behavior</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="rules-of-behavior"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="rob"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="https://sample"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Rules of Behavior (ROB)</p>
         </remarks>
      </resource>
      <resource uuid="c7860916-f2f4-43aa-b578-d48cf8e6d381">
         <title>Document Title</title>
         <description>Contingency Plan (CP)</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="plan"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="https://sample"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Contingency Plan (CP) Attachment</p>
         </remarks>
      </resource>
      <resource uuid="ab56cf27-0dae-40d6-89b7-d750137309af">
         <title>Document Title</title>
         <description>Configuration Management (CM) Plan</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="plan"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="https://sample"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Configuration Management (CM) Plan Attachment</p>
         </remarks>
      </resource>
      <resource uuid="3f771ab5-8016-4571-98d1-f0fb962e15e2">
         <title>Document Title</title>
         <description>Incident Response (IR) Plan</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="plan"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="https://sample"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Incident Response (IR) Plan Attachment</p>
         </remarks>
      </resource>
      <resource uuid="49fb4631-1da2-41ca-b0b3-e1b1006d4025">
         <title>Separation of Duties Matrix</title>
         <description>Separation of Duties Matrix</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="https://sample"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Separation of Duties Matrix Attachment</p>
         </remarks>
      </resource>
      <resource uuid="9f1aae37-7359-411f-86c1-768aaab85e63">
         <title>FedRAMP High Baseline</title>
         <rlink media-type="application/xml"
                href="https://raw.githubusercontent.com/usnistgov/OSCAL/v1.0.0-milestone3/content/fedramp.gov/xml/FedRAMP_HIGH-baseline_profile.xml"/>
         <remarks>
            <p>Pointer to High baseline content in OSCAL.</p>
         </remarks>
      </resource>
      <resource uuid="890170c3-d4fa-4d25-ab96-8e4bf7cc237c">
         <title>FedRAMP Moderate Baseline</title>
         <rlink media-type="application/xml"
                href="https://raw.githubusercontent.com/usnistgov/OSCAL/v1.0.0-milestone3/content/fedramp.gov/xml/FedRAMP_MODERATE-baseline_profile.xml"/>
         <remarks>
            <p>Pointer to Moderate baseline content in OSCAL.</p>
         </remarks>
      </resource>
      <resource uuid="2acaf846-5496-4d36-8565-9a15b48aef2c">
         <title>FedRAMP Low Baseline</title>
         <rlink media-type="application/xml"
                href="https://raw.githubusercontent.com/usnistgov/OSCAL/v1.0.0-milestone3/content/fedramp.gov/xml/FedRAMP_LOW-baseline_profile.xml"/>
         <remarks>
            <p>Pointer to Low baseline content in OSCAL.</p>
         </remarks>
      </resource>
   </back-matter>
</system-security-plan>

gistfile1.txt

<?xml version="1.0" encoding="UTF-8"?>
<!-- Modified by the OSCAL 1.0.0 RC2 to OSCAL 1.0.0 conversion XSLT on 2021-06-15T18:40:52.631-04:00 -->
<system-security-plan xmlns="http://csrc.nist.gov/ns/oscal/1.0"
                      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                      xsi:schemaLocation="https://raw.githubusercontent.com/usnistgov/OSCAL/master/xml/schema/oscal_ssp_schema.xsd"
                      uuid="4a330034-5024-4718-953e-9a7a36d28967">
   <metadata>
      <title>FedRAMP System Security Plan (SSP)</title>
      <published>2020-07-01T00:00:00.00-04:00</published>
      <last-modified>2021-06-15T18:40:52.631-04:00</last-modified>
      <version>0.0</version>
      <oscal-version>1.0.0</oscal-version>
      <revisions>
         <revision>
            <published>2019-06-01T00:00:00.00-04:00</published>
            <version>1.0</version>
            <oscal-version>1.0.0</oscal-version>
            <prop ns="https://fedramp.gov/ns/oscal"
                  name="party-uuid"
                  value="6b286b5d-8f07-4fa7-8847-1dd0d88f73fb"/>
            <remarks>
               <p>Initial publication.</p>
            </remarks>
         </revision>
         <revision>
            <published>2020-06-01T00:00:00.00-04:00</published>
            <version>2.0</version>
            <oscal-version>1.0.0</oscal-version>
            <prop ns="https://fedramp.gov/ns/oscal" name="party-id" value="csp"/>
            <remarks>
               <p>Updated for annual assessment.</p>
            </remarks>
         </revision>
         <!-- Additional revision assemblies as needed. -->
      </revisions>
      <prop name="marking" value="Controlled Unclassified Information"/>
      <role id="prepared-by">
         <title>Prepared By</title>
         <description>The organization that prepared this SSP. If developed in-house, this is the CSP itself.</description>
      </role>
      <role id="prepared-for">
         <title>Prepared For</title>
         <description>The organization for which this SSP was prepared. Typically the CSP.</description>
      </role>
      <role id="content-approver">
         <title>System Security Plan Approval</title>
         <description>The individual or individuals accountable for the accuracy of this SSP.</description>
      </role>
      <role id="cloud-service-provider">
         <title>Cloud Service Provider</title>
         <short-name>CSP</short-name>
      </role>
      <role id="system-owner">
         <title>Information System Owner</title>
         <description>The individual within the CSP who is ultimately accountable for everything related to this system.</description>
      </role>
      <role id="authorizing-official">
         <title>Authorizing Official</title>
         <description>The individual or individuals who must grant this system an authorization to operate.</description>
      </role>
      <role id="authorizing-official-poc">
         <title>Authorizing Official's Point of Contact</title>
         <description>The individual representing the authorizing official.</description>
      </role>
      <role id="system-poc-management">
         <title>Information System Management Point of Contact (POC)</title>
         <description>The highest level manager who responsible for system operation on behalf of the System Owner.</description>
      </role>
      <role id="system-poc-technical">
         <title>Information System Technical Point of Contact</title>
         <description>The individual or individuals leading the technical operation of the system.</description>
      </role>
      <role id="system-poc-other">
         <title>General Point of Contact (POC)</title>
         <description>A general point of contact for the system, designated by the system owner.</description>
      </role>
      <role id="information-system-security-officer">
         <title>System Information System Security Officer (or Equivalent)</title>
         <description>The individual accountable for the security posture of the system on behalf of the system owner.</description>
      </role>
      <role id="privacy-poc">
         <title>Privacy Official's Point of Contact</title>
         <description>The individual responsible for the privacy threshold analysis and if necessary the privacy impact assessment.</description>
      </role>
      <role id="asset-owner">
         <title>Owner of an inventory item within the system.</title>
      </role>
      <role id="asset-administrator">
         <title>Administrative responsibility an inventory item within the system.</title>
      </role>
      <role id="isa-poc-local">
         <title>ICA POC (Local)</title>
         <description>The point of contact for an interconnection on behalf of this system.</description>
         <remarks>
            <p>Remove this role if there are no ICAs.</p>
         </remarks>
      </role>
      <role id="isa-poc-remote">
         <title>ICA POC (Remote)</title>
         <description>The point of contact for an interconnection on behalf of this external system to which this system connects.</description>
         <remarks>
            <p>Remove this role if there are no ICAs.</p>
         </remarks>
      </role>
      <role id="isa-authorizing-official-local">
         <title>ICA Signatory (Local)</title>
         <description>Responsible for signing an interconnection security agreement on behalf of this system.</description>
         <remarks>
            <p>Remove this role if there are no ICAs.</p>
         </remarks>
      </role>
      <role id="isa-authorizing-official-remote">
         <title>ICA Signatory (Remote)</title>
         <description>Responsible for signing an interconnection security agreement on behalf of the external system to which this system connects.</description>
         <remarks>
            <p>Remove this role if there are no ICAs.</p>
         </remarks>
      </role>
      <role id="consultant">
         <title>Consultant</title>
         <description>Any consultants involved with developing or maintaining this content.</description>
      </role>
      <role id="admin-unix">
         <title>[SAMPLE]Unix Administrator</title>
         <description>This is a sample role.</description>
      </role>
      <role id="admin-client">
         <title>[SAMPLE]Client Administrator</title>
         <description>This is a sample role.</description>
      </role>
      <role id="program-director">
         <title>[SAMPLE]Program Director</title>
         <description>This is a sample role.</description>
      </role>
      <role id="fedramp-pmo">
         <title>Federal Risk and Authorization Management Program (FedRAMP) Program Management Office (PMO)</title>
         <short-name>FedRAMP PMO</short-name>
      </role>
      <role id="fedramp-jab">
         <title>Federal Risk and Authorization Management Program (FedRAMP) Joint Authorization Board (JAB)</title>
         <short-name>FedRAMP JAB</short-name>
      </role>
      <location uuid="27b78960-59ef-4619-82b0-ae20b9c709ac">
         <title>CSP HQ</title>
         <address type="work">
            <addr-line>Suite 0000</addr-line>
            <addr-line>1234 Some Street</addr-line>
            <city>Haven</city>
            <state>ME</state>
            <postal-code>00000</postal-code>
         </address>
         <remarks>
            <p>There must be one location identifying the CSP's primary business address, such as the CSP's HQ, or the address of the system owner's primary business location.</p>
         </remarks>
      </location>
      <location uuid="16adcc8d-65d8-4583-80d3-9cf007744fec">
         <title>Primary Data Center</title>
         <address>
            <addr-line>2222 Main Street</addr-line>
            <city>Anywhere</city>
            <state>--</state>
            <postal-code>00000-0000</postal-code>
         </address>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="data-center"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="primary-data-center"/>
         <remarks>
            <p>There must be one location for each data center.</p>
            <p>There must be at least two data centers.</p>
            <p>For a data center, briefly summarize the components at this location.</p>
            <p>All data centers must have a conformity tag of "data-center".</p>
            <p>A primary data center must also have a conformity tag of "primary-data-center".</p>
         </remarks>
      </location>
      <location uuid="ad321514-7b9f-4374-8409-efb18eea6e5d">
         <title>Secondary Data Center</title>
         <address>
            <addr-line>3333 Small Road</addr-line>
            <city>Anywhere</city>
            <state>--</state>
            <postal-code>00000-0000</postal-code>
         </address>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="data-center"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="alternate-data-center"/>
         <remarks>
            <p>There must be one location for each data center.</p>
            <p>There must be at least two data centers.</p>
            <p>For a data center, briefly summarize the components at this location.</p>
            <p>All data centers must have a conformity tag of "data-center"</p>
            <p>An alternate or backup data center must also have a conformity tag of "alternate-data-center".</p>
         </remarks>
      </location>
      <party uuid="6b286b5d-8f07-4fa7-8847-1dd0d88f73fb" type="organization">
         <name>Cloud Service Provider (CSP) Name</name>
         <short-name>CSP Acronym/Short Name</short-name>
         <location-uuid>27b78960-59ef-4619-82b0-ae20b9c709ac</location-uuid>
         <remarks>
            <p>Replace sample CSP information.</p>
         </remarks>
      </party>
      <party uuid="77e0e2c8-2560-4fe9-ac78-c3ff4ffc9f6d" type="organization">
         <name>Federal Risk and Authorization Management Program: Program Management Office</name>
         <short-name>FedRAMP PMO</short-name>
         <link href="https://fedramp.gov"/>
         <email-address>info@fedramp.gov</email-address>
         <address type="work">
            <addr-line>1800 F St. NW</addr-line>
            <addr-line/>
            <city>Washington</city>
            <state>DC</state>
            <postal-code/>
            <country>US</country>
         </address>
         <remarks>
            <p>This party entry must be present in a FedRAMP SSP.</p>
            <p>The uuid may be different; however, the uuid must be associated with the "fedramp-pmo" role in the responsible-party assemblies.</p>
         </remarks>
      </party>
      <party uuid="49017ec3-9f51-4dbd-9253-858c2b1295fd" type="organization">
         <name>Federal Risk and Authorization Management Program: Joint Authorization Board</name>
         <short-name>FedRAMP JAB</short-name>
         <remarks>
            <p>This party entry must be present in a FedRAMP SSP.</p>
            <p>The uuid may be different; however, the uuid must be associated with the "fedramp-jab" role in the responsible-party assemblies.</p>
         </remarks>
      </party>
      <party uuid="78992555-4a99-4eaa-868c-f2c249679dd3" type="organization">
         <name>External Organization</name>
         <short-name>External</short-name>
         <remarks>
            <p>Generic placeholder for any external organization.</p>
         </remarks>
      </party>
      <party uuid="f595397b-cbe4-4a87-8c86-9bff91c4e7fd" type="organization">
         <name>Agency Name</name>
         <short-name>A.N.</short-name>
         <remarks>
            <p>Generic placeholder for an authorizing agency.</p>
         </remarks>
      </party>
      <party uuid="8e3d39da-4851-4d2a-adb5-4b5585ded952" type="organization">
         <name>Name of Consulting Org</name>
         <short-name>NOCO</short-name>
         <link href="https://consulting.sample"/>
         <email-address>poc@consulting.sample</email-address>
         <address type="work">
            <addr-line>3333 Corporate Way</addr-line>
            <city>Washington</city>
            <state>DC</state>
            <postal-code/>
            <country>US</country>
         </address>
      </party>
      <party uuid="80361ec4-bfce-4b5c-85c8-313d6ebd220b" type="organization">
         <name>[SAMPLE]Remote System Org Name</name>
      </party>
      <party uuid="09ad840f-aa79-43aa-9f22-25182c2ab11b" type="person">
         <name>[SAMPLE]ICA POC's Name</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>person@ica.org.example</email-address>
         <telephone-number>202-555-1212</telephone-number>
         <member-of-organization>80361ec4-bfce-4b5c-85c8-313d6ebd220b</member-of-organization>
      </party>
      <party uuid="f0bc13a4-3303-47dd-80d3-380e159c8362" type="organization">
         <name>[SAMPLE]Example IaaS Provider</name>
         <short-name>E.I.P.</short-name>
         <remarks>
            <p>Underlying service provider. Leveraged Authorization.</p>
         </remarks>
      </party>
      <party uuid="3360e343-9860-4bda-9dfc-ff427c3dfab6" type="person">
         <name>[SAMPLE]Person Name 1</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0001</telephone-number>
         <address>
            <addr-line>Mailstop A-1</addr-line>
         </address>
         <location-uuid>27b78960-59ef-4619-82b0-ae20b9c709ac</location-uuid>
         <member-of-organization>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</member-of-organization>
      </party>
      <party uuid="36b8d6c0-3b25-42cc-b529-cf4066145cdd" type="person">
         <name>[SAMPLE]Person Name 2</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0002</telephone-number>
         <address type="work">
            <addr-line>Address Line</addr-line>
            <city>City</city>
            <state>ST</state>
            <postal-code>00000</postal-code>
            <country>US</country>
         </address>
         <member-of-organization>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</member-of-organization>
      </party>
      <party uuid="0cec09d9-20c6-470b-9ffc-85763375880b" type="person">
         <name>[SAMPLE]Person Name 3</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0003</telephone-number>
         <address type="work">
            <addr-line>Address Line</addr-line>
            <city>City</city>
            <state>ST</state>
            <postal-code>00000</postal-code>
            <country>US</country>
         </address>
         <member-of-organization>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</member-of-organization>
      </party>
      <party uuid="f75e21f6-43d8-46ab-890d-7f2eebc5a830" type="person">
         <name>[SAMPLE]Person Name 4</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0004</telephone-number>
         <address type="work">
            <addr-line>Address Line</addr-line>
            <city>City</city>
            <state>ST</state>
            <postal-code>00000</postal-code>
            <country>US</country>
         </address>
         <member-of-organization>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</member-of-organization>
      </party>
      <party uuid="132953a9-640c-46f7-9de9-3fa15ec99361" type="person">
         <name>[SAMPLE]Person Name 5</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0005</telephone-number>
         <address type="work">
            <addr-line>Address Line</addr-line>
            <city>City</city>
            <state>ST</state>
            <postal-code>00000</postal-code>
            <country>US</country>
         </address>
         <member-of-organization>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</member-of-organization>
      </party>
      <party uuid="4fded5fd-7a65-47ea-bd76-df57c46e27d1" type="person">
         <name>[SAMPLE]Person Name 6</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0006</telephone-number>
         <address type="work">
            <addr-line>Address Line</addr-line>
            <city>City</city>
            <state>ST</state>
            <postal-code>00000</postal-code>
            <country>US</country>
         </address>
         <member-of-organization>78992555-4a99-4eaa-868c-f2c249679dd3</member-of-organization>
      </party>
      <party uuid="db234cb7-1776-425c-9ac4-b067c1723011" type="person">
         <name>[SAMPLE]Person Name 7</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0007</telephone-number>
         <address type="work">
            <addr-line>Address Line</addr-line>
            <city>City</city>
            <state>ST</state>
            <postal-code>00000</postal-code>
            <country>US</country>
         </address>
         <member-of-organization>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</member-of-organization>
      </party>
      <party uuid="b306f5af-b93a-4a7f-a2b2-37a44fc92a79" type="organization">
         <name>[SAMPLE] IT Department</name>
      </party>
      <party uuid="59cdc953-5902-4fa4-a878-f3163854624c" type="organization">
         <name>[SAMPLE]Security Team</name>
      </party>
      <responsible-party role-id="cloud-service-provider">
         <party-uuid>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="prepared-by">
         <party-uuid>3360e343-9860-4bda-9dfc-ff427c3dfab6</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="prepared-for">
         <!-- Exacty one -->
         <party-uuid>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</party-uuid>
      </responsible-party>
      <responsible-party role-id="content-approver">
         <party-uuid>3360e343-9860-4bda-9dfc-ff427c3dfab6</party-uuid>
         <party-uuid>36b8d6c0-3b25-42cc-b529-cf4066145cdd</party-uuid>
         <remarks>
            <p>One or more</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="system-owner">
         <party-uuid>3360e343-9860-4bda-9dfc-ff427c3dfab6</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="authorizing-official">
         <party-uuid>49017ec3-9f51-4dbd-9253-858c2b1295fd</party-uuid>
         <party-uuid>4fded5fd-7a65-47ea-bd76-df57c46e27d1</party-uuid>
         <remarks>
            <p>One or more</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="system-poc-management">
         <party-uuid>0cec09d9-20c6-470b-9ffc-85763375880b</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="system-poc-technical">
         <party-uuid>f75e21f6-43d8-46ab-890d-7f2eebc5a830</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="information-system-security-officer">
         <party-uuid>132953a9-640c-46f7-9de9-3fa15ec99361</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="authorizing-official-poc">
         <party-uuid>4fded5fd-7a65-47ea-bd76-df57c46e27d1</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="privacy-poc">
         <party-uuid>db234cb7-1776-425c-9ac4-b067c1723011</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="fedramp-pmo">
         <party-uuid>77e0e2c8-2560-4fe9-ac78-c3ff4ffc9f6d</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="fedramp-jab">
         <party-uuid>49017ec3-9f51-4dbd-9253-858c2b1295fd</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <remarks>
         <p>This OSCAL-based FedRAMP SSP Template can be used for the FedRAMP Low, Moderate, and
            High baselines.</p>
         <p>Guidance for OSCAL-based FedRAMP Tailored content has not yet been developed.</p>
      </remarks>
   </metadata>
   <!-- ====================================================
      Link this SSP to the appropriate FedRAMP baseline using ONE of the import statements below.
