Created
December 23, 2020 04:10
-
-
Save ohsh6o/b6fd37c83b34e49a4419cbe212dc849e to your computer and use it in GitHub Desktop.
FedRAMP Automation Schematron Validation Against M3 and RC1 Models
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <?xml version="1.0" encoding="UTF-8" standalone="yes"?> | |
| <svrl:schematron-output xmlns:f="https://fedramp.gov/ns/oscal" | |
| xmlns:iso="http://purl.oclc.org/dsdl/schematron" | |
| xmlns:lv="local-validations" | |
| xmlns:o="http://csrc.nist.gov/ns/oscal/1.0" | |
| xmlns:oscal="http://csrc.nist.gov/ns/oscal/1.0" | |
| xmlns:saxon="http://saxon.sf.net/" | |
| xmlns:schold="http://www.ascc.net/xml/schematron" | |
| xmlns:svrl="http://purl.oclc.org/dsdl/svrl" | |
| xmlns:xhtml="http://www.w3.org/1999/xhtml" | |
| xmlns:xs="http://www.w3.org/2001/XMLSchema" | |
| xmlns:xsd="http://www.w3.org/2001/XMLSchema" | |
| title="FedRAMP System Security Plan Validations" | |
| schemaVersion=""><!-- | |
| --> | |
| <svrl:ns-prefix-in-attribute-values uri="https://fedramp.gov/ns/oscal" prefix="f"/> | |
| <svrl:ns-prefix-in-attribute-values uri="http://csrc.nist.gov/ns/oscal/1.0" prefix="o"/> | |
| <svrl:ns-prefix-in-attribute-values uri="http://csrc.nist.gov/ns/oscal/1.0" prefix="oscal"/> | |
| <svrl:ns-prefix-in-attribute-values uri="local-validations" prefix="lv"/> | |
| <svrl:active-pattern document="file:/Users/astein/Code/fedramp-automation/resources/validations/test/demo/FedRAMP-SSP-OSCAL-Template.xml"/> | |
| <svrl:fired-rule context="/o:system-security-plan"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation"/> | |
| <svrl:successful-report test="count($required-controls) > 0" | |
| id="each-required-control-report" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>The following 125 controls are required: ac-1 ac-2 ac-3 ac-7 ac-8 ac-14 ac-17 ac-18 ac-19 ac-20 ac-22 at-1 at-2 at-3 at-4 au-1 au-2 au-3 au-4 au-5 au-6 au-8 au-9 au-11 au-12 ca-1 ca-2 ca-2.1 ca-3 ca-5 ca-6 ca-7 ca-9 cm-1 cm-2 cm-4 cm-6 cm-7 cm-8 cm-10 cm-11 cp-1 cp-2 cp-3 cp-4 cp-9 cp-10 ia-1 ia-2 ia-2.1 ia-2.12 ia-4 ia-5 ia-5.1 ia-5.11 ia-6 ia-7 ia-8 ia-8.1 ia-8.2 ia-8.3 ia-8.4 ir-1 ir-2 ir-4 ir-5 ir-6 ir-7 ir-8 ma-1 ma-2 ma-4 ma-5 mp-1 mp-2 mp-6 mp-7 pe-1 pe-2 pe-3 pe-6 pe-8 pe-12 pe-13 pe-14 pe-15 pe-16 pl-1 pl-2 pl-4 ps-1 ps-2 ps-3 ps-4 ps-5 ps-6 ps-7 ps-8 ra-1 ra-2 ra-3 ra-5 sa-1 sa-2 sa-3 sa-4 sa-5 sa-9 sc-1 sc-5 sc-7 sc-12 sc-13 sc-15 sc-20 sc-21 sc-22 sc-39 si-1 si-2 si-3 si-4 si-5 si-12 si-16</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:failed-assert test="not(exists($core-missing))" | |
| id="incomplete-core-implemented-requirements" | |
| role="error" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>This SSP has not implemented the most important 44 core controls: ac-7 ac-17 ac-18 ac-19 ac-22 at-2 at-3 at-4 au-2 au-6 au-11 ca-2 ca-3 ca-5 ca-7 ca-9 cm-6 cm-8 cp-2 cp-3 cp-4 cp-9 ia-4 ia-5 ia-5.1 ir-2 ir-6 ir-8 ma-4 pe-2 pe-3 pe-6 pe-8 pl-2 ps-3 ps-4 ps-5 ps-6 ps-7 ra-5 sc-13 si-2 si-3 si-4</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:failed-assert test="not(exists($all-missing))" | |
| id="incomplete-all-implemented-requirements" | |
| role="warn" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>This SSP has not implemented 107 controls overall: ac-3 ac-7 ac-8 ac-14 ac-17 ac-18 ac-19 ac-20 ac-22 at-2 at-3 at-4 au-2 au-3 au-4 au-5 au-6 au-8 au-9 au-11 au-12 ca-2 ca-2.1 ca-3 ca-5 ca-6 ca-7 ca-9 cm-2 cm-4 cm-6 cm-7 cm-8 cm-10 cm-11 cp-2 cp-3 cp-4 cp-9 cp-10 ia-2 ia-2.1 ia-2.12 ia-4 ia-5 ia-5.1 ia-5.11 ia-6 ia-7 ia-8 ia-8.1 ia-8.2 ia-8.3 ia-8.4 ir-2 ir-4 ir-5 ir-6 ir-7 ir-8 ma-2 ma-4 ma-5 mp-2 mp-6 mp-7 pe-2 pe-3 pe-6 pe-8 pe-12 pe-13 pe-14 pe-15 pe-16 pl-2 pl-4 ps-2 ps-3 ps-4 ps-5 ps-6 ps-7 ps-8 ra-2 ra-3 ra-5 sa-2 sa-3 sa-4 sa-5 sa-9 sc-5 sc-7 sc-12 sc-13 sc-15 sc-20 sc-21 sc-22 sc-39 si-2 si-3 si-4 si-5 si-12 si-16</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:successful-report test="count($results/errors/error) = 0" | |
| id="control-implemented-requirements-stats" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>There are 20 Control Implementation Status items total, with 0 set as implemented, 1 set as partial, 18 set as planned, 0 set as alternative, and 1 set as not-applicable. There are 0 invalid items.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:failed-assert test="not(exists($missing))" | |
| id="missing-response-points" | |
| role="error" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>This SSP has not implemented a statement for each of the following lettered response points for required controls: ac-2_smt.b ac-2_smt.c ac-2_smt.d ac-2_smt.e ac-2_smt.f ac-2_smt.g ac-2_smt.h ac-2_smt.i ac-2_smt.j ac-2_smt.k ac-7_smt.a ac-7_smt.b ac-8_smt.a ac-8_smt.b ac-8_smt.c ac-14_smt.a ac-14_smt.b ac-17_smt.a ac-17_smt.b ac-18_smt.a ac-18_smt.b ac-19_smt.a ac-19_smt.b ac-20_smt.a ac-20_smt.b ac-22_smt.a ac-22_smt.b ac-22_smt.c ac-22_smt.d at-2_smt.a at-2_smt.b at-2_smt.c at-3_smt.a at-3_smt.b at-3_smt.c at-4_smt.a at-4_smt.b au-2_smt.a au-2_smt.b au-2_smt.c au-2_smt.d au-5_smt.a au-5_smt.b au-6_smt.a au-6_smt.b au-8_smt.a au-8_smt.b au-12_smt.a au-12_smt.b au-12_smt.c ca-2_smt.a ca-2_smt.b ca-2_smt.c ca-2_smt.d ca-3_smt.a ca-3_smt.b ca-3_smt.c ca-5_smt.a ca-5_smt.b ca-6_smt.a ca-6_smt.b ca-6_smt.c ca-7_smt.a ca-7_smt.b ca-7_smt.c ca-7_smt.d ca-7_smt.e ca-7_smt.f ca-7_smt.g ca-9_smt.a ca-9_smt.b cm-6_smt.a cm-6_smt.b cm-6_smt.c cm-6_smt.d cm-7_smt.a cm-7_smt.b cm-8_smt.a cm-8_smt.b cm-10_smt.a cm-10_smt.b cm-10_smt.c cm-11_smt.a cm-11_smt.b cm-11_smt.c cp-2_smt.a cp-2_smt.b cp-2_smt.c cp-2_smt.d cp-2_smt.e cp-2_smt.f cp-2_smt.g cp-3_smt.a cp-3_smt.b cp-3_smt.c cp-4_smt.a cp-4_smt.b cp-4_smt.c cp-9_smt.a cp-9_smt.b cp-9_smt.c cp-9_smt.d ia-4_smt.a ia-4_smt.b ia-4_smt.c ia-4_smt.d ia-4_smt.e ia-5_smt.a ia-5_smt.b ia-5_smt.c ia-5_smt.d ia-5_smt.e ia-5_smt.f ia-5_smt.g ia-5_smt.h ia-5_smt.i ia-5_smt.j ia-5.1_smt.a ia-5.1_smt.b ia-5.1_smt.c ia-5.1_smt.d ia-5.1_smt.e ia-5.1_smt.f ir-2_smt.a ir-2_smt.b ir-2_smt.c ir-4_smt.a ir-4_smt.b ir-4_smt.c ir-6_smt.a ir-6_smt.b ir-8_smt.a ir-8_smt.b ir-8_smt.c ir-8_smt.d ir-8_smt.e ir-8_smt.f ma-2_smt.a ma-2_smt.b ma-2_smt.c ma-2_smt.d ma-2_smt.e ma-2_smt.f ma-4_smt.a ma-4_smt.b ma-4_smt.c ma-4_smt.d ma-4_smt.e ma-5_smt.a ma-5_smt.b ma-5_smt.c mp-6_smt.a mp-6_smt.b pe-2_smt.a pe-2_smt.b pe-2_smt.c pe-2_smt.d pe-3_smt.a pe-3_smt.b pe-3_smt.c pe-3_smt.d pe-3_smt.e pe-3_smt.f pe-3_smt.g pe-6_smt.a pe-6_smt.b pe-6_smt.c pe-8_smt.a pe-8_smt.b pe-14_smt.a pe-14_smt.b pl-2_smt.a pl-2_smt.b pl-2_smt.c pl-2_smt.d pl-2_smt.e pl-4_smt.a pl-4_smt.b pl-4_smt.c pl-4_smt.d ps-2_smt.a ps-2_smt.b ps-2_smt.c ps-3_smt.a ps-3_smt.b ps-4_smt.a ps-4_smt.b ps-4_smt.c ps-4_smt.d ps-4_smt.e ps-4_smt.f ps-5_smt.a ps-5_smt.b ps-5_smt.c ps-5_smt.d ps-6_smt.a ps-6_smt.b ps-6_smt.c ps-7_smt.a ps-7_smt.b ps-7_smt.c ps-7_smt.d ps-7_smt.e ps-8_smt.a ps-8_smt.b ra-2_smt.a ra-2_smt.b ra-2_smt.c ra-3_smt.a ra-3_smt.b ra-3_smt.c ra-3_smt.d ra-3_smt.e ra-5_smt.a ra-5_smt.b ra-5_smt.c ra-5_smt.d ra-5_smt.e sa-2_smt.a sa-2_smt.b sa-2_smt.c sa-3_smt.a sa-3_smt.b sa-3_smt.c sa-3_smt.d sa-4_smt.a sa-4_smt.b sa-4_smt.c sa-4_smt.d sa-4_smt.e sa-4_smt.f sa-4_smt.g sa-5_smt.a sa-5_smt.b sa-5_smt.c sa-5_smt.d sa-5_smt.e sa-9_smt.a sa-9_smt.b sa-9_smt.c sc-7_smt.a sc-7_smt.b sc-7_smt.c sc-15_smt.a sc-15_smt.b sc-20_smt.a sc-20_smt.b si-2_smt.a si-2_smt.b si-2_smt.c si-2_smt.d si-3_smt.a si-3_smt.b si-3_smt.c si-3_smt.d si-4_smt.a si-4_smt.b si-4_smt.c si-4_smt.d si-4_smt.e si-4_smt.f si-4_smt.g si-5_smt.a si-5_smt.b si-5_smt.c si-5_smt.d.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:remarks"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-remarks" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:remarks[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ac-1_smt.a has remarks not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:failed-assert test="$components-count >= $required-components-count" | |
| id="missing-response-components" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]"> | |
| <svrl:text>Response statements for ac-1_smt.a.1 must have at least 1 component with a description. There are 0.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:remarks"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-remarks" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:remarks[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ac-1_smt.a.1 has remarks not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:failed-assert test="$components-count >= $required-components-count" | |
| id="missing-response-components" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]"> | |
| <svrl:text>Response statements for ac-1_smt.a.2 must have at least 1 component with a description. There are 0.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:remarks"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-remarks" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:remarks[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ac-1_smt.a.2 has remarks not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:failed-assert test="$components-count >= $required-components-count" | |
| id="missing-response-components" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][4]"> | |
| <svrl:text>Response statements for ac-1_smt.b.1 must have at least 1 component with a description. There are 0.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][4]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ac-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:failed-assert test="$components-count >= $required-components-count" | |
| id="missing-response-components" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][5]"> | |
| <svrl:text>Response statements for ac-1_smt.b.2 must have at least 1 component with a description. There are 0.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][5]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ac-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:failed-assert test="not(exists($missing))" | |
| id="missing-response-points" | |
| role="error" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]"> | |
| <svrl:text>This SSP has not implemented a statement for each of the following lettered response points for required controls: ac-2_smt.b ac-2_smt.c ac-2_smt.d ac-2_smt.e ac-2_smt.f ac-2_smt.g ac-2_smt.h ac-2_smt.i ac-2_smt.j ac-2_smt.k ac-7_smt.a ac-7_smt.b ac-8_smt.a ac-8_smt.b ac-8_smt.c ac-14_smt.a ac-14_smt.b ac-17_smt.a ac-17_smt.b ac-18_smt.a ac-18_smt.b ac-19_smt.a ac-19_smt.b ac-20_smt.a ac-20_smt.b ac-22_smt.a ac-22_smt.b ac-22_smt.c ac-22_smt.d at-2_smt.a at-2_smt.b at-2_smt.c at-3_smt.a at-3_smt.b at-3_smt.c at-4_smt.a at-4_smt.b au-2_smt.a au-2_smt.b au-2_smt.c au-2_smt.d au-5_smt.a au-5_smt.b au-6_smt.a au-6_smt.b au-8_smt.a au-8_smt.b au-12_smt.a au-12_smt.b au-12_smt.c ca-2_smt.a ca-2_smt.b ca-2_smt.c ca-2_smt.d ca-3_smt.a ca-3_smt.b ca-3_smt.c ca-5_smt.a ca-5_smt.b ca-6_smt.a ca-6_smt.b ca-6_smt.c ca-7_smt.a ca-7_smt.b ca-7_smt.c ca-7_smt.d ca-7_smt.e ca-7_smt.f ca-7_smt.g ca-9_smt.a ca-9_smt.b cm-6_smt.a cm-6_smt.b cm-6_smt.c cm-6_smt.d cm-7_smt.a cm-7_smt.b cm-8_smt.a cm-8_smt.b cm-10_smt.a cm-10_smt.b cm-10_smt.c cm-11_smt.a cm-11_smt.b cm-11_smt.c cp-2_smt.a cp-2_smt.b cp-2_smt.c cp-2_smt.d cp-2_smt.e cp-2_smt.f cp-2_smt.g cp-3_smt.a cp-3_smt.b cp-3_smt.c cp-4_smt.a cp-4_smt.b cp-4_smt.c cp-9_smt.a cp-9_smt.b cp-9_smt.c cp-9_smt.d ia-4_smt.a ia-4_smt.b ia-4_smt.c ia-4_smt.d ia-4_smt.e ia-5_smt.a ia-5_smt.b ia-5_smt.c ia-5_smt.d ia-5_smt.e ia-5_smt.f ia-5_smt.g ia-5_smt.h ia-5_smt.i ia-5_smt.j ia-5.1_smt.a ia-5.1_smt.b ia-5.1_smt.c ia-5.1_smt.d ia-5.1_smt.e ia-5.1_smt.f ir-2_smt.a ir-2_smt.b ir-2_smt.c ir-4_smt.a ir-4_smt.b ir-4_smt.c ir-6_smt.a ir-6_smt.b ir-8_smt.a ir-8_smt.b ir-8_smt.c ir-8_smt.d ir-8_smt.e ir-8_smt.f ma-2_smt.a ma-2_smt.b ma-2_smt.c ma-2_smt.d ma-2_smt.e ma-2_smt.f ma-4_smt.a ma-4_smt.b ma-4_smt.c ma-4_smt.d ma-4_smt.e ma-5_smt.a ma-5_smt.b ma-5_smt.c mp-6_smt.a mp-6_smt.b pe-2_smt.a pe-2_smt.b pe-2_smt.c pe-2_smt.d pe-3_smt.a pe-3_smt.b pe-3_smt.c