      NOTE: This points to a resource at the end of this file with links to both the XML and JSON
            versions of the baseline. Tools must select the appropriate link 
      FedRAMP HIGH Baseline: 
      <import-profile href="#9f1aae37-7359-411f-86c1-768aaab85e63"/>
      FedRAMP MODERATE Baseline:
      <import-profile href="#890170c3-d4fa-4d25-ab96-8e4bf7cc237c"/>
      FedRAMP LOW Baseline: 
      <import-profile href="#2acaf846-5496-4d36-8565-9a15b48aef2c"/>
   ==================================================== -->
   <import-profile href="#890170c3-d4fa-4d25-ab96-8e4bf7cc237c"/>
   <system-characteristics>
      <!-- Table 1-1 Information System Name and Title -->
      <system-id identifier-type="https://fedramp.gov">F00000000</system-id>
      <system-name>System's Full Name</system-name>
      <system-name-short>System's Short Name or Acronym</system-name-short>
      <!-- Section 9.1 (Old SSP Format Section 8.1) -->
      <description>
         <p>Describe the purpose and functions of this system here.</p>
      </description>
      <!-- FedRAMP Authorizatoin Type: fedramp-jab, fedramp-agency, or fedramp-li-saas -->
      <prop ns="https://fedramp.gov/ns/oscal"
            name="authorization-type"
            value="fedramp-agency"/>
      <!-- Section 2.3 Digital Identity Determination and Attachment 3, Digital Identity Worksheet -->
      <!-- 1 = low, 2= moderate, 3 = high  -->
      <prop ns="https://fedramp.gov/ns/oscal"
            name="security-eauth-level"
            class="security-eauth"
            value="2"/>
      <!-- Attachment 3, Digital Identity Worksheet: Additional Detail - Not Required -->
      <prop name="identity-assurance-level" value="2"/>
      <prop name="authenticator-assurance-level" value="2"/>
      <prop name="federation-assurance-level" value="2"/>
      <!-- Table 8-1 Service Layers Represented in this SSP -->
      <prop name="cloud-service-model" value="saas">
         <remarks>
            <p>Remarks are required if service model is "other". Optional otherwise.</p>
         </remarks>
      </prop>
      <!-- Table 8-2 Cloud Deployment Model Represented in this SSP -->
      <prop name="cloud-deployment-model" value="government-only-cloud">
         <remarks>
            <p>Remarks are required if deployment model is "hybrid-cloud" or "other". Optional
               otherwise.</p>
         </remarks>
      </prop>
      <!-- Table 2-1 Security Categorization and 2-4 Baseline Security Configuration -->
      <security-sensitivity-level>low</security-sensitivity-level>
      <!-- Table 2-2, Table 15-9, and Attachment 4 -->
      <system-information>
         <!-- Attachment 4, PTA/PIA Designation -->
         <prop name="privacy-sensitive" value="yes"/>
         <!-- Attachment 4, PTA Qualifying Questions -->
         <!--Does the ISA collect, maintain, or share PII in any identifiable form? -->
         <prop ns="https://fedramp.gov/ns/oscal"
               name="pta-1"
               class="pta"
               value="yes"/>
         <!--Does the ISA collect, maintain, or share PII information from or about the public? -->
         <prop ns="https://fedramp.gov/ns/oscal"
               name="pta-2"
               class="pta"
               value="yes"/>
         <!--Has a Privacy Impact Assessment ever been performed for the ISA? -->
         <prop ns="https://fedramp.gov/ns/oscal"
               name="pta-3"
               class="pta"
               value="yes"/>
         <!--Is there a Privacy Act System of Records Notice (SORN) for this ISA system? (If so, please specify the SORN ID.) -->
         <prop ns="https://fedramp.gov/ns/oscal"
               name="pta-4"
               class="pta"
               value="no"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="sorn-id"
               class="pta"
               value="[No SORN ID]"/>
         <information-type uuid="06ecba4f-db96-4491-a3a2-7febfa227435">
            <title>Information Type Name</title>
            <description>
               <p>A description of the information.</p>
            </description>
            <categorization system="https://doi.org/10.6028/NIST.SP.800-60v2r1">
               <information-type-id>C.2.4.1</information-type-id>
            </categorization>
            <confidentiality-impact>
               <base>fips-199-moderate</base>
               <selected>fips-199-moderate</selected>
               <adjustment-justification>
                  <p>Required if the base and selected values do not match.</p>
               </adjustment-justification>
            </confidentiality-impact>
            <integrity-impact>
               <base>fips-199-moderate</base>
               <selected>fips-199-moderate</selected>
               <adjustment-justification>
                  <p>Required if the base and selected values do not match.</p>
               </adjustment-justification>
            </integrity-impact>
            <availability-impact>
               <base>fips-199-moderate</base>
               <selected>fips-199-moderate</selected>
               <adjustment-justification>
                  <p>Required if the base and selected values do not match.</p>
               </adjustment-justification>
            </availability-impact>
         </information-type>
      </system-information>
      <!-- Table 2-3 Security Impact Level -->
      <security-impact-level>
         <security-objective-confidentiality>fips-199-moderate</security-objective-confidentiality>
         <security-objective-integrity>fips-199-moderate</security-objective-integrity>
         <security-objective-availability>fips-199-moderate</security-objective-availability>
      </security-impact-level>
      <!-- Section 2.3 Digital Identity Determination & Table 7-1 System Status -->
      <status state="operational">
         <remarks>
            <p>Remarks are required if status/state is "other". Optional otherwise.</p>
         </remarks>
      </status>
      <!-- Table 8-3 Leveraged Authorizations (Typically 0 or 1) -->
      <!-- ***** REWORKING LEVERAGED AUTHORIZATIONS MODEL WITH NIST ****** -->
      <!-- Section 9.2, Figure 9-1. Authorization Boundary Diagram -->
      <authorization-boundary>
         <description>
            <p>A holistic, top-level explanation of the FedRAMP authorization boundary.</p>
         </description>
         <diagram uuid="dbf46c27-52a9-49c4-beb6-b6399cd75497">
            <description>
               <p>A diagram-specific explanation.</p>
            </description>
            <link href="#d2eb3c18-6754-4e3a-a933-03d289e3fad5" rel="diagram"/>
            <caption>Authorization Boundary Diagram</caption>
         </diagram>
      </authorization-boundary>
      <!-- Section 9.4, Figure 9-2. Network Diagram -->
      <network-architecture>
         <description>
            <p>A holistic, top-level explanation of the network architecture.</p>
         </description>
         <diagram uuid="e97c3395-433a-48c1-8cc7-dd1e1555941c">
            <description>
               <p>A diagram-specific explanation.</p>
            </description>
            <link href="#61081e81-850b-43c1-bf43-1ecbddcb9e7f" rel="diagram"/>
            <caption>Network Diagram</caption>
         </diagram>
      </network-architecture>
      <!-- Section 10, Figure 10-1. Data Flow Diagram -->
      <data-flow>
         <description>
            <p>A holistic, top-level explanation of the system's data flows.</p>
         </description>
         <diagram uuid="e3b98448-4219-46a5-b229-412423c566f3">
            <description>
               <p>A diagram-specific explanation.</p>
            </description>
            <link href="#ac5d7535-f3b8-45d3-bf3b-735c82c64547" rel="diagram"/>
            <caption>Data Flow Diagram</caption>
         </diagram>
      </data-flow>
   </system-characteristics>
   <system-implementation>
      <prop ns="https://fedramp.gov/ns/oscal" name="users-internal" value="0"/>
      <prop ns="https://fedramp.gov/ns/oscal" name="users-external" value="0"/>
      <prop ns="https://fedramp.gov/ns/oscal"
            name="users-internal-future"
            value="0"/>
      <prop ns="https://fedramp.gov/ns/oscal"
            name="users-external-future"
            value="0"/>
      <leveraged-authorization uuid="5a9c98ab-8e5e-433d-a7bd-515c07cd1497">
         <title>Name of Underlying System</title>
         <party-uuid>f0bc13a4-3303-47dd-80d3-380e159c8362</party-uuid>
         <date-authorized>2015-01-01</date-authorized>
         <remarks>
            <p>The leveraged-authorizaton assembly is supposed to have a required uuid flag instead of an optional id flag. This will be fixed in the syntax shortly.</p>
            <p>Use one leveraged-authorization assembly for each underlying system. (In the legacy world, these may be general support systems.</p>
         </remarks>
      </leveraged-authorization>
      <user uuid="9cb0fab0-78bd-44ba-bcb8-3e9801cc952f">
         <title>[SAMPLE]Unix System Administrator</title>
         <prop ns="https://fedramp.gov/ns/oscal" name="sensitivity" value="high"/>
         <prop name="privilege-level" value="privileged"/>
         <prop name="type" value="internal"/>
         <role-id>admin-unix</role-id>
         <authorized-privilege>
            <title>Full administrative access (root)</title>
            <function-performed>Add/remove users and hardware</function-performed>
            <function-performed>install and configure software</function-performed>
            <function-performed>OS updates, patches and hotfixes</function-performed>
            <function-performed>perform backups</function-performed>
         </authorized-privilege>
      </user>
      <user uuid="16ec71e7-025c-43e4-9d3f-3acb485fac2e">
         <title>[SAMPLE]Client Administrator</title>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="sensitivity"
               value="moderate"/>
         <prop name="privilege-level" value="non-privileged"/>
         <prop name="type" value="external"/>
         <role-id>external</role-id>
         <authorized-privilege>
            <title>Portal administration</title>
            <function-performed>Add/remove client users</function-performed>
            <function-performed>Create, modify and delete client applications</function-performed>
         </authorized-privilege>
      </user>
      <user uuid="ba7708c1-4041-48ab-9b7b-1ddb5e175fe0">
         <title>[SAMPLE]Program Director</title>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="sensitivity"
               value="limited"/>
         <prop name="privilege-level" value="no-logical-access"/>
         <prop name="type" value="internal"/>
         <role-id>program-director</role-id>
         <authorized-privilege>
            <title>Administrative Access Approver</title>
            <function-performed>Approves access requests for administrative accounts.</function-performed>
         </authorized-privilege>
         <authorized-privilege>
            <title>Access Approver</title>
            <function-performed>Approves access requests for administrative accounts.</function-performed>
         </authorized-privilege>
      </user>
      <component type="this-system" uuid="3d035035-dfca-4240-9787-a7e8561e1c7d">
         <title>This System</title>
         <description>
            <p>The system described by this SSP.</p>
            <p>This text was auto-generated by the OSCAL M3-RC1 data upgrade converter.</p>
         </description>
         <status state="operational"/>
      </component>
      <component uuid="60f92bcf-f353-4236-9803-2a5d417555f4" type="system">
         <title>This System</title>
         <description>
            <p>The entire system as depicted in the system authorization boundary</p>
         </description>
         <status state="operational"/>
      </component>
      <component uuid="e82e6e07-0c62-417e-8a19-3744991b4c65" type="system">
         <title>Name of Leveraged System</title>
         <description>
            <p>If the leveraged system owner provides a UUID for their system (such as in an OSCAL-based CRM), it should be used as the UUID for this component.</p>
         </description>
         <prop name="leveraged-authorization-uuid"
               value="5a9c98ab-8e5e-433d-a7bd-515c07cd1497"/>
         <status state="operational"/>
      </component>
      <component uuid="95beec7e-6f82-4aaa-8211-969cd7c1f1ab" type="validation">
         <title>[SAMPLE]Module Name</title>
         <description>
            <p>[SAMPLE]FIPS 140-2 Validated Module</p>
         </description>
         <prop ns="https://fedramp.gov/ns/oscal" name="cert-no" value="0000"/>
         <link href="https://csrc.nist.gov/projects/cryptographic-module-validation-program/Certificate/0000"/>
         <status state="operational"/>
      </component>
      <component uuid="05ceb8df-52e7-49db-9719-891723f366bd" type="software">
         <title>[SAMPLE]Product Name</title>
         <description>
            <p>FUNCTION: Describe typical component function.</p>
         </description>
         <prop name="asset-type" value="os"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="scan-type"
               value="infrastructure"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="vendor-name"
               value="Vendor Name"/>
         <prop name="model" value="Model Number"/>
         <prop name="version" value="Version Number"/>
         <prop name="patch-level" value="Patch Level"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="validation"
               value="fips-module-1"/>
         <status state="operational"/>
         <responsible-role role-id="admin-unix">
            <party-uuid>3360e343-9860-4bda-9dfc-ff427c3dfab6</party-uuid>
         </responsible-role>
         <remarks>
            <p>COMMENTS: Provide other comments as needed.</p>
         </remarks>
      </component>
      <component uuid="1541015b-6d19-42cb-a991-624cc082ed4d" type="hardware">
         <title>[SAMPLE]Product</title>
         <description>
            <p>FUNCTION: Describe typical component function.</p>
         </description>
         <prop name="asset-type" value="database"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="scan-type"
               value="infrastructure"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="scan-type" value="database"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="vendor-name"
               value="Vendor Name"/>
         <prop name="model" value="Model Number"/>
         <prop name="version" value="Version Number"/>
         <status state="operational"/>
         <responsible-role role-id="asset-administrator">
            <party-uuid>b306f5af-b93a-4a7f-a2b2-37a44fc92a79</party-uuid>
         </responsible-role>
         <responsible-role role-id="asset-owner">
            <party-uuid>36b8d6c0-3b25-42cc-b529-cf4066145cdd</party-uuid>
         </responsible-role>
         <remarks>
            <p>COMMENTS: Provide other comments as needed.</p>
         </remarks>
      </component>
      <component uuid="6617f60b-8bac-422d-9939-94f43ddc0f7a" type="os">
         <title>OS Sample</title>
         <description>
            <p>None</p>
         </description>
         <prop name="asset-type" value="os"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="scan-type"
               value="infrastructure"/>
         <prop name="baseline-configuration-name" value="Baseline Config. Name"/>
         <prop name="allows-authenticated-scan" value="yes"/>
         <status state="operational"/>
      </component>
      <component uuid="120f1404-7c9f-4856-a247-63bd89d9e769" type="software">
         <title>Database Sample</title>
         <description>
            <p>None</p>
         </description>
         <prop name="asset-type" value="database"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="scan-type" value="database"/>
         <prop name="baseline-configuration-name" value="Baseline Config. Name"/>
         <prop name="allows-authenticated-scan" value="yes"/>
         <status state="operational"/>
      </component>
      <component uuid="8f230d84-2f9b-44a3-acdb-019566ab2554" type="software">
         <title>Appliance Sample</title>
         <description>
            <p>None</p>
         </description>
         <prop name="asset-type" value="appliance"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="scan-type" value="web"/>
         <prop name="login-url" value="https://admin.offering.com/login"/>
         <prop name="baseline-configuration-name" value="Baseline Config. Name"/>
         <prop name="allows-authenticated-scan" value="no">
            <remarks>
               <p>Vendor appliance. No admin-level access.</p>
            </remarks>
         </prop>
         <status state="operational"/>
      </component>
      <component uuid="d5841417-de4c-4d84-ab3c-39dd1fd32a96" type="service">
         <title>[SAMPLE]Service Name</title>
         <description>
            <p>Describe the service</p>
         </description>
         <purpose>Describe the reason the service is needed.</purpose>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="used-by"
               value="What uses this service?"/>
         <prop name="protocol" value=""/>
         <status state="operational"/>
         <protocol name="http">
            <port-range start="80" end="80" transport="TCP"/>
         </protocol>
         <protocol name="https">
            <port-range start="443" end="443" transport="TCP"/>
         </protocol>
         <remarks>
            <p>Section 10.2, Table 10-1. Ports, Protocols and Services</p>
            <p>
               <b>SERVICES ARE NOW COMPONENTS WITH type='service'</b>
            </p>
         </remarks>
      </component>
      <component uuid="2812ef51-61e7-4505-afbb-da5a073a2a5b" type="interconnection">
         <title>[EXAMPLE]Authorized Connection Information System Name</title>
         <description>
            <p>Briefly describe the interconnection.</p>
         </description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="service-processor"
               value="[SAMPLE]Telco Name"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="ipv4-address"
               class="local"
               value="10.1.1.1"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="ipv4-address"
               class="remote"
               value="10.2.2.2"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="direction"
               value="incoming-outgoing"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="information"
               value="Describe the information being transmitted."/>
         <prop ns="https://fedramp.gov/ns/oscal" name="port" value="80"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="circuit" value="1"/>
         <prop name="connection-security"
               ns="https://fedramp.gov/ns/oscal"
               value="ipsec">
            <remarks>
               <p>If "other", remarks are required. Optional otherwise.</p>
            </remarks>
         </prop>
         <link href="#9d6cf2b4-8e88-4040-a33c-7bc206553a1a" rel="agreement"/>
         <status state="operational"/>
         <responsible-role role-id="isa-poc-remote">
            <party-uuid>09ad840f-aa79-43aa-9f22-25182c2ab11b</party-uuid>
         </responsible-role>
         <responsible-role role-id="isa-poc-local">
            <party-uuid>09ad840f-aa79-43aa-9f22-25182c2ab11b</party-uuid>
         </responsible-role>
         <responsible-role role-id="isa-authorizing-official-remote">
            <party-uuid>09ad840f-aa79-43aa-9f22-25182c2ab11b</party-uuid>
         </responsible-role>
         <responsible-role role-id="isa-authorizing-official-local">
            <party-uuid>09ad840f-aa79-43aa-9f22-25182c2ab11b</party-uuid>
         </responsible-role>
         <remarks>
            <p>Optional notes about this interconnection</p>
         </remarks>
      </component>
      <inventory-item uuid="98e37f90-fbb5-4177-badb-9b55229cc183">
         <description>
            <p>Flat-File Example (No implemented-component).</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.1.1.1"/>
         <prop name="ipv6-address" value="0000:0000:0000:0000"/>
         <prop name="virtual" value="no"/>
         <prop name="public" value="no"/>
         <prop name="fqdn" value="dns.name"/>
         <prop name="uri" value="uniform.resource.identifier"/>
         <prop name="netbios-name" value="netbios-name"/>
         <prop name="mac-address" value="00:00:00:00:00:00"/>
         <prop name="software-name" value="software-name"/>
         <prop name="version" value="V 0.0.0"/>
         <prop name="asset-type" value="os"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="vendor-name"
               value="Vendor Name"/>
         <prop name="model" value="Model Number"/>
         <prop name="patch-level" value="Patch-Level"/>
         <prop name="serial-number" value="Serial #"/>
         <prop name="asset-tag" value="Asset Tag"/>
         <prop name="vlan-id" value="VLAN Identifier"/>
         <prop name="network-id" value="Network Identifier"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="scan-type"
               value="infrastructure"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="scan-type" value="database"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="validation"
               value="component-id"/>
         <prop name="allows-authenticated-scan" value="no">
            <remarks>
               <p>If no, explain why. If yes, omit remarks field.</p>
            </remarks>
         </prop>
         <prop name="baseline-configuration-name" value="Baseline Config. Name"/>
         <prop name="physical-location" value="Physical location of Asset"/>
         <prop name="is-scanned" value="yes">
            <remarks>
               <p>If no, explain why. If yes, omit remarks field.</p>
            </remarks>
         </prop>
         <prop name="function" value="Required brief, text-based description.">
            <remarks>
               <p>Optional, longer, formatted description.</p>
            </remarks>
         </prop>
         <responsible-party role-id="asset-owner">
            <party-uuid>db234cb7-1776-425c-9ac4-b067c1723011</party-uuid>
         </responsible-party>
         <responsible-party role-id="asset-administrator">
            <party-uuid>b306f5af-b93a-4a7f-a2b2-37a44fc92a79</party-uuid>
         </responsible-party>
         <remarks>
            <p>COMMENTS: Additional information about this item.</p>
         </remarks>
      </inventory-item>
      <inventory-item uuid="c916d3c5-229e-4786-bf3f-4d71baa0e7a5">
         <description>
            <p>Component Inventory Example</p>
         </description>
         <prop name="asset-id" value="unique-asset-ID"/>
         <prop name="ipv4-address" value="10.2.2.2"/>
         <prop name="ipv6-address" value="0000:0000:0000:0000"/>
         <prop name="mac-address" value="00:00:00:00:00:00"/>
         <prop name="virtual" value="no"/>
         <prop name="public" value="no"/>
         <prop name="fqdn" value="dns.name"/>
         <prop name="uri" value="uniform.resource.locator"/>
         <prop name="netbios-name" value="netbios-name"/>
         <prop name="patch-level" value="Patch-Level"/>
         <prop name="baseline-configuration-name" value="Baseline Configuration Name"/>
         <prop name="physical-location" value="Physical location of Asset"/>
         <prop name="scan-authenticated"
               ns="https://fedramp.gov/ns/oscal"
               value="no">
            <remarks>
               <p>If no, explain why. If yes, omit remark.</p>
            </remarks>
         </prop>
         <prop name="scan-latest" ns="https://fedramp.gov/ns/oscal" value="yes">
            <remarks>
               <p>If no, explain why. If yes, omit remark.</p>
            </remarks>
         </prop>
         <responsible-party role-id="asset-owner">
            <party-uuid>3360e343-9860-4bda-9dfc-ff427c3dfab6</party-uuid>
         </responsible-party>
         <responsible-party role-id="asset-administrator">
            <party-uuid>b306f5af-b93a-4a7f-a2b2-37a44fc92a79</party-uuid>
         </responsible-party>
         <implemented-component component-uuid="05ceb8df-52e7-49db-9719-891723f366bd"/>
         <remarks>
            <p>COMMENTS: If needed, provide additional information about this inventory item.</p>
         </remarks>
      </inventory-item>
      <inventory-item uuid="37c00d5a-ccf2-4112-a0ee-8460be8cff40">
         <description>
            <p>None.</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.3.3.3"/>
         <prop name="is-scanned" value="yes"/>
         <implemented-component component-uuid="1541015b-6d19-42cb-a991-624cc082ed4d"/>
      </inventory-item>
      <inventory-item uuid="fb7a84fb-7e30-4f5b-9997-2ecd4d270bdd">
         <description>
            <p>None.</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.4.4.4"/>
         <prop name="is-scanned" value="yes"/>
         <implemented-component component-uuid="05ceb8df-52e7-49db-9719-891723f366bd"/>
      </inventory-item>
      <inventory-item uuid="779d4e89-bba6-432c-b50d-d699fe534129">
         <description>
            <p>None.</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.5.5.5"/>
         <prop name="is-scanned" value="yes"/>
         <implemented-component component-uuid="8f230d84-2f9b-44a3-acdb-019566ab2554"/>
      </inventory-item>
      <inventory-item uuid="20b207d5-5e77-4501-b02d-5d2a6e88db85">
         <description>
            <p>None.</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.6.6.6"/>
         <prop name="is-scanned" value="no">
            <remarks>
               <p>Asset wasn't running at time of scan.</p>
            </remarks>
         </prop>
         <implemented-component component-uuid="05ceb8df-52e7-49db-9719-891723f366bd"/>
      </inventory-item>
      <inventory-item uuid="79b4f0d1-91ab-49e8-af28-045c12aa9272">
         <description>
            <p>None.</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.7.7.7"/>
         <prop name="is-scanned" value="yes"/>
         <implemented-component component-uuid="1541015b-6d19-42cb-a991-624cc082ed4d"/>
      </inventory-item>
      <inventory-item uuid="b31b360d-b58b-4c7c-b344-68e17238d858">
         <description>
            <p>None.</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.8.8.8"/>
         <prop name="is-scanned" value="no">
            <remarks>
               <p>Asset wasn't running at time of scan.</p>
            </remarks>
         </prop>
         <implemented-component component-uuid="05ceb8df-52e7-49db-9719-891723f366bd"/>
      </inventory-item>
      <inventory-item uuid="55b55b3d-3bd9-409a-bc87-3b9a2074bacd">
         <description>
            <p>IPv4 Production Subnet.</p>
         </description>
         <prop name="asset-id" value="10.10.10.0"/>
         <prop name="ipv4-subnet" value="10.10.10.0/24"/>
         <prop name="is-scanned" value="yes"/>
      </inventory-item>
      <inventory-item uuid="c0dbefa1-c8e8-4ca8-bd73-67cb7b1fa3f6">
         <description>
            <p>IPv4 Management Subnet.</p>
         </description>
         <prop name="asset-id" value="10.10.20.0"/>
         <prop name="ipv4-subnet" value="10.10.20.0/24"/>
         <prop name="is-scanned" value="yes"/>
      </inventory-item>
   </system-implementation>
   <!-- Section 13 -->
   <control-implementation>
      <description>
         <p>FedRAMP SSP Template Section 13</p>
         <p>This description field is required by OSCAL. FedRAMP does not require any specific
            information here.</p>
      </description>
      <implemented-requirement control-id="ac-1" uuid="eee8697a-bc39-45aa-accc-d3e534932efb">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <set-parameter param-id="ac-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ac-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ac-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="ac-1_stmt.a" uuid="fb4d039a-dc4f-46f5-9c1f-f6343eaf69bc">
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="3f5612a4-cd1d-4c47-8cae-75d2eaa332cd">
               <description>
                  <p>Describe how Part a is satisfied within the system.</p>
               </description>
            </by-component>
            <remarks>
               <p>The specified component is the system itself.</p>
               <p>Any control implementation response that can not be associated with another component is associated with the component representing the system.</p>
            </remarks>
         </statement>
         <statement statement-id="ac-1_stmt.a.1"
                    uuid="0afdccce-b5ed-4127-ae19-cfbdd17d775e">
            <link href="#090ab379-2089-4830-b9fd-26d0729e22e9" rel="policy"/>
            <remarks>
               <p>This identifies a policy (attached in resources) that satisfies this control.</p>
            </remarks>
         </statement>
         <statement statement-id="ac-1_stmt.a.2"
                    uuid="ffaf5e02-3055-40df-bbeb-3b94e834a43f">
            <link href="#att-process-1" rel="process"/>
            <remarks>
               <p>This identifies a process (attached in resources) that satisfies this control.</p>
            </remarks>
         </statement>
         <statement statement-id="ac-1_stmt.b.1"
                    uuid="b46f97ec-55c1-4249-a9b9-3a228f1e3791">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="26afd0af-464a-4a33-8a83-f942ec5ef182">
               <description>
                  <p>Describe how Part b-1 is satisfied.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ac-1_stmt.b.2"
                    uuid="59c67969-3d5c-45f1-8e3e-1e642249633f">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="37e6602e-4c94-486f-ad10-64ac19dfa099">
               <description>
                  <p>Describe how Part b-2 is satisfied.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ac-2" uuid="7a36cf53-156d-4d1f-9a8b-433f61cc57b7">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="Completion Date"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="partial">
            <remarks>
               <p>Describe the portion of the control that is not satisfied.</p>
            </remarks>
         </prop>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="not-applicable">
            <remarks>
               <p>Describe the justification for marking this control Not Applicable.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="customer-configured">
            <remarks>
               <p>Describe any customer-configured requirements for satisfying this control.</p>
            </remarks>
         </prop>
         <responsible-role role-id="admin-unix"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="ac-2_prm_1">
            <value>[SAMPLE]privileged, non-privileged</value>
         </set-parameter>
         <set-parameter param-id="ac-2_prm_2">
            <value>[SAMPLE]all</value>
         </set-parameter>
         <set-parameter param-id="ac-2_prm_3">
            <value>[SAMPLE]The Access Control Procedure</value>
         </set-parameter>
         <set-parameter param-id="ac-2_prm_4">
            <value>[SAMPLE]annually</value>
         </set-parameter>
         <statement statement-id="ac-2_stmt.a" uuid="24a85abb-25ad-4686-850c-5c0e8ab69a0c">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="70bbeee7-f0ae-4502-839f-1db8a8ce9dd9">
               <description>
                  <p>Do not respond to this statement here. Respond within the <code>by-component</code> assembly below.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="8a72663c-28c7-41c2-8739-f1ee2d5761ac">
               <description>
                  <p>For the portion of the control satisfied by this system or its owning organization, describe
                        <strong>how</strong> the control is met.</p>
               </description>
               <prop name="responsibility" value="customer">
                  <remarks>
                     <p>General customer responsibility description.</p>
                  </remarks>
               </prop>
               <remarks>
                  <p>The component-uuid above points to the "this system" component.</p>
                  <p>Any control response content that does not cleanly fit another system component is placed here. This includes customer responsibility content.</p>
                  <p>This can also be used to provide a summary, such as a holistic overview of how multiple components work together.</p>
                  <p>While the "this system" component is not expclicity required within every <code>statement</code>, it will typically be present.</p>
               </remarks>
            </by-component>
            <by-component component-uuid="b7364f67-bf65-4df2-b756-4b9c6b1c4a52"
                          uuid="84de735f-ba37-4bb4-b784-79760f986a40">
               <description>
                  <p>For the portion inherited from an underlying FedRAMP-authorized provider,
                     describe <strong>what</strong> is inherited.</p>
               </description>
               <prop name="responsibility" value="customer">
                  <remarks>
                     <p>Component-specific customer responsibility description.</p>
                  </remarks>
               </prop>
            </by-component>
            <by-component component-uuid="cae07d12-8566-443a-95de-7596b9cac953"
                          uuid="13db02bb-1f33-4f79-8711-ed47c2c3d337">
               <description>
                  <p>For the portion of the control that must be configured by or provided by the
                     customer, describe the customer responsibility here. This is what will appear
                     in the Customer Responsibility Matrix.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="at-1" uuid="c332a6f8-bbe6-4ee9-aaea-d89d251c68df">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="at-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="at-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="at-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="at-1_stmt.a" uuid="ee5a11fb-9bae-4680-8f8c-575c85d47355">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="8ef2f9ed-bd07-4f93-b897-fd820218a6e6">
               <description>
                  <p>Component-based Approach</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="d3bdee1c-7d84-4ed4-8950-e13256edb7fa">
               <description>
                  <p>Describe how Part a is satisfied.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="at-1_stmt.a.1"
                    uuid="2e8ec7ce-c9c6-4f5f-9d50-3a3b9d3acf65">
            <link href="#090ab379-2089-4830-b9fd-26d0729e22e9" rel="policy"/>
            <remarks>
               <p>This identifies a policy (attached in resources) that satisfies this control.</p>
            </remarks>
         </statement>
         <statement statement-id="at-1_stmt.a.2"
                    uuid="e7f9b618-c092-4b8b-b416-0ee477026726">
            <link href="#att-process-1" rel="process"/>
            <remarks>
               <p>This identifies a process (attached in resources) that satisfies this control.</p>
            </remarks>
         </statement>
         <statement statement-id="at-1_stmt.b.1"
                    uuid="29192f0b-edb1-4820-b951-65ffdc64bb3e">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="ce72c0f1-ec52-49e1-aab3-8580cbca7e5e">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="5a5e5c3e-1108-47f1-a83f-05e0394219db">
               <description>
                  <p>Describe how Part b-1 is satisfied.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="at-1_stmt.b.2"
                    uuid="23a9bfa7-6e3f-4e00-a120-791b26a9157e">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="0ebc6d57-8edf-4275-82af-632afa9b1d18">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="fcc63699-04ab-4b69-b7b9-a13bee6685b3">
               <description>
                  <p>Describe how Part b-2 is satisfied.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="au-1" uuid="381c8d0c-e6ec-41a9-9b16-01657226c70f">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="au-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="au-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="au-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="au-1_stmt.a" uuid="9a2bd937-226e-4aaf-8261-2cf0c2e3aa10">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="a037eaa7-2fbe-49ab-be46-11d698725918">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="30042cb9-ff85-472f-b769-68bd7bb5bbd9">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="au-1_stmt.b.1"
                    uuid="d01f186f-a14f-4e22-b069-84a55e48a112">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="7d8910b1-109e-48bb-8543-45b8c8dac596">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="f41962c7-b53b-46f8-a84f-4aba25904bb8">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="au-1_stmt.b.2"
                    uuid="ea153acb-2bd0-41d9-8ebd-ba022d31230a">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="39cb5658-b8f6-43e0-9ffe-013dac901c33">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="9ad59f0d-17a2-4f3f-af6a-a8529d692195">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ca-1" uuid="43e388d9-3854-44f6-8c6f-17a6d51ee6a2">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="ca-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ca-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ca-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="ca-1_stmt.a" uuid="e7bd0a7e-5f92-4769-8cd3-76ad2f663a5c">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="1d38502e-a13f-4da2-aeaa-9e2b3a44c269">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="e5815f1d-ec94-4d98-8896-ec57e339bd7b">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ca-1_stmt.b.1"
                    uuid="b2c3ec86-b976-4e5a-9dc3-4ac2d570765e">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="5cd8b2d9-b194-40ea-a036-4aba6e3ff0cd">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="ca6b2bd5-3ddf-4167-a942-06e1955e49f8">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ca-1_stmt.b.2"
                    uuid="e9474eb8-36d6-4eab-abeb-f9bd17e66b22">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="bad73480-9058-413a-bb09-d111bd8f23aa">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="507b8b9d-2d40-4748-81c9-c5a13c8f8f05">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="cm-1" uuid="c8e45d78-2afe-42ae-80e1-c1e2499a0346">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="cm-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="cm-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="cm-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="cm-1_stmt.a" uuid="52339583-19b6-4774-9213-50b9f42fe51f">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="8945aafb-fd81-4d38-b9ee-0b153566790f">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="2916ebd5-c45a-466e-b8e9-00dd15b0c94d">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="cm-1_stmt.b.1"
                    uuid="f9cc6f3f-c64f-4fae-9a32-f964ebdc8e74">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="91670e6b-f164-492a-9aad-a9a2d6b8e114">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="678db1d2-a538-4986-ac94-63da312fe3f9">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="cm-1_stmt.b.2"
                    uuid="c548a71f-41d6-4e8c-b400-1764379348c4">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="40745320-eb16-4b16-af80-b18607be9994">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="a871cf91-04c7-4e03-9df6-80b3d5afc9bf">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="cp-1" uuid="13af9343-73e7-4d71-b386-9a0844fa7e45">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="cp-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="cp-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="cp-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="cp-1_stmt.a" uuid="8bde1fa5-eb81-4a1b-9e6e-5827e176025a">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="ef1ebd70-dc97-44b1-9c83-8e401f6c6920">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="157d7751-938c-441f-9299-02a339d98532">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="cp-1_stmt.b.1"
                    uuid="2fc9eec1-a49f-4cfa-9f7b-c702a1e21619">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="4e9b1a0a-6364-4b3c-8cdc-ec3e1e461c9c">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="6358db78-bab1-4139-b512-f65d3e48248b">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="cp-1_stmt.b.2"
                    uuid="db5b3977-bd51-4505-b3e2-1597bbd4d930">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="c020517e-adda-4f01-a0d1-a0aa3cb6ee5b">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="3de33bbe-1a15-4d10-b35d-56fd85e24571">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ia-1" uuid="4050c933-3ecc-4a8d-8da7-391364685cbb">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="ia-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ia-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ia-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="ia-1_stmt.a" uuid="ba92e479-705f-47a4-a763-dfc098ba239d">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="9af2df5d-4f00-46d9-8a75-724baa67fa32">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="5add335d-7375-49f0-843c-ac994e4d147b">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ia-1_stmt.b.1"
                    uuid="dba8c469-5758-497e-9856-e472a2e08677">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="70135b8f-c8f6-410e-aded-40be7a0d8fac">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="b04d86a0-b68c-41f0-9c0b-88a8daa457b7">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ia-1_stmt.b.2"
                    uuid="b56e37b1-1f4c-479b-bfa1-a2773c2eebfd">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="be523f20-df87-48d4-960d-1c38f6180fdd">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="c8fde380-9a41-404a-a88b-c20479a21618">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ir-1" uuid="229846dc-83cc-4ff2-a9ed-210490a343d9">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="ir-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ir-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ir-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="ir-1_stmt.a" uuid="7284efc2-d953-486c-ab8a-3caef6ce06c3">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="169c74fb-e6f4-4046-978e-79ae5814fdcf">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="7b385445-5e7b-4656-98f1-0f1353aab59e">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ir-1_stmt.b.1"