pe-3_smt.d pe-3_smt.e pe-3_smt.f pe-3_smt.g pe-6_smt.a pe-6_smt.b pe-6_smt.c pe-8_smt.a pe-8_smt.b pe-14_smt.a pe-14_smt.b pl-2_smt.a pl-2_smt.b pl-2_smt.c pl-2_smt.d pl-2_smt.e pl-4_smt.a pl-4_smt.b pl-4_smt.c pl-4_smt.d ps-2_smt.a ps-2_smt.b ps-2_smt.c ps-3_smt.a ps-3_smt.b ps-4_smt.a ps-4_smt.b ps-4_smt.c ps-4_smt.d ps-4_smt.e ps-4_smt.f ps-5_smt.a ps-5_smt.b ps-5_smt.c ps-5_smt.d ps-6_smt.a ps-6_smt.b ps-6_smt.c ps-7_smt.a ps-7_smt.b ps-7_smt.c ps-7_smt.d ps-7_smt.e ps-8_smt.a ps-8_smt.b ra-2_smt.a ra-2_smt.b ra-2_smt.c ra-3_smt.a ra-3_smt.b ra-3_smt.c ra-3_smt.d ra-3_smt.e ra-5_smt.a ra-5_smt.b ra-5_smt.c ra-5_smt.d ra-5_smt.e sa-2_smt.a sa-2_smt.b sa-2_smt.c sa-3_smt.a sa-3_smt.b sa-3_smt.c sa-3_smt.d sa-4_smt.a sa-4_smt.b sa-4_smt.c sa-4_smt.d sa-4_smt.e sa-4_smt.f sa-4_smt.g sa-5_smt.a sa-5_smt.b sa-5_smt.c sa-5_smt.d sa-5_smt.e sa-9_smt.a sa-9_smt.b sa-9_smt.c sc-7_smt.a sc-7_smt.b sc-7_smt.c sc-15_smt.a sc-15_smt.b sc-20_smt.a sc-20_smt.b si-2_smt.a si-2_smt.b si-2_smt.c si-2_smt.d si-3_smt.a si-3_smt.b si-3_smt.c si-3_smt.d si-4_smt.a si-4_smt.b si-4_smt.c si-4_smt.d si-4_smt.e si-4_smt.f si-4_smt.g si-5_smt.a si-5_smt.b si-5_smt.c si-5_smt.d.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ac-2_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:remarks"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:failed-assert test="/o:system-security-plan/o:system-implementation/o:component[@uuid = $component-ref] => exists()" | |
| id="invalid-component-match" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:by-component[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]"> | |
| <svrl:text>Response statment ac-2_smt.a with component reference UUID 'b7364f67-bf65-4df2-b756-4b9c6b1c4a52' is not in the system implementation inventory, and cannot be used to define a control.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:failed-assert test="/o:system-security-plan/o:system-implementation/o:component[@uuid = $component-ref] => exists()" | |
| id="invalid-component-match" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:by-component[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]"> | |
| <svrl:text>Response statment ac-2_smt.a with component reference UUID 'cae07d12-8566-443a-95de-7596b9cac953' is not in the system implementation inventory, and cannot be used to define a control.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:failed-assert test="not(exists($missing))" | |
| id="missing-response-points" | |
| role="error" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]"> | |
| <svrl:text>This SSP has not implemented a statement for each of the following lettered response points for required controls: ac-2_smt.b ac-2_smt.c ac-2_smt.d ac-2_smt.e ac-2_smt.f ac-2_smt.g ac-2_smt.h ac-2_smt.i ac-2_smt.j ac-2_smt.k ac-7_smt.a ac-7_smt.b ac-8_smt.a ac-8_smt.b ac-8_smt.c ac-14_smt.a ac-14_smt.b ac-17_smt.a ac-17_smt.b ac-18_smt.a ac-18_smt.b ac-19_smt.a ac-19_smt.b ac-20_smt.a ac-20_smt.b ac-22_smt.a ac-22_smt.b ac-22_smt.c ac-22_smt.d at-2_smt.a at-2_smt.b at-2_smt.c at-3_smt.a at-3_smt.b at-3_smt.c at-4_smt.a at-4_smt.b au-2_smt.a au-2_smt.b au-2_smt.c au-2_smt.d au-5_smt.a au-5_smt.b au-6_smt.a au-6_smt.b au-8_smt.a au-8_smt.b au-12_smt.a au-12_smt.b au-12_smt.c ca-2_smt.a ca-2_smt.b ca-2_smt.c ca-2_smt.d ca-3_smt.a ca-3_smt.b ca-3_smt.c ca-5_smt.a ca-5_smt.b ca-6_smt.a ca-6_smt.b ca-6_smt.c ca-7_smt.a ca-7_smt.b ca-7_smt.c ca-7_smt.d ca-7_smt.e ca-7_smt.f ca-7_smt.g ca-9_smt.a ca-9_smt.b cm-6_smt.a cm-6_smt.b cm-6_smt.c cm-6_smt.d cm-7_smt.a cm-7_smt.b cm-8_smt.a cm-8_smt.b cm-10_smt.a cm-10_smt.b cm-10_smt.c cm-11_smt.a cm-11_smt.b cm-11_smt.c cp-2_smt.a cp-2_smt.b cp-2_smt.c cp-2_smt.d cp-2_smt.e cp-2_smt.f cp-2_smt.g cp-3_smt.a cp-3_smt.b cp-3_smt.c cp-4_smt.a cp-4_smt.b cp-4_smt.c cp-9_smt.a cp-9_smt.b cp-9_smt.c cp-9_smt.d ia-4_smt.a ia-4_smt.b ia-4_smt.c ia-4_smt.d ia-4_smt.e ia-5_smt.a ia-5_smt.b ia-5_smt.c ia-5_smt.d ia-5_smt.e ia-5_smt.f ia-5_smt.g ia-5_smt.h ia-5_smt.i ia-5_smt.j ia-5.1_smt.a ia-5.1_smt.b ia-5.1_smt.c ia-5.1_smt.d ia-5.1_smt.e ia-5.1_smt.f ir-2_smt.a ir-2_smt.b ir-2_smt.c ir-4_smt.a ir-4_smt.b ir-4_smt.c ir-6_smt.a ir-6_smt.b ir-8_smt.a ir-8_smt.b ir-8_smt.c ir-8_smt.d ir-8_smt.e ir-8_smt.f ma-2_smt.a ma-2_smt.b ma-2_smt.c ma-2_smt.d ma-2_smt.e ma-2_smt.f ma-4_smt.a ma-4_smt.b ma-4_smt.c ma-4_smt.d ma-4_smt.e ma-5_smt.a ma-5_smt.b ma-5_smt.c mp-6_smt.a mp-6_smt.b pe-2_smt.a pe-2_smt.b pe-2_smt.c pe-2_smt.d pe-3_smt.a pe-3_smt.b pe-3_smt.c pe-3_smt.d pe-3_smt.e pe-3_smt.f pe-3_smt.g pe-6_smt.a pe-6_smt.b pe-6_smt.c pe-8_smt.a pe-8_smt.b pe-14_smt.a pe-14_smt.b pl-2_smt.a pl-2_smt.b pl-2_smt.c pl-2_smt.d pl-2_smt.e pl-4_smt.a pl-4_smt.b pl-4_smt.c pl-4_smt.d ps-2_smt.a ps-2_smt.b ps-2_smt.c ps-3_smt.a ps-3_smt.b ps-4_smt.a ps-4_smt.b ps-4_smt.c ps-4_smt.d ps-4_smt.e ps-4_smt.f ps-5_smt.a ps-5_smt.b ps-5_smt.c ps-5_smt.d ps-6_smt.a ps-6_smt.b ps-6_smt.c ps-7_smt.a ps-7_smt.b ps-7_smt.c ps-7_smt.d ps-7_smt.e ps-8_smt.a ps-8_smt.b ra-2_smt.a ra-2_smt.b ra-2_smt.c ra-3_smt.a ra-3_smt.b ra-3_smt.c ra-3_smt.d ra-3_smt.e ra-5_smt.a ra-5_smt.b ra-5_smt.c ra-5_smt.d ra-5_smt.e sa-2_smt.a sa-2_smt.b sa-2_smt.c sa-3_smt.a sa-3_smt.b sa-3_smt.c sa-3_smt.d sa-4_smt.a sa-4_smt.b sa-4_smt.c sa-4_smt.d sa-4_smt.e sa-4_smt.f sa-4_smt.g sa-5_smt.a sa-5_smt.b sa-5_smt.c sa-5_smt.d sa-5_smt.e sa-9_smt.a sa-9_smt.b sa-9_smt.c sc-7_smt.a sc-7_smt.b sc-7_smt.c sc-15_smt.a sc-15_smt.b sc-20_smt.a sc-20_smt.b si-2_smt.a si-2_smt.b si-2_smt.c si-2_smt.d si-3_smt.a si-3_smt.b si-3_smt.c si-3_smt.d si-4_smt.a si-4_smt.b si-4_smt.c si-4_smt.d si-4_smt.e si-4_smt.f si-4_smt.g si-5_smt.a si-5_smt.b si-5_smt.c si-5_smt.d.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement at-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:failed-assert test="$components-count >= $required-components-count" | |
| id="missing-response-components" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]"> | |
| <svrl:text>Response statements for at-1_smt.a.1 must have at least 1 component with a description. There are 0.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:remarks"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-remarks" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:remarks[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement at-1_smt.a.1 has remarks not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:failed-assert test="$components-count >= $required-components-count" | |
| id="missing-response-components" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]"> | |
| <svrl:text>Response statements for at-1_smt.a.2 must have at least 1 component with a description. There are 0.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:remarks"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-remarks" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:remarks[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement at-1_smt.a.2 has remarks not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][4]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement at-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][5]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement at-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][4]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:failed-assert test="not(exists($missing))" | |
| id="missing-response-points" | |
| role="error" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][4]"> | |
| <svrl:text>This SSP has not implemented a statement for each of the following lettered response points for required controls: ac-2_smt.b ac-2_smt.c ac-2_smt.d ac-2_smt.e ac-2_smt.f ac-2_smt.g ac-2_smt.h ac-2_smt.i ac-2_smt.j ac-2_smt.k ac-7_smt.a ac-7_smt.b ac-8_smt.a ac-8_smt.b ac-8_smt.c ac-14_smt.a ac-14_smt.b ac-17_smt.a ac-17_smt.b ac-18_smt.a ac-18_smt.b ac-19_smt.a ac-19_smt.b ac-20_smt.a ac-20_smt.b ac-22_smt.a ac-22_smt.b ac-22_smt.c ac-22_smt.d at-2_smt.a at-2_smt.b at-2_smt.c at-3_smt.a at-3_smt.b at-3_smt.c at-4_smt.a at-4_smt.b au-2_smt.a au-2_smt.b au-2_smt.c au-2_smt.d au-5_smt.a au-5_smt.b au-6_smt.a au-6_smt.b au-8_smt.a au-8_smt.b au-12_smt.a au-12_smt.b au-12_smt.c ca-2_smt.a ca-2_smt.b ca-2_smt.c ca-2_smt.d ca-3_smt.a ca-3_smt.b ca-3_smt.c ca-5_smt.a ca-5_smt.b ca-6_smt.a ca-6_smt.b ca-6_smt.c ca-7_smt.a ca-7_smt.b ca-7_smt.c ca-7_smt.d ca-7_smt.e ca-7_smt.f ca-7_smt.g ca-9_smt.a ca-9_smt.b cm-6_smt.a cm-6_smt.b cm-6_smt.c cm-6_smt.d cm-7_smt.a cm-7_smt.b cm-8_smt.a cm-8_smt.b cm-10_smt.a cm-10_smt.b cm-10_smt.c cm-11_smt.a cm-11_smt.b cm-11_smt.c cp-2_smt.a cp-2_smt.b cp-2_smt.c cp-2_smt.d cp-2_smt.e cp-2_smt.f cp-2_smt.g cp-3_smt.a cp-3_smt.b cp-3_smt.c cp-4_smt.a cp-4_smt.b cp-4_smt.c cp-9_smt.a cp-9_smt.b cp-9_smt.c cp-9_smt.d ia-4_smt.a ia-4_smt.b ia-4_smt.c ia-4_smt.d ia-4_smt.e ia-5_smt.a ia-5_smt.b ia-5_smt.c ia-5_smt.d ia-5_smt.e ia-5_smt.f ia-5_smt.g ia-5_smt.h ia-5_smt.i ia-5_smt.j ia-5.1_smt.a ia-5.1_smt.b ia-5.1_smt.c ia-5.1_smt.d ia-5.1_smt.e ia-5.1_smt.f ir-2_smt.a ir-2_smt.b ir-2_smt.c ir-4_smt.a ir-4_smt.b ir-4_smt.c ir-6_smt.a ir-6_smt.b ir-8_smt.a ir-8_smt.b ir-8_smt.c ir-8_smt.d ir-8_smt.e ir-8_smt.f ma-2_smt.a ma-2_smt.b ma-2_smt.c ma-2_smt.d ma-2_smt.e ma-2_smt.f ma-4_smt.a ma-4_smt.b ma-4_smt.c ma-4_smt.d ma-4_smt.e ma-5_smt.a ma-5_smt.b ma-5_smt.c mp-6_smt.a mp-6_smt.b pe-2_smt.a pe-2_smt.b pe-2_smt.c pe-2_smt.d pe-3_smt.a pe-3_smt.b pe-3_smt.c pe-3_smt.d pe-3_smt.e pe-3_smt.f pe-3_smt.g pe-6_smt.a pe-6_smt.b pe-6_smt.c pe-8_smt.a pe-8_smt.b pe-14_smt.a pe-14_smt.b pl-2_smt.a pl-2_smt.b pl-2_smt.c pl-2_smt.d pl-2_smt.e pl-4_smt.a pl-4_smt.b pl-4_smt.c pl-4_smt.d ps-2_smt.a ps-2_smt.b ps-2_smt.c ps-3_smt.a ps-3_smt.b ps-4_smt.a ps-4_smt.b ps-4_smt.c ps-4_smt.d ps-4_smt.e ps-4_smt.f ps-5_smt.a ps-5_smt.b ps-5_smt.c ps-5_smt.d ps-6_smt.a ps-6_smt.b ps-6_smt.c ps-7_smt.a ps-7_smt.b ps-7_smt.c ps-7_smt.d ps-7_smt.e ps-8_smt.a ps-8_smt.b ra-2_smt.a ra-2_smt.b ra-2_smt.c ra-3_smt.a ra-3_smt.b ra-3_smt.c ra-3_smt.d ra-3_smt.e ra-5_smt.a ra-5_smt.b ra-5_smt.c ra-5_smt.d ra-5_smt.e sa-2_smt.a sa-2_smt.b sa-2_smt.c sa-3_smt.a sa-3_smt.b sa-3_smt.c sa-3_smt.d sa-4_smt.a sa-4_smt.b sa-4_smt.c sa-4_smt.d sa-4_smt.e sa-4_smt.f sa-4_smt.g sa-5_smt.a sa-5_smt.b sa-5_smt.c sa-5_smt.d sa-5_smt.e sa-9_smt.a sa-9_smt.b sa-9_smt.c sc-7_smt.a sc-7_smt.b sc-7_smt.c sc-15_smt.a sc-15_smt.b sc-20_smt.a sc-20_smt.b si-2_smt.a si-2_smt.b si-2_smt.c si-2_smt.d si-3_smt.a si-3_smt.b si-3_smt.c si-3_smt.d si-4_smt.a si-4_smt.b si-4_smt.c si-4_smt.d si-4_smt.e si-4_smt.f si-4_smt.g si-5_smt.a si-5_smt.b si-5_smt.c si-5_smt.d.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][4]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement au-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][4]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement au-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][4]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement au-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][5]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:failed-assert test="not(exists($missing))" | |
| id="missing-response-points" | |
| role="error" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][5]"> | |