                    uuid="75c37e1a-6e8d-4ef0-99f4-c16f7995706c">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="2e37f6b4-8f45-423f-b93d-1fc9bd16c7a0">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="e7ae4685-2e30-4e00-9ada-b00b5eaf5578">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ir-1_stmt.b.2"
                    uuid="900591ec-2006-4622-bc87-59828d884d4f">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="5eff09b6-1cb0-4f9d-ac16-1d52faa3d5c0">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="f443c391-479d-492d-b7e9-55c9c2c107be">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ma-1" uuid="f0c6b63f-6b94-448f-bb16-db3d54b91734">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="ma-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ma-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ma-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="ma-1_stmt.a" uuid="d609e538-3976-418e-a368-58fc75cd03c0">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="499d1b82-bf8d-463e-b3c6-22417b11011b">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="93a9b046-63c4-4628-8547-39bc7d8df70c">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ma-1_stmt.b.1"
                    uuid="df1a6dd8-9e18-4408-8783-cb30e0413f22">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="b7adc7f7-ae07-4b17-8cd8-fe5f13f50d09">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="ad14f76a-a3eb-4349-8f6c-54cd99f1c040">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ma-1_stmt.b.2"
                    uuid="f02f759d-7d4c-41f2-b153-f3cc1e157e39">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="88eb79f6-615c-4d18-8e8a-0cf7abc58d93">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="32b337f6-eb61-4945-a139-4d2ae7737488">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="mp-1" uuid="fa3a9747-3451-456a-aae9-9896e03a52c8">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="mp-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="mp-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="mp-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="mp-1_stmt.a" uuid="bab45ad3-65ee-43bc-9c3e-c3e4e2db8001">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="20b544ef-9e1e-4325-b362-7b3c6f0cca9c">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="6668f521-4d5c-4317-868f-804878675bf2">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="mp-1_stmt.b.1"
                    uuid="ca35d4a5-ca73-4b3a-aa66-6c712c7a4a49">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="2ff6fc5a-1ee7-48b3-b534-0cd3dbbc864d">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="57e65240-5b41-40ee-89b1-f75d8fb259ad">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="mp-1_stmt.b.2"
                    uuid="0c5c6eda-9644-46f2-a29c-16fe4e248621">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="9b315aac-43f9-4ae7-9e78-a0b8d7f7c73c">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="ea6c7fa7-ccbf-414c-8c6b-9c928e914b35">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="pe-1" uuid="a85ff28e-517c-4455-8bd4-866103a2c94a">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="pe-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="pe-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="pe-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="pe-1_stmt.a" uuid="11fd3e46-4735-4986-91bc-747345fe608a">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="12c05f28-6f97-439b-9eb1-110f0076a5c1">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="dceb4401-c1fd-41a7-9e07-8d82a8042e61">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="pe-1_stmt.b.1"
                    uuid="a37f91e2-190d-40f7-829c-39776c14c8b4">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="218e56e0-fa10-49b5-8d03-0096d6980b8f">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="bbd2b372-b57d-4a3a-90c2-2189dd23664b">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="pe-1_stmt.b.2"
                    uuid="f3d57138-916c-4064-b2fc-aa8dd76849f8">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="bf063b0f-47c6-489e-977d-888caf38650c">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="f4a94538-220f-4f73-9487-73b72b68813e">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="pl-1" uuid="97ba1f95-92a8-480b-a489-960661e4206b">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="pl-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="pl-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="pl-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="pl-1_stmt.a" uuid="ec7af577-ff22-46bf-ac0a-cf9d75c72ebb">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="baf8d3b0-bb38-4d09-9d72-9e250570a8e8">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="679837fb-601e-4517-abe6-11ff6fc551b4">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="pl-1_stmt.b.1"
                    uuid="438f3e29-670a-49f2-8b9f-05d951318294">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="22cf3cc1-46c1-44ac-8082-342c1a09d4c4">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="ddce2988-ce9b-4f15-a427-6f18e4ba1817">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="pl-1_stmt.b.2"
                    uuid="96a4d13c-bd2b-4038-96c5-0f923f404bbd">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="315dbe5a-3f98-476f-898a-408ad9de9f7c">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="18d7c02e-f21b-4cd2-bf33-d27971ced47f">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ps-1" uuid="5e7498de-b540-4a28-b041-4381b023e98a">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="ps-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ps-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ps-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="ps-1_stmt.a" uuid="afe1703d-5e59-460b-b048-41b49699c5a1">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="ae5a3811-acf1-4195-8edd-d1c4ab8d7716">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="7d6cafb2-b613-4807-ad61-4f0f649bd5ee">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ps-1_stmt.b.1"
                    uuid="956c93e2-cf8f-482c-aaf7-91ab44c7cbd6">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="8c1af0f0-267c-457d-9a12-6b29c05cb9a7">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="f4fbfbc2-1a94-456d-a713-9d547f18a0c7">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ps-1_stmt.b.2"
                    uuid="6926c688-3fb2-4ab8-9acb-cff0b5acd365">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="7b3919ab-7a62-43ff-8c08-5e6f6460b9d2">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="2f9c701a-0f3e-4e3d-beae-debb08c406ed">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ra-1" uuid="789e6c0f-acda-4a94-9b48-7d41dd4c607c">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="ra-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ra-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ra-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="ra-1_stmt.a" uuid="8fe541ea-0920-42d0-8561-4e08f04d796c">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="c04523ba-79c6-4275-8e0d-29c087b0968b">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="5894d92b-05bf-4fc4-85dc-f5c37e112bc4">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ra-1_stmt.b.1"
                    uuid="b0e9ed47-fe83-485d-8d79-979833543a83">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="74ee9f12-0907-4fc0-ae20-b8f4fc943910">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="c90ad6ee-5a40-4996-8e6c-d85ff3f7559e">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ra-1_stmt.b.2"
                    uuid="d9a38f95-ded1-4d1d-afe2-242987222ebd">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="afe963d8-5c04-4d98-870d-3fcec147a9ed">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="d6f6ac98-4f15-45f2-9ecc-4447e96af44f">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="sa-1" uuid="55358f60-db9b-4d75-a313-5fa6c328273c">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="sa-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="sa-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="sa-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="sa-1_stmt.a" uuid="ae3f64be-2e62-4347-b06a-727bc28e4f9b">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="28d5f97a-80c5-4874-b646-4e6a0da49f9a">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="e5864f16-83f2-4faf-b7be-0810c6e58fc4">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="sa-1_stmt.b.1"
                    uuid="959519a9-3e12-47bc-8d76-50d9ab0b6544">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="383e459b-5a24-49a8-bcd7-d51e5e342dc4">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="bed8f51a-1773-493c-8167-c83712e03f01">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="sa-1_stmt.b.2"
                    uuid="9daa3848-9672-469c-9aa0-f363e3339123">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="39ff0aef-81b3-4330-9825-aecb009e48d1">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="518d4987-9436-4c1f-9e07-afa6b332f124">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="sc-1" uuid="9e2852c6-f48a-47b2-9ea5-77cbbb42b365">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="sc-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="sc-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="sc-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="sc-1_stmt.a" uuid="5e2e8372-c13b-4cf5-90c5-e8833a9fe241">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="8c01ac20-74aa-482b-8e84-2be7a0fc4c48">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="88cfadba-043b-483b-8032-73344aa53c96">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="sc-1_stmt.b.1"
                    uuid="8166980a-86c0-497d-87e4-453adfd0d4bd">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="c3aea0dd-4353-4a72-bb19-94cefa87a9c9">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="9abaeb64-56d2-48a1-bd8d-7b55411d31ca">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="sc-1_stmt.b.2"
                    uuid="eeea34ff-18ab-4c35-bf32-c74dbf746e7b">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="9f91469b-5237-4edb-a477-436608e76f05">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="ad20ff50-8a7c-4ffc-a918-260960f6fb42">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="si-1" uuid="81ba4fe8-1649-437b-9ecf-367fd87336e6">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="si-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="si-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="si-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="si-1_stmt.a" uuid="915b10d2-2275-4d86-951a-eec23f9ee77a">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="ec810fee-3620-4611-a0f0-17b37c6ad595">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="682311e7-e3f7-4d94-acf9-131149887fda">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="si-1_stmt.b.1"
                    uuid="2a5a6f7f-aeea-4ea4-be1e-859df4bf7521">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="1beeb6ad-7655-4f2c-be2e-fb235dbfcdcd">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="80ee0fe9-7f87-4dfa-887a-ac3bb2131943">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="si-1_stmt.b.2"
                    uuid="c152bbde-57fc-4864-ac51-861bd8bb83b4">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="e9b54d73-7753-46e7-a473-ae735ed7685c">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="78e8f2bb-67d7-49d3-a993-ce4bedcfbc47">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
   </control-implementation>
   <!-- Table 15-1 Names of Provided Attachments -->
   <back-matter>
      <!-- Section 12, Table 12-1, Table 12-2 -->
      <resource uuid="3a5ca2de-0f66-47e6-844d-6ccdf214b767">
         <title>FedRAMP Applicable Laws and Regulations</title>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="fedramp-citations"/>
         <rlink href="https://www.fedramp.gov/assets/resources/templates/SSP-A12-FedRAMP-Laws-and-Regulations-Template.xlsx"/>
      </resource>
      <resource uuid="12da89ef-51dd-4404-948d-e9f0e25b961e">
         <title>FedRAMP Master Acronym and Glossary</title>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="fedramp-acronyms"/>
         <rlink href="https://www.fedramp.gov/assets/resources/documents/FedRAMP_Master_Acronym_and_Glossary.pdf"/>
      </resource>
      <resource uuid="d45612a9-cf25-4ef6-b2dd-69e38ba2967a">
         <title>[SAMPLE]Name or Title of Document</title>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="law"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Publication Date"/>
         <document-id scheme="https://www.doi.org/">Identification Number</document-id>
         <rlink href="https://domain.example/path/to/document.pdf"/>
      </resource>
      <resource uuid="a8a0cc81-800f-479f-93d3-8b8743d9b98d">
         <title>[SAMPLE]Privacy-Related Law Citation</title>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="law"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="pii"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Publication Date"/>
         <document-id scheme="https://www.doi.org/">Identification Number</document-id>
         <rlink href="https://domain.example/path/to/document.pdf"/>
      </resource>
      <resource uuid="545e75c3-537f-48fe-9630-95337916d982">
         <title>[SAMPLE]Regulation Citation</title>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="regulation"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Publication Date"/>
         <document-id scheme="https://www.doi.org/">Identification Number</document-id>
         <rlink href="https://domain.example/path/to/document.pdf"/>
      </resource>
      <resource uuid="9d6cf2b4-8e88-4040-a33c-7bc206553a1a">
         <title>[SAMPLE]Interconnection Security Agreement Title</title>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
      </resource>
      <resource uuid="31a46c4f-2959-4287-bc1c-67297d7da60b">
         <description>CSP Logo</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="prepared-for-logo"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="csp-logo"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./logo.png" media-type="image/png"/>
         <base64>00000000</base64>
      </resource>
      <resource uuid="c5866ad8-8ed7-49b4-844a-0276fa9f8f51">
         <description>Preparer Logo</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="prepared-by-logo"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./party-1-logo.png" media-type="image/png"/>
         <base64>00000000</base64>
      </resource>
      <resource uuid="0846b6ef-cfa4-4bb3-8280-717f7e7b04d4">
         <description>FedRAMP Logo</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="fedramp-logo"/>
         <rlink href="https://github.com/GSA/fedramp-automation/raw/master/assets/FedRAMP_LOGO.png"/>
      </resource>
      <resource uuid="2c1747d6-874a-49a2-8488-2fd9735416bf">
         <description>3PAO Logo</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="3pao-logo"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./logo.png" media-type="image/png"/>
         <base64>00000000</base64>
      </resource>
      <resource uuid="d2eb3c18-6754-4e3a-a933-03d289e3fad5">
         <description>The primary authorization boundary diagram.</description>
         <!-- Use rlink and/or base64 -->
         <rlink href="./diagrams/boundary.png"/>
         <base64>00000000</base64>
         <remarks>
            <p>Section 9.2, Figure 9-1 Authorization Boundary Diagram (graphic)</p>
            <p>This should be referenced in the
               system-characteristics/authorization-boundary/diagram/link/@href flag using a value
               of "#d2eb3c18-6754-4e3a-a933-03d289e3fad5"</p>
         </remarks>
      </resource>
      <resource uuid="61081e81-850b-43c1-bf43-1ecbddcb9e7f">
         <description>The primary network diagram.</description>
         <!-- Use rlink and/or base64 -->
         <rlink href="./diagrams/network.png"/>
         <base64>00000000</base64>
         <remarks>
            <p>Section 9.4, Figure 9-2 Network Diagram (graphic)</p>
            <p>This should be referenced in the
               system-characteristics/network-architecture/diagram/link/@href flag using a value
               of "#61081e81-850b-43c1-bf43-1ecbddcb9e7f"</p>
         </remarks>
      </resource>
      <resource uuid="ac5d7535-f3b8-45d3-bf3b-735c82c64547">
         <description>The primary data flow diagram.</description>
         <!-- Use rlink and/or base64 -->
         <rlink href="./diagrams/dataflow.png"/>
         <base64>00000000</base64>
         <remarks>
            <p>Section 10, Figure 10-1 Data Flow Diagram (graphic)</p>
            <p>This should be referenced in the
               system-characteristics/data-flow/diagram/link/@href flag using a value
               of "#ac5d7535-f3b8-45d3-bf3b-735c82c64547"</p>
         </remarks>
      </resource>
      <resource uuid="090ab379-2089-4830-b9fd-26d0729e22e9">
         <title>Policy Title</title>
         <description>Policy document</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="policy"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./sample_policy.pdf"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Policy Attachment</p>
         </remarks>
      </resource>
      <resource uuid="ab300133-d749-4abb-b858-1cd6ffd8af9e">
         <title>Policy Title</title>
         <description>Policy document</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="policy"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./sample_policy.pdf"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Policy Attachment</p>
         </remarks>
      </resource>
      <resource uuid="1002a58e-9e11-4aa6-9ab4-2bde52995952">
         <title>Procedure Title</title>
         <description>Procedure document</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="procedure"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./sample_procedure.pdf"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Procedure Attachment</p>
         </remarks>
      </resource>
      <resource uuid="4bb1e2e5-261c-4b5c-b22c-e1627c2e8be6">
         <title>Procedure Title</title>
         <description>Procedure document</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="procedure"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./sample_procedure.pdf"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Procedure Attachment</p>
         </remarks>
      </resource>
      <resource uuid="90a128ac-c850-48f6-8fff-a55692f80b41">
         <title>User's Guide</title>
         <description>User's Guide</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="user-guide"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="guide"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./sample_guide.pdf"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: User's Guide Attachment</p>
         </remarks>
      </resource>
      <resource uuid="fab59751-b855-40cb-93c1-492562e20e18">
         <title>Privacy Impact Assessment</title>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="privacy-impact-assessment"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./pia.docx"/>
         <base64 filename="pia.docx">00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Privacy Impact Assessment</p>
         </remarks>
      </resource>
      <resource uuid="489112e1-57f2-4c29-8dd0-95b1442fbf3b">
         <title>Document Title</title>
         <description>Rules of Behavior</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="rules-of-behavior"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="rob"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="https://sample"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Rules of Behavior (ROB)</p>
         </remarks>
      </resource>
      <resource uuid="c7860916-f2f4-43aa-b578-d48cf8e6d381">
         <title>Document Title</title>
         <description>Contingency Plan (CP)</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="plan"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="https://sample"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Contingency Plan (CP) Attachment</p>
         </remarks>
      </resource>
      <resource uuid="ab56cf27-0dae-40d6-89b7-d750137309af">
         <title>Document Title</title>
         <description>Configuration Management (CM) Plan</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="plan"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="https://sample"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Configuration Management (CM) Plan Attachment</p>
         </remarks>
      </resource>
      <resource uuid="3f771ab5-8016-4571-98d1-f0fb962e15e2">
         <title>Document Title</title>
         <description>Incident Response (IR) Plan</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="plan"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="https://sample"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Incident Response (IR) Plan Attachment</p>
         </remarks>
      </resource>
      <resource uuid="49fb4631-1da2-41ca-b0b3-e1b1006d4025">
         <title>Separation of Duties Matrix</title>
         <description>Separation of Duties Matrix</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="https://sample"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Separation of Duties Matrix Attachment</p>