| <svrl:text>This SSP has not implemented a statement for each of the following lettered response points for required controls: ac-2_smt.b ac-2_smt.c ac-2_smt.d ac-2_smt.e ac-2_smt.f ac-2_smt.g ac-2_smt.h ac-2_smt.i ac-2_smt.j ac-2_smt.k ac-7_smt.a ac-7_smt.b ac-8_smt.a ac-8_smt.b ac-8_smt.c ac-14_smt.a ac-14_smt.b ac-17_smt.a ac-17_smt.b ac-18_smt.a ac-18_smt.b ac-19_smt.a ac-19_smt.b ac-20_smt.a ac-20_smt.b ac-22_smt.a ac-22_smt.b ac-22_smt.c ac-22_smt.d at-2_smt.a at-2_smt.b at-2_smt.c at-3_smt.a at-3_smt.b at-3_smt.c at-4_smt.a at-4_smt.b au-2_smt.a au-2_smt.b au-2_smt.c au-2_smt.d au-5_smt.a au-5_smt.b au-6_smt.a au-6_smt.b au-8_smt.a au-8_smt.b au-12_smt.a au-12_smt.b au-12_smt.c ca-2_smt.a ca-2_smt.b ca-2_smt.c ca-2_smt.d ca-3_smt.a ca-3_smt.b ca-3_smt.c ca-5_smt.a ca-5_smt.b ca-6_smt.a ca-6_smt.b ca-6_smt.c ca-7_smt.a ca-7_smt.b ca-7_smt.c ca-7_smt.d ca-7_smt.e ca-7_smt.f ca-7_smt.g ca-9_smt.a ca-9_smt.b cm-6_smt.a cm-6_smt.b cm-6_smt.c cm-6_smt.d cm-7_smt.a cm-7_smt.b cm-8_smt.a cm-8_smt.b cm-10_smt.a cm-10_smt.b cm-10_smt.c cm-11_smt.a cm-11_smt.b cm-11_smt.c cp-2_smt.a cp-2_smt.b cp-2_smt.c cp-2_smt.d cp-2_smt.e cp-2_smt.f cp-2_smt.g cp-3_smt.a cp-3_smt.b cp-3_smt.c cp-4_smt.a cp-4_smt.b cp-4_smt.c cp-9_smt.a cp-9_smt.b cp-9_smt.c cp-9_smt.d ia-4_smt.a ia-4_smt.b ia-4_smt.c ia-4_smt.d ia-4_smt.e ia-5_smt.a ia-5_smt.b ia-5_smt.c ia-5_smt.d ia-5_smt.e ia-5_smt.f ia-5_smt.g ia-5_smt.h ia-5_smt.i ia-5_smt.j ia-5.1_smt.a ia-5.1_smt.b ia-5.1_smt.c ia-5.1_smt.d ia-5.1_smt.e ia-5.1_smt.f ir-2_smt.a ir-2_smt.b ir-2_smt.c ir-4_smt.a ir-4_smt.b ir-4_smt.c ir-6_smt.a ir-6_smt.b ir-8_smt.a ir-8_smt.b ir-8_smt.c ir-8_smt.d ir-8_smt.e ir-8_smt.f ma-2_smt.a ma-2_smt.b ma-2_smt.c ma-2_smt.d ma-2_smt.e ma-2_smt.f ma-4_smt.a ma-4_smt.b ma-4_smt.c ma-4_smt.d ma-4_smt.e ma-5_smt.a ma-5_smt.b ma-5_smt.c mp-6_smt.a mp-6_smt.b pe-2_smt.a pe-2_smt.b pe-2_smt.c pe-2_smt.d pe-3_smt.a pe-3_smt.b pe-3_smt.c pe-3_smt.d pe-3_smt.e pe-3_smt.f pe-3_smt.g pe-6_smt.a pe-6_smt.b pe-6_smt.c pe-8_smt.a pe-8_smt.b pe-14_smt.a pe-14_smt.b pl-2_smt.a pl-2_smt.b pl-2_smt.c pl-2_smt.d pl-2_smt.e pl-4_smt.a pl-4_smt.b pl-4_smt.c pl-4_smt.d ps-2_smt.a ps-2_smt.b ps-2_smt.c ps-3_smt.a ps-3_smt.b ps-4_smt.a ps-4_smt.b ps-4_smt.c ps-4_smt.d ps-4_smt.e ps-4_smt.f ps-5_smt.a ps-5_smt.b ps-5_smt.c ps-5_smt.d ps-6_smt.a ps-6_smt.b ps-6_smt.c ps-7_smt.a ps-7_smt.b ps-7_smt.c ps-7_smt.d ps-7_smt.e ps-8_smt.a ps-8_smt.b ra-2_smt.a ra-2_smt.b ra-2_smt.c ra-3_smt.a ra-3_smt.b ra-3_smt.c ra-3_smt.d ra-3_smt.e ra-5_smt.a ra-5_smt.b ra-5_smt.c ra-5_smt.d ra-5_smt.e sa-2_smt.a sa-2_smt.b sa-2_smt.c sa-3_smt.a sa-3_smt.b sa-3_smt.c sa-3_smt.d sa-4_smt.a sa-4_smt.b sa-4_smt.c sa-4_smt.d sa-4_smt.e sa-4_smt.f sa-4_smt.g sa-5_smt.a sa-5_smt.b sa-5_smt.c sa-5_smt.d sa-5_smt.e sa-9_smt.a sa-9_smt.b sa-9_smt.c sc-7_smt.a sc-7_smt.b sc-7_smt.c sc-15_smt.a sc-15_smt.b sc-20_smt.a sc-20_smt.b si-2_smt.a si-2_smt.b si-2_smt.c si-2_smt.d si-3_smt.a si-3_smt.b si-3_smt.c si-3_smt.d si-4_smt.a si-4_smt.b si-4_smt.c si-4_smt.d si-4_smt.e si-4_smt.f si-4_smt.g si-5_smt.a si-5_smt.b si-5_smt.c si-5_smt.d.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][5]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ca-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][5]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ca-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][5]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ca-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][6]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:failed-assert test="not(exists($missing))" | |
| id="missing-response-points" | |
| role="error" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][6]"> | |
| <svrl:text>This SSP has not implemented a statement for each of the following lettered response points for required controls: ac-2_smt.b ac-2_smt.c ac-2_smt.d ac-2_smt.e ac-2_smt.f ac-2_smt.g ac-2_smt.h ac-2_smt.i ac-2_smt.j ac-2_smt.k ac-7_smt.a ac-7_smt.b ac-8_smt.a ac-8_smt.b ac-8_smt.c ac-14_smt.a ac-14_smt.b ac-17_smt.a ac-17_smt.b ac-18_smt.a ac-18_smt.b ac-19_smt.a ac-19_smt.b ac-20_smt.a ac-20_smt.b ac-22_smt.a ac-22_smt.b ac-22_smt.c ac-22_smt.d at-2_smt.a at-2_smt.b at-2_smt.c at-3_smt.a at-3_smt.b at-3_smt.c at-4_smt.a at-4_smt.b au-2_smt.a au-2_smt.b au-2_smt.c au-2_smt.d au-5_smt.a au-5_smt.b au-6_smt.a au-6_smt.b au-8_smt.a au-8_smt.b au-12_smt.a au-12_smt.b au-12_smt.c ca-2_smt.a ca-2_smt.b ca-2_smt.c ca-2_smt.d ca-3_smt.a ca-3_smt.b ca-3_smt.c ca-5_smt.a ca-5_smt.b ca-6_smt.a ca-6_smt.b ca-6_smt.c ca-7_smt.a ca-7_smt.b ca-7_smt.c ca-7_smt.d ca-7_smt.e ca-7_smt.f ca-7_smt.g ca-9_smt.a ca-9_smt.b cm-6_smt.a cm-6_smt.b cm-6_smt.c cm-6_smt.d cm-7_smt.a cm-7_smt.b cm-8_smt.a cm-8_smt.b cm-10_smt.a cm-10_smt.b cm-10_smt.c cm-11_smt.a cm-11_smt.b cm-11_smt.c cp-2_smt.a cp-2_smt.b cp-2_smt.c cp-2_smt.d cp-2_smt.e cp-2_smt.f cp-2_smt.g cp-3_smt.a cp-3_smt.b cp-3_smt.c cp-4_smt.a cp-4_smt.b cp-4_smt.c cp-9_smt.a cp-9_smt.b cp-9_smt.c cp-9_smt.d ia-4_smt.a ia-4_smt.b ia-4_smt.c ia-4_smt.d ia-4_smt.e ia-5_smt.a ia-5_smt.b ia-5_smt.c ia-5_smt.d ia-5_smt.e ia-5_smt.f ia-5_smt.g ia-5_smt.h ia-5_smt.i ia-5_smt.j ia-5.1_smt.a ia-5.1_smt.b ia-5.1_smt.c ia-5.1_smt.d ia-5.1_smt.e ia-5.1_smt.f ir-2_smt.a ir-2_smt.b ir-2_smt.c ir-4_smt.a ir-4_smt.b ir-4_smt.c ir-6_smt.a ir-6_smt.b ir-8_smt.a ir-8_smt.b ir-8_smt.c ir-8_smt.d ir-8_smt.e ir-8_smt.f ma-2_smt.a ma-2_smt.b ma-2_smt.c ma-2_smt.d ma-2_smt.e ma-2_smt.f ma-4_smt.a ma-4_smt.b ma-4_smt.c ma-4_smt.d ma-4_smt.e ma-5_smt.a ma-5_smt.b ma-5_smt.c mp-6_smt.a mp-6_smt.b pe-2_smt.a pe-2_smt.b pe-2_smt.c pe-2_smt.d pe-3_smt.a pe-3_smt.b pe-3_smt.c pe-3_smt.d pe-3_smt.e pe-3_smt.f pe-3_smt.g pe-6_smt.a pe-6_smt.b pe-6_smt.c pe-8_smt.a pe-8_smt.b pe-14_smt.a pe-14_smt.b pl-2_smt.a pl-2_smt.b pl-2_smt.c pl-2_smt.d pl-2_smt.e pl-4_smt.a pl-4_smt.b pl-4_smt.c pl-4_smt.d ps-2_smt.a ps-2_smt.b ps-2_smt.c ps-3_smt.a ps-3_smt.b ps-4_smt.a ps-4_smt.b ps-4_smt.c ps-4_smt.d ps-4_smt.e ps-4_smt.f ps-5_smt.a ps-5_smt.b ps-5_smt.c ps-5_smt.d ps-6_smt.a ps-6_smt.b ps-6_smt.c ps-7_smt.a ps-7_smt.b ps-7_smt.c ps-7_smt.d ps-7_smt.e ps-8_smt.a ps-8_smt.b ra-2_smt.a ra-2_smt.b ra-2_smt.c ra-3_smt.a ra-3_smt.b ra-3_smt.c ra-3_smt.d ra-3_smt.e ra-5_smt.a ra-5_smt.b ra-5_smt.c ra-5_smt.d ra-5_smt.e sa-2_smt.a sa-2_smt.b sa-2_smt.c sa-3_smt.a sa-3_smt.b sa-3_smt.c sa-3_smt.d sa-4_smt.a sa-4_smt.b sa-4_smt.c sa-4_smt.d sa-4_smt.e sa-4_smt.f sa-4_smt.g sa-5_smt.a sa-5_smt.b sa-5_smt.c sa-5_smt.d sa-5_smt.e sa-9_smt.a sa-9_smt.b sa-9_smt.c sc-7_smt.a sc-7_smt.b sc-7_smt.c sc-15_smt.a sc-15_smt.b sc-20_smt.a sc-20_smt.b si-2_smt.a si-2_smt.b si-2_smt.c si-2_smt.d si-3_smt.a si-3_smt.b si-3_smt.c si-3_smt.d si-4_smt.a si-4_smt.b si-4_smt.c si-4_smt.d si-4_smt.e si-4_smt.f si-4_smt.g si-5_smt.a si-5_smt.b si-5_smt.c si-5_smt.d.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][6]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement cm-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][6]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement cm-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][6]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement cm-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][7]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:failed-assert test="not(exists($missing))" | |