         </remarks>
      </resource>
      <resource uuid="9f1aae37-7359-411f-86c1-768aaab85e63">
         <title>FedRAMP High Baseline</title>
         <rlink media-type="application/xml"
                href="https://raw.githubusercontent.com/usnistgov/OSCAL/v1.0.0-milestone3/content/fedramp.gov/xml/FedRAMP_HIGH-baseline_profile.xml"/>
         <remarks>
            <p>Pointer to High baseline content in OSCAL.</p>
         </remarks>
      </resource>
      <resource uuid="890170c3-d4fa-4d25-ab96-8e4bf7cc237c">
         <title>FedRAMP Moderate Baseline</title>
         <rlink media-type="application/xml"
                href="https://raw.githubusercontent.com/usnistgov/OSCAL/v1.0.0-milestone3/content/fedramp.gov/xml/FedRAMP_MODERATE-baseline_profile.xml"/>
         <remarks>
            <p>Pointer to Moderate baseline content in OSCAL.</p>
         </remarks>
      </resource>
      <resource uuid="2acaf846-5496-4d36-8565-9a15b48aef2c">
         <title>FedRAMP Low Baseline</title>
         <rlink media-type="application/xml"
                href="https://raw.githubusercontent.com/usnistgov/OSCAL/v1.0.0-milestone3/content/fedramp.gov/xml/FedRAMP_LOW-baseline_profile.xml"/>
         <remarks>
            <p>Pointer to Low baseline content in OSCAL.</p>
         </remarks>
      </resource>
   </back-matter>
</system-security-plan>

gistfile2.txt

<?xml version="1.0" encoding="UTF-8"?>
<?xml-model href="https://raw.githubusercontent.com/usnistgov/OSCAL/release-1.0/xml/schema/oscal_complete_schema.xsd" schematypens="http://www.w3.org/2001/XMLSchema" title="OSCAL complete schema"?>
<!-- Modified by the OSCAL 1.0.0 RC2 to OSCAL 1.0.0 conversion XSLT on 2021-06-15T18:40:52.631-04:00 -->
<system-security-plan xmlns="http://csrc.nist.gov/ns/oscal/1.0"
                      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                      xsi:schemaLocation="https://raw.githubusercontent.com/usnistgov/OSCAL/master/xml/schema/oscal_ssp_schema.xsd"
                      uuid="4a330034-5024-4718-953e-9a7a36d28967">
   <metadata>
      <title>FedRAMP System Security Plan (SSP)</title>
      <published>2020-07-01T00:00:00.00-04:00</published>
      <last-modified>2021-06-15T18:40:52.631-04:00</last-modified>
      <version>0.0</version>
      <oscal-version>1.0.0</oscal-version>
      <revisions>
         <revision>
            <published>2019-06-01T00:00:00.00-04:00</published>
            <version>1.0</version>
            <oscal-version>1.0.0</oscal-version>
            <prop ns="https://fedramp.gov/ns/oscal"
                  name="party-uuid"
                  value="6b286b5d-8f07-4fa7-8847-1dd0d88f73fb"/>
            <remarks>
               <p>Initial publication.</p>
            </remarks>
         </revision>
         <revision>
            <published>2020-06-01T00:00:00.00-04:00</published>
            <version>2.0</version>
            <oscal-version>1.0.0</oscal-version>
            <prop ns="https://fedramp.gov/ns/oscal" name="party-id" value="csp"/>
            <remarks>
               <p>Updated for annual assessment.</p>
            </remarks>
         </revision>
         <!-- Additional revision assemblies as needed. -->
      </revisions>
      <prop name="marking" value="Controlled Unclassified Information"/>
      <role id="prepared-by">
         <title>Prepared By</title>
         <description>The organization that prepared this SSP. If developed in-house, this is the CSP itself.</description>
      </role>
      <role id="prepared-for">
         <title>Prepared For</title>
         <description>The organization for which this SSP was prepared. Typically the CSP.</description>
      </role>
      <role id="content-approver">
         <title>System Security Plan Approval</title>
         <description>The individual or individuals accountable for the accuracy of this SSP.</description>
      </role>
      <role id="cloud-service-provider">
         <title>Cloud Service Provider</title>
         <short-name>CSP</short-name>
      </role>
      <role id="system-owner">
         <title>Information System Owner</title>
         <description>The individual within the CSP who is ultimately accountable for everything related to this system.</description>
      </role>
      <role id="authorizing-official">
         <title>Authorizing Official</title>
         <description>The individual or individuals who must grant this system an authorization to operate.</description>
      </role>
      <role id="authorizing-official-poc">
         <title>Authorizing Official's Point of Contact</title>
         <description>The individual representing the authorizing official.</description>
      </role>
      <role id="system-poc-management">
         <title>Information System Management Point of Contact (POC)</title>
         <description>The highest level manager who responsible for system operation on behalf of the System Owner.</description>
      </role>
      <role id="system-poc-technical">
         <title>Information System Technical Point of Contact</title>
         <description>The individual or individuals leading the technical operation of the system.</description>
      </role>
      <role id="system-poc-other">
         <title>General Point of Contact (POC)</title>
         <description>A general point of contact for the system, designated by the system owner.</description>
      </role>
      <role id="information-system-security-officer">
         <title>System Information System Security Officer (or Equivalent)</title>
         <description>The individual accountable for the security posture of the system on behalf of the system owner.</description>
      </role>
      <role id="privacy-poc">
         <title>Privacy Official's Point of Contact</title>
         <description>The individual responsible for the privacy threshold analysis and if necessary the privacy impact assessment.</description>
      </role>
      <role id="asset-owner">
         <title>Owner of an inventory item within the system.</title>
      </role>
      <role id="asset-administrator">
         <title>Administrative responsibility an inventory item within the system.</title>
      </role>
      <role id="isa-poc-local">
         <title>ICA POC (Local)</title>
         <description>The point of contact for an interconnection on behalf of this system.</description>
         <remarks>
            <p>Remove this role if there are no ICAs.</p>
         </remarks>
      </role>
      <role id="isa-poc-remote">
         <title>ICA POC (Remote)</title>
         <description>The point of contact for an interconnection on behalf of this external system to which this system connects.</description>
         <remarks>
            <p>Remove this role if there are no ICAs.</p>
         </remarks>
      </role>
      <role id="isa-authorizing-official-local">
         <title>ICA Signatory (Local)</title>
         <description>Responsible for signing an interconnection security agreement on behalf of this system.</description>
         <remarks>
            <p>Remove this role if there are no ICAs.</p>
         </remarks>
      </role>
      <role id="isa-authorizing-official-remote">
         <title>ICA Signatory (Remote)</title>
         <description>Responsible for signing an interconnection security agreement on behalf of the external system to which this system connects.</description>
         <remarks>
            <p>Remove this role if there are no ICAs.</p>
         </remarks>
      </role>
      <role id="consultant">
         <title>Consultant</title>
         <description>Any consultants involved with developing or maintaining this content.</description>
      </role>
      <role id="admin-unix">
         <title>[SAMPLE]Unix Administrator</title>
         <description>This is a sample role.</description>
      </role>
      <role id="admin-client">
         <title>[SAMPLE]Client Administrator</title>
         <description>This is a sample role.</description>
      </role>
      <role id="program-director">
         <title>[SAMPLE]Program Director</title>
         <description>This is a sample role.</description>
      </role>
      <role id="fedramp-pmo">
         <title>Federal Risk and Authorization Management Program (FedRAMP) Program Management Office (PMO)</title>
         <short-name>FedRAMP PMO</short-name>
      </role>
      <role id="fedramp-jab">
         <title>Federal Risk and Authorization Management Program (FedRAMP) Joint Authorization Board (JAB)</title>
         <short-name>FedRAMP JAB</short-name>
      </role>
      <location uuid="27b78960-59ef-4619-82b0-ae20b9c709ac">
         <title>CSP HQ</title>
         <address type="work">
            <addr-line>Suite 0000</addr-line>
            <addr-line>1234 Some Street</addr-line>
            <city>Haven</city>
            <state>ME</state>
            <postal-code>00000</postal-code>
         </address>
         <remarks>
            <p>There must be one location identifying the CSP's primary business address, such as the CSP's HQ, or the address of the system owner's primary business location.</p>
         </remarks>
      </location>
      <location uuid="16adcc8d-65d8-4583-80d3-9cf007744fec">
         <title>Primary Data Center</title>
         <address>
            <addr-line>2222 Main Street</addr-line>
            <city>Anywhere</city>
            <state>--</state>
            <postal-code>00000-0000</postal-code>
         </address>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="data-center"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="primary-data-center"/>
         <remarks>
            <p>There must be one location for each data center.</p>
            <p>There must be at least two data centers.</p>
            <p>For a data center, briefly summarize the components at this location.</p>
            <p>All data centers must have a conformity tag of "data-center".</p>
            <p>A primary data center must also have a conformity tag of "primary-data-center".</p>
         </remarks>
      </location>
      <location uuid="ad321514-7b9f-4374-8409-efb18eea6e5d">
         <title>Secondary Data Center</title>
         <address>
            <addr-line>3333 Small Road</addr-line>
            <city>Anywhere</city>
            <state>--</state>
            <postal-code>00000-0000</postal-code>
         </address>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="data-center"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="alternate-data-center"/>
         <remarks>
            <p>There must be one location for each data center.</p>
            <p>There must be at least two data centers.</p>
            <p>For a data center, briefly summarize the components at this location.</p>
            <p>All data centers must have a conformity tag of "data-center"</p>
            <p>An alternate or backup data center must also have a conformity tag of "alternate-data-center".</p>
         </remarks>
      </location>
      <party uuid="6b286b5d-8f07-4fa7-8847-1dd0d88f73fb" type="organization">
         <name>Cloud Service Provider (CSP) Name</name>
         <short-name>CSP Acronym/Short Name</short-name>
         <location-uuid>27b78960-59ef-4619-82b0-ae20b9c709ac</location-uuid>
         <remarks>
            <p>Replace sample CSP information.</p>
         </remarks>
      </party>
      <party uuid="77e0e2c8-2560-4fe9-ac78-c3ff4ffc9f6d" type="organization">
         <name>Federal Risk and Authorization Management Program: Program Management Office</name>
         <short-name>FedRAMP PMO</short-name>
         <link href="https://fedramp.gov"/>
         <email-address>info@fedramp.gov</email-address>
         <address type="work">
            <addr-line>1800 F St. NW</addr-line>
            <addr-line/>
            <city>Washington</city>
            <state>DC</state>
            <postal-code/>
            <country>US</country>
         </address>
         <remarks>
            <p>This party entry must be present in a FedRAMP SSP.</p>
            <p>The uuid may be different; however, the uuid must be associated with the "fedramp-pmo" role in the responsible-party assemblies.</p>
         </remarks>
      </party>
      <party uuid="49017ec3-9f51-4dbd-9253-858c2b1295fd" type="organization">
         <name>Federal Risk and Authorization Management Program: Joint Authorization Board</name>
         <short-name>FedRAMP JAB</short-name>
         <remarks>
            <p>This party entry must be present in a FedRAMP SSP.</p>
            <p>The uuid may be different; however, the uuid must be associated with the "fedramp-jab" role in the responsible-party assemblies.</p>
         </remarks>
      </party>
      <party uuid="78992555-4a99-4eaa-868c-f2c249679dd3" type="organization">
         <name>External Organization</name>
         <short-name>External</short-name>
         <remarks>
            <p>Generic placeholder for any external organization.</p>
         </remarks>
      </party>
      <party uuid="f595397b-cbe4-4a87-8c86-9bff91c4e7fd" type="organization">
         <name>Agency Name</name>
         <short-name>A.N.</short-name>
         <remarks>
            <p>Generic placeholder for an authorizing agency.</p>
         </remarks>
      </party>
      <party uuid="8e3d39da-4851-4d2a-adb5-4b5585ded952" type="organization">
         <name>Name of Consulting Org</name>
         <short-name>NOCO</short-name>
         <link href="https://consulting.sample"/>
         <email-address>poc@consulting.sample</email-address>
         <address type="work">
            <addr-line>3333 Corporate Way</addr-line>
            <city>Washington</city>
            <state>DC</state>
            <postal-code/>
            <country>US</country>
         </address>
      </party>
      <party uuid="80361ec4-bfce-4b5c-85c8-313d6ebd220b" type="organization">
         <name>[SAMPLE]Remote System Org Name</name>
      </party>
      <party uuid="09ad840f-aa79-43aa-9f22-25182c2ab11b" type="person">
         <name>[SAMPLE]ICA POC's Name</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>person@ica.org.example</email-address>
         <telephone-number>202-555-1212</telephone-number>
         <member-of-organization>80361ec4-bfce-4b5c-85c8-313d6ebd220b</member-of-organization>
      </party>
      <party uuid="f0bc13a4-3303-47dd-80d3-380e159c8362" type="organization">
         <name>[SAMPLE]Example IaaS Provider</name>
         <short-name>E.I.P.</short-name>
         <remarks>
            <p>Underlying service provider. Leveraged Authorization.</p>
         </remarks>
      </party>
      <party uuid="3360e343-9860-4bda-9dfc-ff427c3dfab6" type="person">
         <name>[SAMPLE]Person Name 1</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0001</telephone-number>
         <address>
            <addr-line>Mailstop A-1</addr-line>
         </address>
         <location-uuid>27b78960-59ef-4619-82b0-ae20b9c709ac</location-uuid>
         <member-of-organization>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</member-of-organization>
      </party>
      <party uuid="36b8d6c0-3b25-42cc-b529-cf4066145cdd" type="person">
         <name>[SAMPLE]Person Name 2</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0002</telephone-number>
         <address type="work">
            <addr-line>Address Line</addr-line>
            <city>City</city>
            <state>ST</state>
            <postal-code>00000</postal-code>
            <country>US</country>
         </address>
         <member-of-organization>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</member-of-organization>
      </party>
      <party uuid="0cec09d9-20c6-470b-9ffc-85763375880b" type="person">
         <name>[SAMPLE]Person Name 3</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0003</telephone-number>
         <address type="work">
            <addr-line>Address Line</addr-line>
            <city>City</city>
            <state>ST</state>
            <postal-code>00000</postal-code>
            <country>US</country>
         </address>
         <member-of-organization>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</member-of-organization>
      </party>
      <party uuid="f75e21f6-43d8-46ab-890d-7f2eebc5a830" type="person">
         <name>[SAMPLE]Person Name 4</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0004</telephone-number>
         <address type="work">
            <addr-line>Address Line</addr-line>
            <city>City</city>
            <state>ST</state>
            <postal-code>00000</postal-code>
            <country>US</country>
         </address>
         <member-of-organization>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</member-of-organization>
      </party>
      <party uuid="132953a9-640c-46f7-9de9-3fa15ec99361" type="person">
         <name>[SAMPLE]Person Name 5</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0005</telephone-number>
         <address type="work">
            <addr-line>Address Line</addr-line>
            <city>City</city>
            <state>ST</state>
            <postal-code>00000</postal-code>
            <country>US</country>
         </address>
         <member-of-organization>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</member-of-organization>
      </party>
      <party uuid="4fded5fd-7a65-47ea-bd76-df57c46e27d1" type="person">
         <name>[SAMPLE]Person Name 6</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0006</telephone-number>
         <address type="work">
            <addr-line>Address Line</addr-line>
            <city>City</city>
            <state>ST</state>
            <postal-code>00000</postal-code>
            <country>US</country>
         </address>
         <member-of-organization>78992555-4a99-4eaa-868c-f2c249679dd3</member-of-organization>
      </party>
      <party uuid="db234cb7-1776-425c-9ac4-b067c1723011" type="person">
         <name>[SAMPLE]Person Name 7</name>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="title"
               value="Individual's Title"/>
         <email-address>name@org.domain</email-address>
         <telephone-number>202-000-0007</telephone-number>
         <address type="work">
            <addr-line>Address Line</addr-line>
            <city>City</city>
            <state>ST</state>
            <postal-code>00000</postal-code>
            <country>US</country>
         </address>
         <member-of-organization>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</member-of-organization>
      </party>
      <party uuid="b306f5af-b93a-4a7f-a2b2-37a44fc92a79" type="organization">
         <name>[SAMPLE] IT Department</name>
      </party>
      <party uuid="59cdc953-5902-4fa4-a878-f3163854624c" type="organization">
         <name>[SAMPLE]Security Team</name>
      </party>
      <responsible-party role-id="cloud-service-provider">
         <party-uuid>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="prepared-by">
         <party-uuid>3360e343-9860-4bda-9dfc-ff427c3dfab6</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="prepared-for">
         <!-- Exacty one -->
         <party-uuid>6b286b5d-8f07-4fa7-8847-1dd0d88f73fb</party-uuid>
      </responsible-party>
      <responsible-party role-id="content-approver">
         <party-uuid>3360e343-9860-4bda-9dfc-ff427c3dfab6</party-uuid>
         <party-uuid>36b8d6c0-3b25-42cc-b529-cf4066145cdd</party-uuid>
         <remarks>
            <p>One or more</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="system-owner">
         <party-uuid>3360e343-9860-4bda-9dfc-ff427c3dfab6</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="authorizing-official">
         <party-uuid>49017ec3-9f51-4dbd-9253-858c2b1295fd</party-uuid>
         <party-uuid>4fded5fd-7a65-47ea-bd76-df57c46e27d1</party-uuid>
         <remarks>
            <p>One or more</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="system-poc-management">
         <party-uuid>0cec09d9-20c6-470b-9ffc-85763375880b</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="system-poc-technical">
         <party-uuid>f75e21f6-43d8-46ab-890d-7f2eebc5a830</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="information-system-security-officer">
         <party-uuid>132953a9-640c-46f7-9de9-3fa15ec99361</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="authorizing-official-poc">
         <party-uuid>4fded5fd-7a65-47ea-bd76-df57c46e27d1</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="privacy-poc">
         <party-uuid>db234cb7-1776-425c-9ac4-b067c1723011</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="fedramp-pmo">
         <party-uuid>77e0e2c8-2560-4fe9-ac78-c3ff4ffc9f6d</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <responsible-party role-id="fedramp-jab">
         <party-uuid>49017ec3-9f51-4dbd-9253-858c2b1295fd</party-uuid>
         <remarks>
            <p>Exactly one</p>
         </remarks>
      </responsible-party>
      <remarks>
         <p>This OSCAL-based FedRAMP SSP Template can be used for the FedRAMP Low, Moderate, and
            High baselines.</p>
         <p>Guidance for OSCAL-based FedRAMP Tailored content has not yet been developed.</p>
      </remarks>
   </metadata>
   <!-- ====================================================
      Link this SSP to the appropriate FedRAMP baseline using ONE of the import statements below.