| id="missing-response-points" | |
| role="error" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][7]"> | |
| <svrl:text>This SSP has not implemented a statement for each of the following lettered response points for required controls: ac-2_smt.b ac-2_smt.c ac-2_smt.d ac-2_smt.e ac-2_smt.f ac-2_smt.g ac-2_smt.h ac-2_smt.i ac-2_smt.j ac-2_smt.k ac-7_smt.a ac-7_smt.b ac-8_smt.a ac-8_smt.b ac-8_smt.c ac-14_smt.a ac-14_smt.b ac-17_smt.a ac-17_smt.b ac-18_smt.a ac-18_smt.b ac-19_smt.a ac-19_smt.b ac-20_smt.a ac-20_smt.b ac-22_smt.a ac-22_smt.b ac-22_smt.c ac-22_smt.d at-2_smt.a at-2_smt.b at-2_smt.c at-3_smt.a at-3_smt.b at-3_smt.c at-4_smt.a at-4_smt.b au-2_smt.a au-2_smt.b au-2_smt.c au-2_smt.d au-5_smt.a au-5_smt.b au-6_smt.a au-6_smt.b au-8_smt.a au-8_smt.b au-12_smt.a au-12_smt.b au-12_smt.c ca-2_smt.a ca-2_smt.b ca-2_smt.c ca-2_smt.d ca-3_smt.a ca-3_smt.b ca-3_smt.c ca-5_smt.a ca-5_smt.b ca-6_smt.a ca-6_smt.b ca-6_smt.c ca-7_smt.a ca-7_smt.b ca-7_smt.c ca-7_smt.d ca-7_smt.e ca-7_smt.f ca-7_smt.g ca-9_smt.a ca-9_smt.b cm-6_smt.a cm-6_smt.b cm-6_smt.c cm-6_smt.d cm-7_smt.a cm-7_smt.b cm-8_smt.a cm-8_smt.b cm-10_smt.a cm-10_smt.b cm-10_smt.c cm-11_smt.a cm-11_smt.b cm-11_smt.c cp-2_smt.a cp-2_smt.b cp-2_smt.c cp-2_smt.d cp-2_smt.e cp-2_smt.f cp-2_smt.g cp-3_smt.a cp-3_smt.b cp-3_smt.c cp-4_smt.a cp-4_smt.b cp-4_smt.c cp-9_smt.a cp-9_smt.b cp-9_smt.c cp-9_smt.d ia-4_smt.a ia-4_smt.b ia-4_smt.c ia-4_smt.d ia-4_smt.e ia-5_smt.a ia-5_smt.b ia-5_smt.c ia-5_smt.d ia-5_smt.e ia-5_smt.f ia-5_smt.g ia-5_smt.h ia-5_smt.i ia-5_smt.j ia-5.1_smt.a ia-5.1_smt.b ia-5.1_smt.c ia-5.1_smt.d ia-5.1_smt.e ia-5.1_smt.f ir-2_smt.a ir-2_smt.b ir-2_smt.c ir-4_smt.a ir-4_smt.b ir-4_smt.c ir-6_smt.a ir-6_smt.b ir-8_smt.a ir-8_smt.b ir-8_smt.c ir-8_smt.d ir-8_smt.e ir-8_smt.f ma-2_smt.a ma-2_smt.b ma-2_smt.c ma-2_smt.d ma-2_smt.e ma-2_smt.f ma-4_smt.a ma-4_smt.b ma-4_smt.c ma-4_smt.d ma-4_smt.e ma-5_smt.a ma-5_smt.b ma-5_smt.c mp-6_smt.a mp-6_smt.b pe-2_smt.a pe-2_smt.b pe-2_smt.c pe-2_smt.d pe-3_smt.a pe-3_smt.b pe-3_smt.c pe-3_smt.d pe-3_smt.e pe-3_smt.f pe-3_smt.g pe-6_smt.a pe-6_smt.b pe-6_smt.c pe-8_smt.a pe-8_smt.b pe-14_smt.a pe-14_smt.b pl-2_smt.a pl-2_smt.b pl-2_smt.c pl-2_smt.d pl-2_smt.e pl-4_smt.a pl-4_smt.b pl-4_smt.c pl-4_smt.d ps-2_smt.a ps-2_smt.b ps-2_smt.c ps-3_smt.a ps-3_smt.b ps-4_smt.a ps-4_smt.b ps-4_smt.c ps-4_smt.d ps-4_smt.e ps-4_smt.f ps-5_smt.a ps-5_smt.b ps-5_smt.c ps-5_smt.d ps-6_smt.a ps-6_smt.b ps-6_smt.c ps-7_smt.a ps-7_smt.b ps-7_smt.c ps-7_smt.d ps-7_smt.e ps-8_smt.a ps-8_smt.b ra-2_smt.a ra-2_smt.b ra-2_smt.c ra-3_smt.a ra-3_smt.b ra-3_smt.c ra-3_smt.d ra-3_smt.e ra-5_smt.a ra-5_smt.b ra-5_smt.c ra-5_smt.d ra-5_smt.e sa-2_smt.a sa-2_smt.b sa-2_smt.c sa-3_smt.a sa-3_smt.b sa-3_smt.c sa-3_smt.d sa-4_smt.a sa-4_smt.b sa-4_smt.c sa-4_smt.d sa-4_smt.e sa-4_smt.f sa-4_smt.g sa-5_smt.a sa-5_smt.b sa-5_smt.c sa-5_smt.d sa-5_smt.e sa-9_smt.a sa-9_smt.b sa-9_smt.c sc-7_smt.a sc-7_smt.b sc-7_smt.c sc-15_smt.a sc-15_smt.b sc-20_smt.a sc-20_smt.b si-2_smt.a si-2_smt.b si-2_smt.c si-2_smt.d si-3_smt.a si-3_smt.b si-3_smt.c si-3_smt.d si-4_smt.a si-4_smt.b si-4_smt.c si-4_smt.d si-4_smt.e si-4_smt.f si-4_smt.g si-5_smt.a si-5_smt.b si-5_smt.c si-5_smt.d.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][7]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement cp-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][7]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement cp-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][7]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement cp-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][8]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:failed-assert test="not(exists($missing))" | |
| id="missing-response-points" | |
| role="error" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][8]"> | |
| <svrl:text>This SSP has not implemented a statement for each of the following lettered response points for required controls: ac-2_smt.b ac-2_smt.c ac-2_smt.d ac-2_smt.e ac-2_smt.f ac-2_smt.g ac-2_smt.h ac-2_smt.i ac-2_smt.j ac-2_smt.k ac-7_smt.a ac-7_smt.b ac-8_smt.a ac-8_smt.b ac-8_smt.c ac-14_smt.a ac-14_smt.b ac-17_smt.a ac-17_smt.b ac-18_smt.a ac-18_smt.b ac-19_smt.a ac-19_smt.b ac-20_smt.a ac-20_smt.b ac-22_smt.a ac-22_smt.b ac-22_smt.c ac-22_smt.d at-2_smt.a at-2_smt.b at-2_smt.c at-3_smt.a at-3_smt.b at-3_smt.c at-4_smt.a at-4_smt.b au-2_smt.a au-2_smt.b au-2_smt.c au-2_smt.d au-5_smt.a au-5_smt.b au-6_smt.a au-6_smt.b au-8_smt.a au-8_smt.b au-12_smt.a au-12_smt.b au-12_smt.c ca-2_smt.a ca-2_smt.b ca-2_smt.c ca-2_smt.d ca-3_smt.a ca-3_smt.b ca-3_smt.c ca-5_smt.a ca-5_smt.b ca-6_smt.a ca-6_smt.b ca-6_smt.c ca-7_smt.a ca-7_smt.b ca-7_smt.c ca-7_smt.d ca-7_smt.e ca-7_smt.f ca-7_smt.g ca-9_smt.a ca-9_smt.b cm-6_smt.a cm-6_smt.b cm-6_smt.c cm-6_smt.d cm-7_smt.a cm-7_smt.b cm-8_smt.a cm-8_smt.b cm-10_smt.a cm-10_smt.b cm-10_smt.c cm-11_smt.a cm-11_smt.b cm-11_smt.c cp-2_smt.a cp-2_smt.b cp-2_smt.c cp-2_smt.d cp-2_smt.e cp-2_smt.f cp-2_smt.g cp-3_smt.a cp-3_smt.b cp-3_smt.c cp-4_smt.a cp-4_smt.b cp-4_smt.c cp-9_smt.a cp-9_smt.b cp-9_smt.c cp-9_smt.d ia-4_smt.a ia-4_smt.b ia-4_smt.c ia-4_smt.d ia-4_smt.e ia-5_smt.a ia-5_smt.b ia-5_smt.c ia-5_smt.d ia-5_smt.e ia-5_smt.f ia-5_smt.g ia-5_smt.h ia-5_smt.i ia-5_smt.j ia-5.1_smt.a ia-5.1_smt.b ia-5.1_smt.c ia-5.1_smt.d ia-5.1_smt.e ia-5.1_smt.f ir-2_smt.a ir-2_smt.b ir-2_smt.c ir-4_smt.a ir-4_smt.b ir-4_smt.c ir-6_smt.a ir-6_smt.b ir-8_smt.a ir-8_smt.b ir-8_smt.c ir-8_smt.d ir-8_smt.e ir-8_smt.f ma-2_smt.a ma-2_smt.b ma-2_smt.c ma-2_smt.d ma-2_smt.e ma-2_smt.f ma-4_smt.a