      NOTE: This points to a resource at the end of this file with links to both the XML and JSON
            versions of the baseline. Tools must select the appropriate link 
      FedRAMP HIGH Baseline: 
      <import-profile href="#9f1aae37-7359-411f-86c1-768aaab85e63"/>
      FedRAMP MODERATE Baseline:
      <import-profile href="#890170c3-d4fa-4d25-ab96-8e4bf7cc237c"/>
      FedRAMP LOW Baseline: 
      <import-profile href="#2acaf846-5496-4d36-8565-9a15b48aef2c"/>
   ==================================================== -->
   <import-profile href="#890170c3-d4fa-4d25-ab96-8e4bf7cc237c"/>
   <system-characteristics>
      <!-- Table 1-1 Information System Name and Title -->
      <system-id identifier-type="https://fedramp.gov">F00000000</system-id>
      <system-name>System's Full Name</system-name>
      <system-name-short>System's Short Name or Acronym</system-name-short>
      <!-- Section 9.1 (Old SSP Format Section 8.1) -->
      <description>
         <p>Describe the purpose and functions of this system here.</p>
      </description>
      <!-- FedRAMP Authorizatoin Type: fedramp-jab, fedramp-agency, or fedramp-li-saas -->
      <prop ns="https://fedramp.gov/ns/oscal"
            name="authorization-type"
            value="fedramp-agency"/>
      <!-- Section 2.3 Digital Identity Determination and Attachment 3, Digital Identity Worksheet -->
      <!-- 1 = low, 2= moderate, 3 = high  -->
      <prop ns="https://fedramp.gov/ns/oscal"
            name="security-eauth-level"
            class="security-eauth"
            value="2"/>
      <!-- Attachment 3, Digital Identity Worksheet: Additional Detail - Not Required -->
      <prop name="identity-assurance-level" value="2"/>
      <prop name="authenticator-assurance-level" value="2"/>
      <prop name="federation-assurance-level" value="2"/>
      <!-- Table 8-1 Service Layers Represented in this SSP -->
      <prop name="cloud-service-model" value="saas">
         <remarks>
            <p>Remarks are required if service model is "other". Optional otherwise.</p>
         </remarks>
      </prop>
      <!-- Table 8-2 Cloud Deployment Model Represented in this SSP -->
      <prop name="cloud-deployment-model" value="government-only-cloud">
         <remarks>
            <p>Remarks are required if deployment model is "hybrid-cloud" or "other". Optional
               otherwise.</p>
         </remarks>
      </prop>
      <!-- Table 2-1 Security Categorization and 2-4 Baseline Security Configuration -->
      <security-sensitivity-level>low</security-sensitivity-level>
      <!-- Table 2-2, Table 15-9, and Attachment 4 -->
      <system-information>
         <!-- Attachment 4, PTA/PIA Designation -->
         <prop name="privacy-sensitive" value="yes"/>
         <!-- Attachment 4, PTA Qualifying Questions -->
         <!--Does the ISA collect, maintain, or share PII in any identifiable form? -->
         <prop ns="https://fedramp.gov/ns/oscal"
               name="pta-1"
               class="pta"
               value="yes"/>
         <!--Does the ISA collect, maintain, or share PII information from or about the public? -->
         <prop ns="https://fedramp.gov/ns/oscal"
               name="pta-2"
               class="pta"
               value="yes"/>
         <!--Has a Privacy Impact Assessment ever been performed for the ISA? -->
         <prop ns="https://fedramp.gov/ns/oscal"
               name="pta-3"
               class="pta"
               value="yes"/>
         <!--Is there a Privacy Act System of Records Notice (SORN) for this ISA system? (If so, please specify the SORN ID.) -->
         <prop ns="https://fedramp.gov/ns/oscal"
               name="pta-4"
               class="pta"
               value="no"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="sorn-id"
               class="pta"
               value="[No SORN ID]"/>
         <information-type uuid="06ecba4f-db96-4491-a3a2-7febfa227435">
            <title>Information Type Name</title>
            <description>
               <p>A description of the information.</p>
            </description>
            <categorization system="https://doi.org/10.6028/NIST.SP.800-60v2r1">
               <information-type-id>C.2.4.1</information-type-id>
            </categorization>
            <confidentiality-impact>
               <base>fips-199-moderate</base>
               <selected>fips-199-moderate</selected>
               <adjustment-justification>
                  <p>Required if the base and selected values do not match.</p>
               </adjustment-justification>
            </confidentiality-impact>
            <integrity-impact>
               <base>fips-199-moderate</base>
               <selected>fips-199-moderate</selected>
               <adjustment-justification>
                  <p>Required if the base and selected values do not match.</p>
               </adjustment-justification>
            </integrity-impact>
            <availability-impact>
               <base>fips-199-moderate</base>
               <selected>fips-199-moderate</selected>
               <adjustment-justification>
                  <p>Required if the base and selected values do not match.</p>
               </adjustment-justification>
            </availability-impact>
         </information-type>
      </system-information>
      <!-- Table 2-3 Security Impact Level -->
      <security-impact-level>
         <security-objective-confidentiality>fips-199-moderate</security-objective-confidentiality>
         <security-objective-integrity>fips-199-moderate</security-objective-integrity>
         <security-objective-availability>fips-199-moderate</security-objective-availability>
      </security-impact-level>
      <!-- Section 2.3 Digital Identity Determination & Table 7-1 System Status -->
      <status state="operational">
         <remarks>
            <p>Remarks are required if status/state is "other". Optional otherwise.</p>
         </remarks>
      </status>
      <!-- Table 8-3 Leveraged Authorizations (Typically 0 or 1) -->
      <!-- ***** REWORKING LEVERAGED AUTHORIZATIONS MODEL WITH NIST ****** -->
      <!-- Section 9.2, Figure 9-1. Authorization Boundary Diagram -->
      <authorization-boundary>
         <description>
            <p>A holistic, top-level explanation of the FedRAMP authorization boundary.</p>
         </description>
         <diagram uuid="dbf46c27-52a9-49c4-beb6-b6399cd75497">
            <description>
               <p>A diagram-specific explanation.</p>
            </description>
            <link href="#d2eb3c18-6754-4e3a-a933-03d289e3fad5" rel="diagram"/>
            <caption>Authorization Boundary Diagram</caption>
         </diagram>
      </authorization-boundary>
      <!-- Section 9.4, Figure 9-2. Network Diagram -->
      <network-architecture>
         <description>
            <p>A holistic, top-level explanation of the network architecture.</p>
         </description>
         <diagram uuid="e97c3395-433a-48c1-8cc7-dd1e1555941c">
            <description>
               <p>A diagram-specific explanation.</p>
            </description>
            <link href="#61081e81-850b-43c1-bf43-1ecbddcb9e7f" rel="diagram"/>
            <caption>Network Diagram</caption>
         </diagram>
      </network-architecture>
      <!-- Section 10, Figure 10-1. Data Flow Diagram -->
      <data-flow>
         <description>
            <p>A holistic, top-level explanation of the system's data flows.</p>
         </description>
         <diagram uuid="e3b98448-4219-46a5-b229-412423c566f3">
            <description>
               <p>A diagram-specific explanation.</p>
            </description>
            <link href="#ac5d7535-f3b8-45d3-bf3b-735c82c64547" rel="diagram"/>
            <caption>Data Flow Diagram</caption>
         </diagram>
      </data-flow>
   </system-characteristics>
   <system-implementation>
      <prop ns="https://fedramp.gov/ns/oscal" name="users-internal" value="0"/>
      <prop ns="https://fedramp.gov/ns/oscal" name="users-external" value="0"/>
      <prop ns="https://fedramp.gov/ns/oscal"
            name="users-internal-future"
            value="0"/>
      <prop ns="https://fedramp.gov/ns/oscal"
            name="users-external-future"
            value="0"/>
      <leveraged-authorization uuid="5a9c98ab-8e5e-433d-a7bd-515c07cd1497">
         <title>Name of Underlying System</title>
         <party-uuid>f0bc13a4-3303-47dd-80d3-380e159c8362</party-uuid>
         <date-authorized>2015-01-01</date-authorized>
         <remarks>
            <p>The leveraged-authorizaton assembly is supposed to have a required uuid flag instead of an optional id flag. This will be fixed in the syntax shortly.</p>
            <p>Use one leveraged-authorization assembly for each underlying system. (In the legacy world, these may be general support systems.</p>
         </remarks>
      </leveraged-authorization>
      <user uuid="9cb0fab0-78bd-44ba-bcb8-3e9801cc952f">
         <title>[SAMPLE]Unix System Administrator</title>
         <prop ns="https://fedramp.gov/ns/oscal" name="sensitivity" value="high"/>
         <prop name="privilege-level" value="privileged"/>
         <prop name="type" value="internal"/>
         <role-id>admin-unix</role-id>
         <authorized-privilege>
            <title>Full administrative access (root)</title>
            <function-performed>Add/remove users and hardware</function-performed>
            <function-performed>install and configure software</function-performed>
            <function-performed>OS updates, patches and hotfixes</function-performed>
            <function-performed>perform backups</function-performed>
         </authorized-privilege>
      </user>
      <user uuid="16ec71e7-025c-43e4-9d3f-3acb485fac2e">
         <title>[SAMPLE]Client Administrator</title>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="sensitivity"
               value="moderate"/>
         <prop name="privilege-level" value="non-privileged"/>
         <prop name="type" value="external"/>
         <role-id>external</role-id>
         <authorized-privilege>
            <title>Portal administration</title>
            <function-performed>Add/remove client users</function-performed>
            <function-performed>Create, modify and delete client applications</function-performed>
         </authorized-privilege>
      </user>
      <user uuid="ba7708c1-4041-48ab-9b7b-1ddb5e175fe0">
         <title>[SAMPLE]Program Director</title>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="sensitivity"
               value="limited"/>
         <prop name="privilege-level" value="no-logical-access"/>
         <prop name="type" value="internal"/>
         <role-id>program-director</role-id>
         <authorized-privilege>
            <title>Administrative Access Approver</title>
            <function-performed>Approves access requests for administrative accounts.</function-performed>
         </authorized-privilege>
         <authorized-privilege>
            <title>Access Approver</title>
            <function-performed>Approves access requests for administrative accounts.</function-performed>
         </authorized-privilege>
      </user>
      <component type="this-system" uuid="3d035035-dfca-4240-9787-a7e8561e1c7d">
         <title>This System</title>
         <description>
            <p>The system described by this SSP.</p>
            <p>This text was auto-generated by the OSCAL M3-RC1 data upgrade converter.</p>
         </description>
         <status state="operational"/>
      </component>
      <component uuid="60f92bcf-f353-4236-9803-2a5d417555f4" type="system">
         <title>This System</title>
         <description>
            <p>The entire system as depicted in the system authorization boundary</p>
         </description>
         <status state="operational"/>
      </component>
      <component uuid="e82e6e07-0c62-417e-8a19-3744991b4c65" type="system">
         <title>Name of Leveraged System</title>
         <description>
            <p>If the leveraged system owner provides a UUID for their system (such as in an OSCAL-based CRM), it should be used as the UUID for this component.</p>
         </description>
         <prop name="leveraged-authorization-uuid"
               value="5a9c98ab-8e5e-433d-a7bd-515c07cd1497"/>
         <status state="operational"/>
      </component>
      <component uuid="95beec7e-6f82-4aaa-8211-969cd7c1f1ab" type="validation">
         <title>[SAMPLE]Module Name</title>
         <description>
            <p>[SAMPLE]FIPS 140-2 Validated Module</p>
         </description>
         <prop ns="https://fedramp.gov/ns/oscal" name="cert-no" value="0000"/>
         <link href="https://csrc.nist.gov/projects/cryptographic-module-validation-program/Certificate/0000"/>
         <status state="operational"/>
      </component>
      <component uuid="05ceb8df-52e7-49db-9719-891723f366bd" type="software">
         <title>[SAMPLE]Product Name</title>
         <description>
            <p>FUNCTION: Describe typical component function.</p>
         </description>
         <prop name="asset-type" value="os"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="scan-type"
               value="infrastructure"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="vendor-name"
               value="Vendor Name"/>
         <prop name="model" value="Model Number"/>
         <prop name="version" value="Version Number"/>
         <prop name="patch-level" value="Patch Level"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="validation"
               value="fips-module-1"/>
         <status state="operational"/>
         <responsible-role role-id="admin-unix">
            <party-uuid>3360e343-9860-4bda-9dfc-ff427c3dfab6</party-uuid>
         </responsible-role>
         <remarks>
            <p>COMMENTS: Provide other comments as needed.</p>
         </remarks>
      </component>
      <component uuid="1541015b-6d19-42cb-a991-624cc082ed4d" type="hardware">
         <title>[SAMPLE]Product</title>
         <description>
            <p>FUNCTION: Describe typical component function.</p>
         </description>
         <prop name="asset-type" value="database"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="scan-type"
               value="infrastructure"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="scan-type" value="database"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="vendor-name"
               value="Vendor Name"/>
         <prop name="model" value="Model Number"/>
         <prop name="version" value="Version Number"/>
         <status state="operational"/>
         <responsible-role role-id="asset-administrator">
            <party-uuid>b306f5af-b93a-4a7f-a2b2-37a44fc92a79</party-uuid>
         </responsible-role>
         <responsible-role role-id="asset-owner">
            <party-uuid>36b8d6c0-3b25-42cc-b529-cf4066145cdd</party-uuid>
         </responsible-role>
         <remarks>
            <p>COMMENTS: Provide other comments as needed.</p>
         </remarks>
      </component>
      <component uuid="6617f60b-8bac-422d-9939-94f43ddc0f7a" type="os">
         <title>OS Sample</title>
         <description>
            <p>None</p>
         </description>
         <prop name="asset-type" value="os"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="scan-type"
               value="infrastructure"/>
         <prop name="baseline-configuration-name" value="Baseline Config. Name"/>
         <prop name="allows-authenticated-scan" value="yes"/>
         <status state="operational"/>
      </component>
      <component uuid="120f1404-7c9f-4856-a247-63bd89d9e769" type="software">
         <title>Database Sample</title>
         <description>
            <p>None</p>
         </description>
         <prop name="asset-type" value="database"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="scan-type" value="database"/>
         <prop name="baseline-configuration-name" value="Baseline Config. Name"/>
         <prop name="allows-authenticated-scan" value="yes"/>
         <status state="operational"/>
      </component>
      <component uuid="8f230d84-2f9b-44a3-acdb-019566ab2554" type="software">
         <title>Appliance Sample</title>
         <description>
            <p>None</p>
         </description>
         <prop name="asset-type" value="appliance"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="scan-type" value="web"/>
         <prop name="login-url" value="https://admin.offering.com/login"/>
         <prop name="baseline-configuration-name" value="Baseline Config. Name"/>
         <prop name="allows-authenticated-scan" value="no">
            <remarks>
               <p>Vendor appliance. No admin-level access.</p>
            </remarks>
         </prop>
         <status state="operational"/>
      </component>
      <component uuid="d5841417-de4c-4d84-ab3c-39dd1fd32a96" type="service">
         <title>[SAMPLE]Service Name</title>
         <description>
            <p>Describe the service</p>
         </description>
         <purpose>Describe the reason the service is needed.</purpose>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="used-by"
               value="What uses this service?"/>
         <prop name="protocol" value=""/>
         <status state="operational"/>
         <protocol name="http">
            <port-range start="80" end="80" transport="TCP"/>
         </protocol>
         <protocol name="https">
            <port-range start="443" end="443" transport="TCP"/>
         </protocol>
         <remarks>
            <p>Section 10.2, Table 10-1. Ports, Protocols and Services</p>
            <p>
               <b>SERVICES ARE NOW COMPONENTS WITH type='service'</b>
            </p>
         </remarks>
      </component>
      <component uuid="2812ef51-61e7-4505-afbb-da5a073a2a5b" type="interconnection">
         <title>[EXAMPLE]Authorized Connection Information System Name</title>
         <description>
            <p>Briefly describe the interconnection.</p>
         </description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="service-processor"
               value="[SAMPLE]Telco Name"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="ipv4-address"
               class="local"
               value="10.1.1.1"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="ipv4-address"
               class="remote"
               value="10.2.2.2"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="direction"
               value="incoming-outgoing"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="information"
               value="Describe the information being transmitted."/>
         <prop ns="https://fedramp.gov/ns/oscal" name="port" value="80"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="circuit" value="1"/>
         <prop name="connection-security"
               ns="https://fedramp.gov/ns/oscal"
               value="ipsec">
            <remarks>
               <p>If "other", remarks are required. Optional otherwise.</p>
            </remarks>
         </prop>
         <link href="#9d6cf2b4-8e88-4040-a33c-7bc206553a1a" rel="agreement"/>
         <status state="operational"/>
         <responsible-role role-id="isa-poc-remote">
            <party-uuid>09ad840f-aa79-43aa-9f22-25182c2ab11b</party-uuid>
         </responsible-role>
         <responsible-role role-id="isa-poc-local">
            <party-uuid>09ad840f-aa79-43aa-9f22-25182c2ab11b</party-uuid>
         </responsible-role>
         <responsible-role role-id="isa-authorizing-official-remote">
            <party-uuid>09ad840f-aa79-43aa-9f22-25182c2ab11b</party-uuid>
         </responsible-role>
         <responsible-role role-id="isa-authorizing-official-local">
            <party-uuid>09ad840f-aa79-43aa-9f22-25182c2ab11b</party-uuid>
         </responsible-role>
         <remarks>
            <p>Optional notes about this interconnection</p>
         </remarks>
      </component>
      <inventory-item uuid="98e37f90-fbb5-4177-badb-9b55229cc183">
         <description>
            <p>Flat-File Example (No implemented-component).</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.1.1.1"/>
         <prop name="ipv6-address" value="0000:0000:0000:0000"/>
         <prop name="virtual" value="no"/>
         <prop name="public" value="no"/>
         <prop name="fqdn" value="dns.name"/>
         <prop name="uri" value="uniform.resource.identifier"/>
         <prop name="netbios-name" value="netbios-name"/>
         <prop name="mac-address" value="00:00:00:00:00:00"/>
         <prop name="software-name" value="software-name"/>
         <prop name="version" value="V 0.0.0"/>
         <prop name="asset-type" value="os"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="vendor-name"
               value="Vendor Name"/>
         <prop name="model" value="Model Number"/>
         <prop name="patch-level" value="Patch-Level"/>
         <prop name="serial-number" value="Serial #"/>
         <prop name="asset-tag" value="Asset Tag"/>
         <prop name="vlan-id" value="VLAN Identifier"/>
         <prop name="network-id" value="Network Identifier"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="scan-type"
               value="infrastructure"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="scan-type" value="database"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="validation"
               value="component-id"/>
         <prop name="allows-authenticated-scan" value="no">
            <remarks>
               <p>If no, explain why. If yes, omit remarks field.</p>
            </remarks>
         </prop>
         <prop name="baseline-configuration-name" value="Baseline Config. Name"/>
         <prop name="physical-location" value="Physical location of Asset"/>
         <prop name="is-scanned" value="yes">
            <remarks>
               <p>If no, explain why. If yes, omit remarks field.</p>
            </remarks>
         </prop>
         <prop name="function" value="Required brief, text-based description.">
            <remarks>
               <p>Optional, longer, formatted description.</p>
            </remarks>
         </prop>
         <responsible-party role-id="asset-owner">
            <party-uuid>db234cb7-1776-425c-9ac4-b067c1723011</party-uuid>
         </responsible-party>
         <responsible-party role-id="asset-administrator">
            <party-uuid>b306f5af-b93a-4a7f-a2b2-37a44fc92a79</party-uuid>
         </responsible-party>