ma-4_smt.b ma-4_smt.c ma-4_smt.d ma-4_smt.e ma-5_smt.a ma-5_smt.b ma-5_smt.c mp-6_smt.a mp-6_smt.b pe-2_smt.a pe-2_smt.b pe-2_smt.c pe-2_smt.d pe-3_smt.a pe-3_smt.b pe-3_smt.c pe-3_smt.d pe-3_smt.e pe-3_smt.f pe-3_smt.g pe-6_smt.a pe-6_smt.b pe-6_smt.c pe-8_smt.a pe-8_smt.b pe-14_smt.a pe-14_smt.b pl-2_smt.a pl-2_smt.b pl-2_smt.c pl-2_smt.d pl-2_smt.e pl-4_smt.a pl-4_smt.b pl-4_smt.c pl-4_smt.d ps-2_smt.a ps-2_smt.b ps-2_smt.c ps-3_smt.a ps-3_smt.b ps-4_smt.a ps-4_smt.b ps-4_smt.c ps-4_smt.d ps-4_smt.e ps-4_smt.f ps-5_smt.a ps-5_smt.b ps-5_smt.c ps-5_smt.d ps-6_smt.a ps-6_smt.b ps-6_smt.c ps-7_smt.a ps-7_smt.b ps-7_smt.c ps-7_smt.d ps-7_smt.e ps-8_smt.a ps-8_smt.b ra-2_smt.a ra-2_smt.b ra-2_smt.c ra-3_smt.a ra-3_smt.b ra-3_smt.c ra-3_smt.d ra-3_smt.e ra-5_smt.a ra-5_smt.b ra-5_smt.c ra-5_smt.d ra-5_smt.e sa-2_smt.a sa-2_smt.b sa-2_smt.c sa-3_smt.a sa-3_smt.b sa-3_smt.c sa-3_smt.d sa-4_smt.a sa-4_smt.b sa-4_smt.c sa-4_smt.d sa-4_smt.e sa-4_smt.f sa-4_smt.g sa-5_smt.a sa-5_smt.b sa-5_smt.c sa-5_smt.d sa-5_smt.e sa-9_smt.a sa-9_smt.b sa-9_smt.c sc-7_smt.a sc-7_smt.b sc-7_smt.c sc-15_smt.a sc-15_smt.b sc-20_smt.a sc-20_smt.b si-2_smt.a si-2_smt.b si-2_smt.c si-2_smt.d si-3_smt.a si-3_smt.b si-3_smt.c si-3_smt.d si-4_smt.a si-4_smt.b si-4_smt.c si-4_smt.d si-4_smt.e si-4_smt.f si-4_smt.g si-5_smt.a si-5_smt.b si-5_smt.c si-5_smt.d.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][8]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ia-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][8]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ia-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][8]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ia-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][9]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:failed-assert test="not(exists($missing))" | |
| id="missing-response-points" | |
| role="error" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][9]"> | |
| <svrl:text>This SSP has not implemented a statement for each of the following lettered response points for required controls: ac-2_smt.b ac-2_smt.c ac-2_smt.d ac-2_smt.e ac-2_smt.f ac-2_smt.g ac-2_smt.h ac-2_smt.i ac-2_smt.j ac-2_smt.k ac-7_smt.a ac-7_smt.b ac-8_smt.a ac-8_smt.b ac-8_smt.c ac-14_smt.a ac-14_smt.b ac-17_smt.a ac-17_smt.b ac-18_smt.a ac-18_smt.b ac-19_smt.a ac-19_smt.b ac-20_smt.a ac-20_smt.b ac-22_smt.a ac-22_smt.b ac-22_smt.c ac-22_smt.d at-2_smt.a at-2_smt.b at-2_smt.c at-3_smt.a at-3_smt.b at-3_smt.c at-4_smt.a at-4_smt.b au-2_smt.a au-2_smt.b au-2_smt.c au-2_smt.d au-5_smt.a au-5_smt.b au-6_smt.a au-6_smt.b au-8_smt.a au-8_smt.b au-12_smt.a au-12_smt.b au-12_smt.c ca-2_smt.a ca-2_smt.b ca-2_smt.c ca-2_smt.d ca-3_smt.a ca-3_smt.b ca-3_smt.c ca-5_smt.a ca-5_smt.b ca-6_smt.a ca-6_smt.b ca-6_smt.c ca-7_smt.a ca-7_smt.b ca-7_smt.c ca-7_smt.d ca-7_smt.e ca-7_smt.f ca-7_smt.g ca-9_smt.a ca-9_smt.b cm-6_smt.a cm-6_smt.b cm-6_smt.c cm-6_smt.d cm-7_smt.a cm-7_smt.b cm-8_smt.a cm-8_smt.b cm-10_smt.a cm-10_smt.b cm-10_smt.c cm-11_smt.a cm-11_smt.b cm-11_smt.c cp-2_smt.a cp-2_smt.b cp-2_smt.c cp-2_smt.d cp-2_smt.e cp-2_smt.f cp-2_smt.g cp-3_smt.a cp-3_smt.b cp-3_smt.c cp-4_smt.a cp-4_smt.b cp-4_smt.c cp-9_smt.a cp-9_smt.b cp-9_smt.c cp-9_smt.d ia-4_smt.a ia-4_smt.b ia-4_smt.c ia-4_smt.d ia-4_smt.e ia-5_smt.a ia-5_smt.b ia-5_smt.c ia-5_smt.d ia-5_smt.e ia-5_smt.f ia-5_smt.g ia-5_smt.h ia-5_smt.i ia-5_smt.j ia-5.1_smt.a ia-5.1_smt.b ia-5.1_smt.c ia-5.1_smt.d ia-5.1_smt.e ia-5.1_smt.f ir-2_smt.a ir-2_smt.b ir-2_smt.c ir-4_smt.a ir-4_smt.b ir-4_smt.c ir-6_smt.a ir-6_smt.b ir-8_smt.a ir-8_smt.b ir-8_smt.c ir-8_smt.d ir-8_smt.e ir-8_smt.f ma-2_smt.a ma-2_smt.b ma-2_smt.c ma-2_smt.d ma-2_smt.e ma-2_smt.f ma-4_smt.a ma-4_smt.b ma-4_smt.c ma-4_smt.d ma-4_smt.e ma-5_smt.a ma-5_smt.b ma-5_smt.c mp-6_smt.a mp-6_smt.b pe-2_smt.a pe-2_smt.b pe-2_smt.c pe-2_smt.d pe-3_smt.a pe-3_smt.b pe-3_smt.c pe-3_smt.d pe-3_smt.e pe-3_smt.f pe-3_smt.g pe-6_smt.a pe-6_smt.b pe-6_smt.c pe-8_smt.a pe-8_smt.b pe-14_smt.a pe-14_smt.b pl-2_smt.a pl-2_smt.b pl-2_smt.c pl-2_smt.d pl-2_smt.e pl-4_smt.a pl-4_smt.b pl-4_smt.c pl-4_smt.d ps-2_smt.a ps-2_smt.b ps-2_smt.c ps-3_smt.a ps-3_smt.b ps-4_smt.a ps-4_smt.b ps-4_smt.c ps-4_smt.d ps-4_smt.e ps-4_smt.f ps-5_smt.a ps-5_smt.b ps-5_smt.c ps-5_smt.d ps-6_smt.a ps-6_smt.b ps-6_smt.c ps-7_smt.a ps-7_smt.b ps-7_smt.c ps-7_smt.d ps-7_smt.e ps-8_smt.a ps-8_smt.b ra-2_smt.a ra-2_smt.b ra-2_smt.c ra-3_smt.a ra-3_smt.b ra-3_smt.c ra-3_smt.d ra-3_smt.e ra-5_smt.a ra-5_smt.b ra-5_smt.c ra-5_smt.d ra-5_smt.e sa-2_smt.a sa-2_smt.b sa-2_smt.c sa-3_smt.a sa-3_smt.b sa-3_smt.c sa-3_smt.d sa-4_smt.a sa-4_smt.b sa-4_smt.c sa-4_smt.d sa-4_smt.e sa-4_smt.f sa-4_smt.g sa-5_smt.a sa-5_smt.b sa-5_smt.c sa-5_smt.d sa-5_smt.e sa-9_smt.a sa-9_smt.b sa-9_smt.c sc-7_smt.a sc-7_smt.b sc-7_smt.c sc-15_smt.a sc-15_smt.b sc-20_smt.a sc-20_smt.b si-2_smt.a si-2_smt.b si-2_smt.c si-2_smt.d si-3_smt.a si-3_smt.b si-3_smt.c si-3_smt.d si-4_smt.a si-4_smt.b si-4_smt.c si-4_smt.d si-4_smt.e si-4_smt.f si-4_smt.g si-5_smt.a si-5_smt.b si-5_smt.c si-5_smt.d.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][9]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ir-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][9]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ir-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][9]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ir-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][10]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:failed-assert test="not(exists($missing))" | |
| id="missing-response-points" | |
| role="error" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][10]"> | |