         <remarks>
            <p>COMMENTS: Additional information about this item.</p>
         </remarks>
      </inventory-item>
      <inventory-item uuid="c916d3c5-229e-4786-bf3f-4d71baa0e7a5">
         <description>
            <p>Component Inventory Example</p>
         </description>
         <prop name="asset-id" value="unique-asset-ID"/>
         <prop name="ipv4-address" value="10.2.2.2"/>
         <prop name="ipv6-address" value="0000:0000:0000:0000"/>
         <prop name="mac-address" value="00:00:00:00:00:00"/>
         <prop name="virtual" value="no"/>
         <prop name="public" value="no"/>
         <prop name="fqdn" value="dns.name"/>
         <prop name="uri" value="uniform.resource.locator"/>
         <prop name="netbios-name" value="netbios-name"/>
         <prop name="patch-level" value="Patch-Level"/>
         <prop name="baseline-configuration-name" value="Baseline Configuration Name"/>
         <prop name="physical-location" value="Physical location of Asset"/>
         <prop name="scan-authenticated"
               ns="https://fedramp.gov/ns/oscal"
               value="no">
            <remarks>
               <p>If no, explain why. If yes, omit remark.</p>
            </remarks>
         </prop>
         <prop name="scan-latest" ns="https://fedramp.gov/ns/oscal" value="yes">
            <remarks>
               <p>If no, explain why. If yes, omit remark.</p>
            </remarks>
         </prop>
         <responsible-party role-id="asset-owner">
            <party-uuid>3360e343-9860-4bda-9dfc-ff427c3dfab6</party-uuid>
         </responsible-party>
         <responsible-party role-id="asset-administrator">
            <party-uuid>b306f5af-b93a-4a7f-a2b2-37a44fc92a79</party-uuid>
         </responsible-party>
         <implemented-component component-uuid="05ceb8df-52e7-49db-9719-891723f366bd"/>
         <remarks>
            <p>COMMENTS: If needed, provide additional information about this inventory item.</p>
         </remarks>
      </inventory-item>
      <inventory-item uuid="37c00d5a-ccf2-4112-a0ee-8460be8cff40">
         <description>
            <p>None.</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.3.3.3"/>
         <prop name="is-scanned" value="yes"/>
         <implemented-component component-uuid="1541015b-6d19-42cb-a991-624cc082ed4d"/>
      </inventory-item>
      <inventory-item uuid="fb7a84fb-7e30-4f5b-9997-2ecd4d270bdd">
         <description>
            <p>None.</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.4.4.4"/>
         <prop name="is-scanned" value="yes"/>
         <implemented-component component-uuid="05ceb8df-52e7-49db-9719-891723f366bd"/>
      </inventory-item>
      <inventory-item uuid="779d4e89-bba6-432c-b50d-d699fe534129">
         <description>
            <p>None.</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.5.5.5"/>
         <prop name="is-scanned" value="yes"/>
         <implemented-component component-uuid="8f230d84-2f9b-44a3-acdb-019566ab2554"/>
      </inventory-item>
      <inventory-item uuid="20b207d5-5e77-4501-b02d-5d2a6e88db85">
         <description>
            <p>None.</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.6.6.6"/>
         <prop name="is-scanned" value="no">
            <remarks>
               <p>Asset wasn't running at time of scan.</p>
            </remarks>
         </prop>
         <implemented-component component-uuid="05ceb8df-52e7-49db-9719-891723f366bd"/>
      </inventory-item>
      <inventory-item uuid="79b4f0d1-91ab-49e8-af28-045c12aa9272">
         <description>
            <p>None.</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.7.7.7"/>
         <prop name="is-scanned" value="yes"/>
         <implemented-component component-uuid="1541015b-6d19-42cb-a991-624cc082ed4d"/>
      </inventory-item>
      <inventory-item uuid="b31b360d-b58b-4c7c-b344-68e17238d858">
         <description>
            <p>None.</p>
         </description>
         <prop name="asset-id" value="unique-asset-id"/>
         <prop name="ipv4-address" value="10.8.8.8"/>
         <prop name="is-scanned" value="no">
            <remarks>
               <p>Asset wasn't running at time of scan.</p>
            </remarks>
         </prop>
         <implemented-component component-uuid="05ceb8df-52e7-49db-9719-891723f366bd"/>
      </inventory-item>
      <inventory-item uuid="55b55b3d-3bd9-409a-bc87-3b9a2074bacd">
         <description>
            <p>IPv4 Production Subnet.</p>
         </description>
         <prop name="asset-id" value="10.10.10.0"/>
         <prop name="ipv4-subnet" value="10.10.10.0/24"/>
         <prop name="is-scanned" value="yes"/>
      </inventory-item>
      <inventory-item uuid="c0dbefa1-c8e8-4ca8-bd73-67cb7b1fa3f6">
         <description>
            <p>IPv4 Management Subnet.</p>
         </description>
         <prop name="asset-id" value="10.10.20.0"/>
         <prop name="ipv4-subnet" value="10.10.20.0/24"/>
         <prop name="is-scanned" value="yes"/>
      </inventory-item>
   </system-implementation>
   <!-- Section 13 -->
   <control-implementation>
      <description>
         <p>FedRAMP SSP Template Section 13</p>
         <p>This description field is required by OSCAL. FedRAMP does not require any specific
            information here.</p>
      </description>
      <implemented-requirement control-id="ac-1" uuid="eee8697a-bc39-45aa-accc-d3e534932efb">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <set-parameter param-id="ac-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ac-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ac-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="ac-1_stmt.a" uuid="fb4d039a-dc4f-46f5-9c1f-f6343eaf69bc">
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="3f5612a4-cd1d-4c47-8cae-75d2eaa332cd">
               <description>
                  <p>Describe how Part a is satisfied within the system.</p>
               </description>
            </by-component>
            <remarks>
               <p>The specified component is the system itself.</p>
               <p>Any control implementation response that can not be associated with another component is associated with the component representing the system.</p>
            </remarks>
         </statement>
         <statement statement-id="ac-1_stmt.a.1"
                    uuid="0afdccce-b5ed-4127-ae19-cfbdd17d775e">
            <link href="#090ab379-2089-4830-b9fd-26d0729e22e9" rel="policy"/>
            <remarks>
               <p>This identifies a policy (attached in resources) that satisfies this control.</p>
            </remarks>
         </statement>
         <statement statement-id="ac-1_stmt.a.2"
                    uuid="ffaf5e02-3055-40df-bbeb-3b94e834a43f">
            <link href="#att-process-1" rel="process"/>
            <remarks>
               <p>This identifies a process (attached in resources) that satisfies this control.</p>
            </remarks>
         </statement>
         <statement statement-id="ac-1_stmt.b.1"
                    uuid="b46f97ec-55c1-4249-a9b9-3a228f1e3791">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="26afd0af-464a-4a33-8a83-f942ec5ef182">
               <description>
                  <p>Describe how Part b-1 is satisfied.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ac-1_stmt.b.2"
                    uuid="59c67969-3d5c-45f1-8e3e-1e642249633f">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="37e6602e-4c94-486f-ad10-64ac19dfa099">
               <description>
                  <p>Describe how Part b-2 is satisfied.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ac-2" uuid="7a36cf53-156d-4d1f-9a8b-433f61cc57b7">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="Completion Date"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="partial">
            <remarks>
               <p>Describe the portion of the control that is not satisfied.</p>
            </remarks>
         </prop>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="not-applicable">
            <remarks>
               <p>Describe the justification for marking this control Not Applicable.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="customer-configured">
            <remarks>
               <p>Describe any customer-configured requirements for satisfying this control.</p>
            </remarks>
         </prop>
         <responsible-role role-id="admin-unix"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="ac-2_prm_1">
            <value>[SAMPLE]privileged, non-privileged</value>
         </set-parameter>
         <set-parameter param-id="ac-2_prm_2">
            <value>[SAMPLE]all</value>
         </set-parameter>
         <set-parameter param-id="ac-2_prm_3">
            <value>[SAMPLE]The Access Control Procedure</value>
         </set-parameter>
         <set-parameter param-id="ac-2_prm_4">
            <value>[SAMPLE]annually</value>
         </set-parameter>
         <statement statement-id="ac-2_stmt.a" uuid="24a85abb-25ad-4686-850c-5c0e8ab69a0c">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="70bbeee7-f0ae-4502-839f-1db8a8ce9dd9">
               <description>
                  <p>Do not respond to this statement here. Respond within the <code>by-component</code> assembly below.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="8a72663c-28c7-41c2-8739-f1ee2d5761ac">
               <description>
                  <p>For the portion of the control satisfied by this system or its owning organization, describe
                        <strong>how</strong> the control is met.</p>
               </description>
               <prop name="responsibility" value="customer">
                  <remarks>
                     <p>General customer responsibility description.</p>
                  </remarks>
               </prop>
               <remarks>
                  <p>The component-uuid above points to the "this system" component.</p>
                  <p>Any control response content that does not cleanly fit another system component is placed here. This includes customer responsibility content.</p>
                  <p>This can also be used to provide a summary, such as a holistic overview of how multiple components work together.</p>
                  <p>While the "this system" component is not expclicity required within every <code>statement</code>, it will typically be present.</p>
               </remarks>
            </by-component>
            <by-component component-uuid="b7364f67-bf65-4df2-b756-4b9c6b1c4a52"
                          uuid="84de735f-ba37-4bb4-b784-79760f986a40">
               <description>
                  <p>For the portion inherited from an underlying FedRAMP-authorized provider,
                     describe <strong>what</strong> is inherited.</p>
               </description>
               <prop name="responsibility" value="customer">
                  <remarks>
                     <p>Component-specific customer responsibility description.</p>
                  </remarks>
               </prop>
            </by-component>
            <by-component component-uuid="cae07d12-8566-443a-95de-7596b9cac953"
                          uuid="13db02bb-1f33-4f79-8711-ed47c2c3d337">
               <description>
                  <p>For the portion of the control that must be configured by or provided by the
                     customer, describe the customer responsibility here. This is what will appear
                     in the Customer Responsibility Matrix.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="at-1" uuid="c332a6f8-bbe6-4ee9-aaea-d89d251c68df">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="at-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="at-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="at-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="at-1_stmt.a" uuid="ee5a11fb-9bae-4680-8f8c-575c85d47355">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="8ef2f9ed-bd07-4f93-b897-fd820218a6e6">
               <description>
                  <p>Component-based Approach</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="d3bdee1c-7d84-4ed4-8950-e13256edb7fa">
               <description>
                  <p>Describe how Part a is satisfied.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="at-1_stmt.a.1"
                    uuid="2e8ec7ce-c9c6-4f5f-9d50-3a3b9d3acf65">
            <link href="#090ab379-2089-4830-b9fd-26d0729e22e9" rel="policy"/>
            <remarks>
               <p>This identifies a policy (attached in resources) that satisfies this control.</p>
            </remarks>
         </statement>
         <statement statement-id="at-1_stmt.a.2"
                    uuid="e7f9b618-c092-4b8b-b416-0ee477026726">
            <link href="#att-process-1" rel="process"/>
            <remarks>
               <p>This identifies a process (attached in resources) that satisfies this control.</p>
            </remarks>
         </statement>
         <statement statement-id="at-1_stmt.b.1"
                    uuid="29192f0b-edb1-4820-b951-65ffdc64bb3e">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="ce72c0f1-ec52-49e1-aab3-8580cbca7e5e">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="5a5e5c3e-1108-47f1-a83f-05e0394219db">
               <description>
                  <p>Describe how Part b-1 is satisfied.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="at-1_stmt.b.2"
                    uuid="23a9bfa7-6e3f-4e00-a120-791b26a9157e">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="0ebc6d57-8edf-4275-82af-632afa9b1d18">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="fcc63699-04ab-4b69-b7b9-a13bee6685b3">
               <description>
                  <p>Describe how Part b-2 is satisfied.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="au-1" uuid="381c8d0c-e6ec-41a9-9b16-01657226c70f">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="au-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="au-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="au-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="au-1_stmt.a" uuid="9a2bd937-226e-4aaf-8261-2cf0c2e3aa10">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="a037eaa7-2fbe-49ab-be46-11d698725918">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="30042cb9-ff85-472f-b769-68bd7bb5bbd9">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="au-1_stmt.b.1"
                    uuid="d01f186f-a14f-4e22-b069-84a55e48a112">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="7d8910b1-109e-48bb-8543-45b8c8dac596">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="f41962c7-b53b-46f8-a84f-4aba25904bb8">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="au-1_stmt.b.2"
                    uuid="ea153acb-2bd0-41d9-8ebd-ba022d31230a">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="39cb5658-b8f6-43e0-9ffe-013dac901c33">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="9ad59f0d-17a2-4f3f-af6a-a8529d692195">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ca-1" uuid="43e388d9-3854-44f6-8c6f-17a6d51ee6a2">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="ca-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ca-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ca-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="ca-1_stmt.a" uuid="e7bd0a7e-5f92-4769-8cd3-76ad2f663a5c">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="1d38502e-a13f-4da2-aeaa-9e2b3a44c269">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="e5815f1d-ec94-4d98-8896-ec57e339bd7b">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ca-1_stmt.b.1"
                    uuid="b2c3ec86-b976-4e5a-9dc3-4ac2d570765e">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="5cd8b2d9-b194-40ea-a036-4aba6e3ff0cd">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="ca6b2bd5-3ddf-4167-a942-06e1955e49f8">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ca-1_stmt.b.2"
                    uuid="e9474eb8-36d6-4eab-abeb-f9bd17e66b22">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="bad73480-9058-413a-bb09-d111bd8f23aa">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="507b8b9d-2d40-4748-81c9-c5a13c8f8f05">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="cm-1" uuid="c8e45d78-2afe-42ae-80e1-c1e2499a0346">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="cm-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="cm-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="cm-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="cm-1_stmt.a" uuid="52339583-19b6-4774-9213-50b9f42fe51f">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="8945aafb-fd81-4d38-b9ee-0b153566790f">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="2916ebd5-c45a-466e-b8e9-00dd15b0c94d">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="cm-1_stmt.b.1"
                    uuid="f9cc6f3f-c64f-4fae-9a32-f964ebdc8e74">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="91670e6b-f164-492a-9aad-a9a2d6b8e114">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="678db1d2-a538-4986-ac94-63da312fe3f9">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="cm-1_stmt.b.2"
                    uuid="c548a71f-41d6-4e8c-b400-1764379348c4">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="40745320-eb16-4b16-af80-b18607be9994">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="a871cf91-04c7-4e03-9df6-80b3d5afc9bf">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="cp-1" uuid="13af9343-73e7-4d71-b386-9a0844fa7e45">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="cp-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="cp-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="cp-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="cp-1_stmt.a" uuid="8bde1fa5-eb81-4a1b-9e6e-5827e176025a">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="ef1ebd70-dc97-44b1-9c83-8e401f6c6920">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="157d7751-938c-441f-9299-02a339d98532">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="cp-1_stmt.b.1"
                    uuid="2fc9eec1-a49f-4cfa-9f7b-c702a1e21619">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="4e9b1a0a-6364-4b3c-8cdc-ec3e1e461c9c">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="6358db78-bab1-4139-b512-f65d3e48248b">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="cp-1_stmt.b.2"
                    uuid="db5b3977-bd51-4505-b3e2-1597bbd4d930">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="c020517e-adda-4f01-a0d1-a0aa3cb6ee5b">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="3de33bbe-1a15-4d10-b35d-56fd85e24571">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ia-1" uuid="4050c933-3ecc-4a8d-8da7-391364685cbb">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="ia-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ia-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ia-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="ia-1_stmt.a" uuid="ba92e479-705f-47a4-a763-dfc098ba239d">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="9af2df5d-4f00-46d9-8a75-724baa67fa32">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="5add335d-7375-49f0-843c-ac994e4d147b">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ia-1_stmt.b.1"
                    uuid="dba8c469-5758-497e-9856-e472a2e08677">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="70135b8f-c8f6-410e-aded-40be7a0d8fac">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="b04d86a0-b68c-41f0-9c0b-88a8daa457b7">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ia-1_stmt.b.2"
                    uuid="b56e37b1-1f4c-479b-bfa1-a2773c2eebfd">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="be523f20-df87-48d4-960d-1c38f6180fdd">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="c8fde380-9a41-404a-a88b-c20479a21618">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ir-1" uuid="229846dc-83cc-4ff2-a9ed-210490a343d9">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="ir-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ir-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ir-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="ir-1_stmt.a" uuid="7284efc2-d953-486c-ab8a-3caef6ce06c3">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="169c74fb-e6f4-4046-978e-79ae5814fdcf">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="7b385445-5e7b-4656-98f1-0f1353aab59e">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ir-1_stmt.b.1"
                    uuid="75c37e1a-6e8d-4ef0-99f4-c16f7995706c">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="2e37f6b4-8f45-423f-b93d-1fc9bd16c7a0">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="e7ae4685-2e30-4e00-9ada-b00b5eaf5578">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ir-1_stmt.b.2"
                    uuid="900591ec-2006-4622-bc87-59828d884d4f">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="5eff09b6-1cb0-4f9d-ac16-1d52faa3d5c0">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="f443c391-479d-492d-b7e9-55c9c2c107be">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ma-1" uuid="f0c6b63f-6b94-448f-bb16-db3d54b91734">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="ma-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ma-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ma-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="ma-1_stmt.a" uuid="d609e538-3976-418e-a368-58fc75cd03c0">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="499d1b82-bf8d-463e-b3c6-22417b11011b">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="93a9b046-63c4-4628-8547-39bc7d8df70c">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ma-1_stmt.b.1"
                    uuid="df1a6dd8-9e18-4408-8783-cb30e0413f22">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="b7adc7f7-ae07-4b17-8cd8-fe5f13f50d09">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="ad14f76a-a3eb-4349-8f6c-54cd99f1c040">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ma-1_stmt.b.2"
                    uuid="f02f759d-7d4c-41f2-b153-f3cc1e157e39">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="88eb79f6-615c-4d18-8e8a-0cf7abc58d93">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="32b337f6-eb61-4945-a139-4d2ae7737488">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="mp-1" uuid="fa3a9747-3451-456a-aae9-9896e03a52c8">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="mp-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="mp-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="mp-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="mp-1_stmt.a" uuid="bab45ad3-65ee-43bc-9c3e-c3e4e2db8001">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="20b544ef-9e1e-4325-b362-7b3c6f0cca9c">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="6668f521-4d5c-4317-868f-804878675bf2">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="mp-1_stmt.b.1"
                    uuid="ca35d4a5-ca73-4b3a-aa66-6c712c7a4a49">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="2ff6fc5a-1ee7-48b3-b534-0cd3dbbc864d">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="57e65240-5b41-40ee-89b1-f75d8fb259ad">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="mp-1_stmt.b.2"
                    uuid="0c5c6eda-9644-46f2-a29c-16fe4e248621">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="9b315aac-43f9-4ae7-9e78-a0b8d7f7c73c">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="ea6c7fa7-ccbf-414c-8c6b-9c928e914b35">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="pe-1" uuid="a85ff28e-517c-4455-8bd4-866103a2c94a">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="pe-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="pe-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="pe-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="pe-1_stmt.a" uuid="11fd3e46-4735-4986-91bc-747345fe608a">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="12c05f28-6f97-439b-9eb1-110f0076a5c1">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="dceb4401-c1fd-41a7-9e07-8d82a8042e61">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="pe-1_stmt.b.1"
                    uuid="a37f91e2-190d-40f7-829c-39776c14c8b4">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="218e56e0-fa10-49b5-8d03-0096d6980b8f">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="bbd2b372-b57d-4a3a-90c2-2189dd23664b">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="pe-1_stmt.b.2"
                    uuid="f3d57138-916c-4064-b2fc-aa8dd76849f8">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="bf063b0f-47c6-489e-977d-888caf38650c">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="f4a94538-220f-4f73-9487-73b72b68813e">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="pl-1" uuid="97ba1f95-92a8-480b-a489-960661e4206b">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="pl-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="pl-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="pl-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="pl-1_stmt.a" uuid="ec7af577-ff22-46bf-ac0a-cf9d75c72ebb">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="baf8d3b0-bb38-4d09-9d72-9e250570a8e8">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="679837fb-601e-4517-abe6-11ff6fc551b4">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="pl-1_stmt.b.1"
                    uuid="438f3e29-670a-49f2-8b9f-05d951318294">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="22cf3cc1-46c1-44ac-8082-342c1a09d4c4">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="ddce2988-ce9b-4f15-a427-6f18e4ba1817">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="pl-1_stmt.b.2"
                    uuid="96a4d13c-bd2b-4038-96c5-0f923f404bbd">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="315dbe5a-3f98-476f-898a-408ad9de9f7c">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="18d7c02e-f21b-4cd2-bf33-d27971ced47f">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ps-1" uuid="5e7498de-b540-4a28-b041-4381b023e98a">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="ps-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ps-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ps-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="ps-1_stmt.a" uuid="afe1703d-5e59-460b-b048-41b49699c5a1">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="ae5a3811-acf1-4195-8edd-d1c4ab8d7716">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="7d6cafb2-b613-4807-ad61-4f0f649bd5ee">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ps-1_stmt.b.1"
                    uuid="956c93e2-cf8f-482c-aaf7-91ab44c7cbd6">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="8c1af0f0-267c-457d-9a12-6b29c05cb9a7">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="f4fbfbc2-1a94-456d-a713-9d547f18a0c7">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ps-1_stmt.b.2"
                    uuid="6926c688-3fb2-4ab8-9acb-cff0b5acd365">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="7b3919ab-7a62-43ff-8c08-5e6f6460b9d2">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="2f9c701a-0f3e-4e3d-beae-debb08c406ed">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="ra-1" uuid="789e6c0f-acda-4a94-9b48-7d41dd4c607c">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="ra-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="ra-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="ra-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="ra-1_stmt.a" uuid="8fe541ea-0920-42d0-8561-4e08f04d796c">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="c04523ba-79c6-4275-8e0d-29c087b0968b">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="5894d92b-05bf-4fc4-85dc-f5c37e112bc4">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ra-1_stmt.b.1"
                    uuid="b0e9ed47-fe83-485d-8d79-979833543a83">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="74ee9f12-0907-4fc0-ae20-b8f4fc943910">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="c90ad6ee-5a40-4996-8e6c-d85ff3f7559e">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="ra-1_stmt.b.2"
                    uuid="d9a38f95-ded1-4d1d-afe2-242987222ebd">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="afe963d8-5c04-4d98-870d-3fcec147a9ed">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="d6f6ac98-4f15-45f2-9ecc-4447e96af44f">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="sa-1" uuid="55358f60-db9b-4d75-a313-5fa6c328273c">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="sa-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="sa-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="sa-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="sa-1_stmt.a" uuid="ae3f64be-2e62-4347-b06a-727bc28e4f9b">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="28d5f97a-80c5-4874-b646-4e6a0da49f9a">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="e5864f16-83f2-4faf-b7be-0810c6e58fc4">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="sa-1_stmt.b.1"
                    uuid="959519a9-3e12-47bc-8d76-50d9ab0b6544">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="383e459b-5a24-49a8-bcd7-d51e5e342dc4">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="bed8f51a-1773-493c-8167-c83712e03f01">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="sa-1_stmt.b.2"
                    uuid="9daa3848-9672-469c-9aa0-f363e3339123">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="39ff0aef-81b3-4330-9825-aecb009e48d1">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="518d4987-9436-4c1f-9e07-afa6b332f124">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="sc-1" uuid="9e2852c6-f48a-47b2-9ea5-77cbbb42b365">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="sc-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="sc-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="sc-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="sc-1_stmt.a" uuid="5e2e8372-c13b-4cf5-90c5-e8833a9fe241">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="8c01ac20-74aa-482b-8e84-2be7a0fc4c48">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="88cfadba-043b-483b-8032-73344aa53c96">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="sc-1_stmt.b.1"
                    uuid="8166980a-86c0-497d-87e4-453adfd0d4bd">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="c3aea0dd-4353-4a72-bb19-94cefa87a9c9">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="9abaeb64-56d2-48a1-bd8d-7b55411d31ca">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="sc-1_stmt.b.2"
                    uuid="eeea34ff-18ab-4c35-bf32-c74dbf746e7b">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="9f91469b-5237-4edb-a477-436608e76f05">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="ad20ff50-8a7c-4ffc-a918-260960f6fb42">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
      <implemented-requirement control-id="si-1" uuid="81ba4fe8-1649-437b-9ecf-367fd87336e6">
         <prop ns="https://fedramp.gov/ns/oscal"
               name="planned-completion-date"
               value="2020-11-27Z"/>
         <prop name="implementation-status"
               ns="https://fedramp.gov/ns/oscal"
               value="planned">
            <remarks>
               <p>Describe the plan to complete the implementation.</p>
            </remarks>
         </prop>
         <prop name="control-origination"
               ns="https://fedramp.gov/ns/oscal"
               value="sp-system"/>
         <responsible-role role-id="program-director"/>
         <set-parameter param-id="si-1_prm_1">
            <value>[replace with list of personnel or roles]</value>
         </set-parameter>
         <set-parameter param-id="si-1_prm_2">
            <value>[specify frequency]</value>
         </set-parameter>
         <set-parameter param-id="si-1_prm_3">
            <value>[specify frequency]</value>
         </set-parameter>
         <statement statement-id="si-1_stmt.a" uuid="915b10d2-2275-4d86-951a-eec23f9ee77a">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="ec810fee-3620-4611-a0f0-17b37c6ad595">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="682311e7-e3f7-4d94-acf9-131149887fda">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="si-1_stmt.b.1"
                    uuid="2a5a6f7f-aeea-4ea4-be1e-859df4bf7521">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="1beeb6ad-7655-4f2c-be2e-fb235dbfcdcd">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="80ee0fe9-7f87-4dfa-887a-ac3bb2131943">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
         <statement statement-id="si-1_stmt.b.2"
                    uuid="c152bbde-57fc-4864-ac51-861bd8bb83b4">
            <by-component component-uuid="3d035035-dfca-4240-9787-a7e8561e1c7d"
                          uuid="e9b54d73-7753-46e7-a473-ae735ed7685c">
               <description>
                  <p>Ignore.</p>
               </description>
            </by-component>
            <by-component component-uuid="60f92bcf-f353-4236-9803-2a5d417555f4"
                          uuid="78e8f2bb-67d7-49d3-a993-ce4bedcfbc47">
               <description>
                  <p>For the portion of the control satisfied by the service provider, describe
                        <strong>how</strong> the control is met.</p>
               </description>
            </by-component>
         </statement>
      </implemented-requirement>
   </control-implementation>
   <!-- Table 15-1 Names of Provided Attachments -->
   <back-matter>
      <!-- Section 12, Table 12-1, Table 12-2 -->
      <resource uuid="3a5ca2de-0f66-47e6-844d-6ccdf214b767">
         <title>FedRAMP Applicable Laws and Regulations</title>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="fedramp-citations"/>
         <rlink href="https://www.fedramp.gov/assets/resources/templates/SSP-A12-FedRAMP-Laws-and-Regulations-Template.xlsx"/>
      </resource>
      <resource uuid="12da89ef-51dd-4404-948d-e9f0e25b961e">
         <title>FedRAMP Master Acronym and Glossary</title>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="fedramp-acronyms"/>
         <rlink href="https://www.fedramp.gov/assets/resources/documents/FedRAMP_Master_Acronym_and_Glossary.pdf"/>
      </resource>
      <resource uuid="d45612a9-cf25-4ef6-b2dd-69e38ba2967a">
         <title>[SAMPLE]Name or Title of Document</title>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="law"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Publication Date"/>
         <document-id scheme="https://www.doi.org/">Identification Number</document-id>
         <rlink href="https://domain.example/path/to/document.pdf"/>
      </resource>
      <resource uuid="a8a0cc81-800f-479f-93d3-8b8743d9b98d">
         <title>[SAMPLE]Privacy-Related Law Citation</title>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="law"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="pii"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Publication Date"/>
         <document-id scheme="https://www.doi.org/">Identification Number</document-id>
         <rlink href="https://domain.example/path/to/document.pdf"/>
      </resource>
      <resource uuid="545e75c3-537f-48fe-9630-95337916d982">
         <title>[SAMPLE]Regulation Citation</title>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="regulation"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Publication Date"/>
         <document-id scheme="https://www.doi.org/">Identification Number</document-id>
         <rlink href="https://domain.example/path/to/document.pdf"/>
      </resource>
      <resource uuid="9d6cf2b4-8e88-4040-a33c-7bc206553a1a">
         <title>[SAMPLE]Interconnection Security Agreement Title</title>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
      </resource>
      <resource uuid="31a46c4f-2959-4287-bc1c-67297d7da60b">
         <description>CSP Logo</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="prepared-for-logo"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="csp-logo"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./logo.png" media-type="image/png"/>
         <base64>00000000</base64>
      </resource>
      <resource uuid="c5866ad8-8ed7-49b4-844a-0276fa9f8f51">
         <description>Preparer Logo</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="prepared-by-logo"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./party-1-logo.png" media-type="image/png"/>
         <base64>00000000</base64>
      </resource>
      <resource uuid="0846b6ef-cfa4-4bb3-8280-717f7e7b04d4">
         <description>FedRAMP Logo</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="fedramp-logo"/>
         <rlink href="https://github.com/GSA/fedramp-automation/raw/master/assets/FedRAMP_LOGO.png"/>
      </resource>
      <resource uuid="2c1747d6-874a-49a2-8488-2fd9735416bf">
         <description>3PAO Logo</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="3pao-logo"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./logo.png" media-type="image/png"/>
         <base64>00000000</base64>
      </resource>
      <resource uuid="d2eb3c18-6754-4e3a-a933-03d289e3fad5">
         <description>The primary authorization boundary diagram.</description>
         <!-- Use rlink and/or base64 -->
         <rlink href="./diagrams/boundary.png"/>
         <base64>00000000</base64>
         <remarks>
            <p>Section 9.2, Figure 9-1 Authorization Boundary Diagram (graphic)</p>
            <p>This should be referenced in the
               system-characteristics/authorization-boundary/diagram/link/@href flag using a value
               of "#d2eb3c18-6754-4e3a-a933-03d289e3fad5"</p>
         </remarks>
      </resource>
      <resource uuid="61081e81-850b-43c1-bf43-1ecbddcb9e7f">
         <description>The primary network diagram.</description>
         <!-- Use rlink and/or base64 -->
         <rlink href="./diagrams/network.png"/>
         <base64>00000000</base64>
         <remarks>
            <p>Section 9.4, Figure 9-2 Network Diagram (graphic)</p>
            <p>This should be referenced in the
               system-characteristics/network-architecture/diagram/link/@href flag using a value
               of "#61081e81-850b-43c1-bf43-1ecbddcb9e7f"</p>
         </remarks>
      </resource>
      <resource uuid="ac5d7535-f3b8-45d3-bf3b-735c82c64547">
         <description>The primary data flow diagram.</description>
         <!-- Use rlink and/or base64 -->
         <rlink href="./diagrams/dataflow.png"/>
         <base64>00000000</base64>
         <remarks>
            <p>Section 10, Figure 10-1 Data Flow Diagram (graphic)</p>
            <p>This should be referenced in the
               system-characteristics/data-flow/diagram/link/@href flag using a value
               of "#ac5d7535-f3b8-45d3-bf3b-735c82c64547"</p>
         </remarks>
      </resource>
      <resource uuid="090ab379-2089-4830-b9fd-26d0729e22e9">
         <title>Policy Title</title>
         <description>Policy document</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="policy"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./sample_policy.pdf"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Policy Attachment</p>
         </remarks>
      </resource>
      <resource uuid="ab300133-d749-4abb-b858-1cd6ffd8af9e">
         <title>Policy Title</title>
         <description>Policy document</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="policy"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./sample_policy.pdf"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Policy Attachment</p>
         </remarks>
      </resource>
      <resource uuid="1002a58e-9e11-4aa6-9ab4-2bde52995952">
         <title>Procedure Title</title>
         <description>Procedure document</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="procedure"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./sample_procedure.pdf"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Procedure Attachment</p>
         </remarks>
      </resource>
      <resource uuid="4bb1e2e5-261c-4b5c-b22c-e1627c2e8be6">
         <title>Procedure Title</title>
         <description>Procedure document</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="procedure"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./sample_procedure.pdf"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Procedure Attachment</p>
         </remarks>
      </resource>
      <resource uuid="90a128ac-c850-48f6-8fff-a55692f80b41">
         <title>User's Guide</title>
         <description>User's Guide</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="user-guide"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="guide"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./sample_guide.pdf"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: User's Guide Attachment</p>
         </remarks>
      </resource>
      <resource uuid="fab59751-b855-40cb-93c1-492562e20e18">
         <title>Privacy Impact Assessment</title>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="privacy-impact-assessment"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="./pia.docx"/>
         <base64 filename="pia.docx">00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Privacy Impact Assessment</p>
         </remarks>
      </resource>
      <resource uuid="489112e1-57f2-4c29-8dd0-95b1442fbf3b">
         <title>Document Title</title>
         <description>Rules of Behavior</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="conformity"
               value="rules-of-behavior"/>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="rob"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="https://sample"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Rules of Behavior (ROB)</p>
         </remarks>
      </resource>
      <resource uuid="c7860916-f2f4-43aa-b578-d48cf8e6d381">
         <title>Document Title</title>
         <description>Contingency Plan (CP)</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="plan"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="https://sample"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Contingency Plan (CP) Attachment</p>
         </remarks>
      </resource>
      <resource uuid="ab56cf27-0dae-40d6-89b7-d750137309af">
         <title>Document Title</title>
         <description>Configuration Management (CM) Plan</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="plan"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="https://sample"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Configuration Management (CM) Plan Attachment</p>
         </remarks>
      </resource>
      <resource uuid="3f771ab5-8016-4571-98d1-f0fb962e15e2">
         <title>Document Title</title>
         <description>Incident Response (IR) Plan</description>
         <prop ns="https://fedramp.gov/ns/oscal" name="type" value="plan"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="https://sample"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Incident Response (IR) Plan Attachment</p>
         </remarks>
      </resource>
      <resource uuid="49fb4631-1da2-41ca-b0b3-e1b1006d4025">
         <title>Separation of Duties Matrix</title>
         <description>Separation of Duties Matrix</description>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="publication"
               value="Document Date"/>
         <prop ns="https://fedramp.gov/ns/oscal"
               name="version"
               value="Document Version"/>
         <!-- Use rlink and/or base64 -->
         <rlink href="https://sample"/>
         <base64>00000000</base64>
         <remarks>
            <p>Table 15-1 Attachments: Separation of Duties Matrix Attachment</p>
         </remarks>
      </resource>
      <resource uuid="9f1aae37-7359-411f-86c1-768aaab85e63">
         <title>FedRAMP High Baseline</title>
         <rlink media-type="application/xml"
                href="https://raw.githubusercontent.com/usnistgov/OSCAL/v1.0.0-milestone3/content/fedramp.gov/xml/FedRAMP_HIGH-baseline_profile.xml"/>
         <remarks>
            <p>Pointer to High baseline content in OSCAL.</p>
         </remarks>
      </resource>
      <resource uuid="890170c3-d4fa-4d25-ab96-8e4bf7cc237c">
         <title>FedRAMP Moderate Baseline</title>
         <rlink media-type="application/xml"
                href="https://raw.githubusercontent.com/usnistgov/OSCAL/v1.0.0-milestone3/content/fedramp.gov/xml/FedRAMP_MODERATE-baseline_profile.xml"/>
         <remarks>
            <p>Pointer to Moderate baseline content in OSCAL.</p>
         </remarks>
      </resource>
      <resource uuid="2acaf846-5496-4d36-8565-9a15b48aef2c">
         <title>FedRAMP Low Baseline</title>
         <rlink media-type="application/xml"
                href="https://raw.githubusercontent.com/usnistgov/OSCAL/v1.0.0-milestone3/content/fedramp.gov/xml/FedRAMP_LOW-baseline_profile.xml"/>
         <remarks>
            <p>Pointer to Low baseline content in OSCAL.</p>
         </remarks>
      </resource>
   </back-matter>
</system-security-plan>