| <svrl:text>This SSP has not implemented a statement for each of the following lettered response points for required controls: ac-2_smt.b ac-2_smt.c ac-2_smt.d ac-2_smt.e ac-2_smt.f ac-2_smt.g ac-2_smt.h ac-2_smt.i ac-2_smt.j ac-2_smt.k ac-7_smt.a ac-7_smt.b ac-8_smt.a ac-8_smt.b ac-8_smt.c ac-14_smt.a ac-14_smt.b ac-17_smt.a ac-17_smt.b ac-18_smt.a ac-18_smt.b ac-19_smt.a ac-19_smt.b ac-20_smt.a ac-20_smt.b ac-22_smt.a ac-22_smt.b ac-22_smt.c ac-22_smt.d at-2_smt.a at-2_smt.b at-2_smt.c at-3_smt.a at-3_smt.b at-3_smt.c at-4_smt.a at-4_smt.b au-2_smt.a au-2_smt.b au-2_smt.c au-2_smt.d au-5_smt.a au-5_smt.b au-6_smt.a au-6_smt.b au-8_smt.a au-8_smt.b au-12_smt.a au-12_smt.b au-12_smt.c ca-2_smt.a ca-2_smt.b ca-2_smt.c ca-2_smt.d ca-3_smt.a ca-3_smt.b ca-3_smt.c ca-5_smt.a ca-5_smt.b ca-6_smt.a ca-6_smt.b ca-6_smt.c ca-7_smt.a ca-7_smt.b ca-7_smt.c ca-7_smt.d ca-7_smt.e ca-7_smt.f ca-7_smt.g ca-9_smt.a ca-9_smt.b cm-6_smt.a cm-6_smt.b cm-6_smt.c cm-6_smt.d cm-7_smt.a cm-7_smt.b cm-8_smt.a cm-8_smt.b cm-10_smt.a cm-10_smt.b cm-10_smt.c cm-11_smt.a cm-11_smt.b cm-11_smt.c cp-2_smt.a cp-2_smt.b cp-2_smt.c cp-2_smt.d cp-2_smt.e cp-2_smt.f cp-2_smt.g cp-3_smt.a cp-3_smt.b cp-3_smt.c cp-4_smt.a cp-4_smt.b cp-4_smt.c cp-9_smt.a cp-9_smt.b cp-9_smt.c cp-9_smt.d ia-4_smt.a ia-4_smt.b ia-4_smt.c ia-4_smt.d ia-4_smt.e ia-5_smt.a ia-5_smt.b ia-5_smt.c ia-5_smt.d ia-5_smt.e ia-5_smt.f ia-5_smt.g ia-5_smt.h ia-5_smt.i ia-5_smt.j ia-5.1_smt.a ia-5.1_smt.b ia-5.1_smt.c ia-5.1_smt.d ia-5.1_smt.e ia-5.1_smt.f ir-2_smt.a ir-2_smt.b ir-2_smt.c ir-4_smt.a ir-4_smt.b ir-4_smt.c ir-6_smt.a ir-6_smt.b ir-8_smt.a ir-8_smt.b ir-8_smt.c ir-8_smt.d ir-8_smt.e ir-8_smt.f ma-2_smt.a ma-2_smt.b ma-2_smt.c ma-2_smt.d ma-2_smt.e ma-2_smt.f ma-4_smt.a ma-4_smt.b ma-4_smt.c ma-4_smt.d ma-4_smt.e ma-5_smt.a ma-5_smt.b ma-5_smt.c mp-6_smt.a mp-6_smt.b pe-2_smt.a pe-2_smt.b pe-2_smt.c pe-2_smt.d pe-3_smt.a pe-3_smt.b pe-3_smt.c pe-3_smt.d pe-3_smt.e pe-3_smt.f pe-3_smt.g pe-6_smt.a pe-6_smt.b pe-6_smt.c pe-8_smt.a pe-8_smt.b pe-14_smt.a pe-14_smt.b pl-2_smt.a pl-2_smt.b pl-2_smt.c pl-2_smt.d pl-2_smt.e pl-4_smt.a pl-4_smt.b pl-4_smt.c pl-4_smt.d ps-2_smt.a ps-2_smt.b ps-2_smt.c ps-3_smt.a ps-3_smt.b ps-4_smt.a ps-4_smt.b ps-4_smt.c ps-4_smt.d ps-4_smt.e ps-4_smt.f ps-5_smt.a ps-5_smt.b ps-5_smt.c ps-5_smt.d ps-6_smt.a ps-6_smt.b ps-6_smt.c ps-7_smt.a ps-7_smt.b ps-7_smt.c ps-7_smt.d ps-7_smt.e ps-8_smt.a ps-8_smt.b ra-2_smt.a ra-2_smt.b ra-2_smt.c ra-3_smt.a ra-3_smt.b ra-3_smt.c ra-3_smt.d ra-3_smt.e ra-5_smt.a ra-5_smt.b ra-5_smt.c ra-5_smt.d ra-5_smt.e sa-2_smt.a sa-2_smt.b sa-2_smt.c sa-3_smt.a sa-3_smt.b sa-3_smt.c sa-3_smt.d sa-4_smt.a sa-4_smt.b sa-4_smt.c sa-4_smt.d sa-4_smt.e sa-4_smt.f sa-4_smt.g sa-5_smt.a sa-5_smt.b sa-5_smt.c sa-5_smt.d sa-5_smt.e sa-9_smt.a sa-9_smt.b sa-9_smt.c sc-7_smt.a sc-7_smt.b sc-7_smt.c sc-15_smt.a sc-15_smt.b sc-20_smt.a sc-20_smt.b si-2_smt.a si-2_smt.b si-2_smt.c si-2_smt.d si-3_smt.a si-3_smt.b si-3_smt.c si-3_smt.d si-4_smt.a si-4_smt.b si-4_smt.c si-4_smt.d si-4_smt.e si-4_smt.f si-4_smt.g si-5_smt.a si-5_smt.b si-5_smt.c si-5_smt.d.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][10]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ma-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][10]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ma-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][10]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ma-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][11]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:failed-assert test="not(exists($missing))" | |
| id="missing-response-points" | |
| role="error" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][11]"> | |
| <svrl:text>This SSP has not implemented a statement for each of the following lettered response points for required controls: ac-2_smt.b ac-2_smt.c ac-2_smt.d ac-2_smt.e ac-2_smt.f ac-2_smt.g ac-2_smt.h ac-2_smt.i ac-2_smt.j ac-2_smt.k ac-7_smt.a ac-7_smt.b ac-8_smt.a ac-8_smt.b ac-8_smt.c ac-14_smt.a ac-14_smt.b ac-17_smt.a ac-17_smt.b ac-18_smt.a ac-18_smt.b ac-19_smt.a ac-19_smt.b ac-20_smt.a ac-20_smt.b ac-22_smt.a ac-22_smt.b ac-22_smt.c ac-22_smt.d at-2_smt.a at-2_smt.b at-2_smt.c at-3_smt.a at-3_smt.b at-3_smt.c at-4_smt.a at-4_smt.b au-2_smt.a au-2_smt.b au-2_smt.c au-2_smt.d au-5_smt.a au-5_smt.b au-6_smt.a au-6_smt.b au-8_smt.a au-8_smt.b au-12_smt.a au-12_smt.b au-12_smt.c ca-2_smt.a ca-2_smt.b ca-2_smt.c ca-2_smt.d ca-3_smt.a ca-3_smt.b ca-3_smt.c ca-5_smt.a ca-5_smt.b ca-6_smt.a ca-6_smt.b ca-6_smt.c ca-7_smt.a ca-7_smt.b ca-7_smt.c ca-7_smt.d ca-7_smt.e ca-7_smt.f ca-7_smt.g ca-9_smt.a ca-9_smt.b cm-6_smt.a cm-6_smt.b cm-6_smt.c cm-6_smt.d cm-7_smt.a cm-7_smt.b cm-8_smt.a cm-8_smt.b cm-10_smt.a cm-10_smt.b cm-10_smt.c cm-11_smt.a cm-11_smt.b cm-11_smt.c cp-2_smt.a cp-2_smt.b cp-2_smt.c cp-2_smt.d cp-2_smt.e cp-2_smt.f cp-2_smt.g cp-3_smt.a cp-3_smt.b cp-3_smt.c cp-4_smt.a cp-4_smt.b cp-4_smt.c cp-9_smt.a cp-9_smt.b cp-9_smt.c cp-9_smt.d ia-4_smt.a ia-4_smt.b ia-4_smt.c ia-4_smt.d ia-4_smt.e ia-5_smt.a ia-5_smt.b ia-5_smt.c ia-5_smt.d ia-5_smt.e ia-5_smt.f ia-5_smt.g ia-5_smt.h ia-5_smt.i ia-5_smt.j ia-5.1_smt.a ia-5.1_smt.b ia-5.1_smt.c ia-5.1_smt.d ia-5.1_smt.e ia-5.1_smt.f ir-2_smt.a ir-2_smt.b ir-2_smt.c ir-4_smt.a ir-4_smt.b ir-4_smt.c ir-6_smt.a ir-6_smt.b ir-8_smt.a ir-8_smt.b ir-8_smt.c ir-8_smt.d ir-8_smt.e ir-8_smt.f ma-2_smt.a ma-2_smt.b ma-2_smt.c ma-2_smt.d ma-2_smt.e ma-2_smt.f ma-4_smt.a ma-4_smt.b ma-4_smt.c ma-4_smt.d ma-4_smt.e ma-5_smt.a ma-5_smt.b ma-5_smt.c mp-6_smt.a mp-6_smt.b pe-2_smt.a pe-2_smt.b pe-2_smt.c pe-2_smt.d pe-3_smt.a pe-3_smt.b pe-3_smt.c pe-3_smt.d pe-3_smt.e pe-3_smt.f pe-3_smt.g pe-6_smt.a pe-6_smt.b pe-6_smt.c pe-8_smt.a pe-8_smt.b pe-14_smt.a pe-14_smt.b pl-2_smt.a pl-2_smt.b pl-2_smt.c pl-2_smt.d pl-2_smt.e pl-4_smt.a pl-4_smt.b pl-4_smt.c pl-4_smt.d ps-2_smt.a ps-2_smt.b ps-2_smt.c ps-3_smt.a ps-3_smt.b ps-4_smt.a ps-4_smt.b ps-4_smt.c ps-4_smt.d ps-4_smt.e ps-4_smt.f ps-5_smt.a ps-5_smt.b ps-5_smt.c ps-5_smt.d ps-6_smt.a ps-6_smt.b ps-6_smt.c ps-7_smt.a ps-7_smt.b ps-7_smt.c ps-7_smt.d ps-7_smt.e ps-8_smt.a ps-8_smt.b ra-2_smt.a ra-2_smt.b ra-2_smt.c ra-3_smt.a ra-3_smt.b ra-3_smt.c ra-3_smt.d ra-3_smt.e ra-5_smt.a ra-5_smt.b ra-5_smt.c ra-5_smt.d ra-5_smt.e sa-2_smt.a sa-2_smt.b sa-2_smt.c sa-3_smt.a sa-3_smt.b sa-3_smt.c sa-3_smt.d sa-4_smt.a sa-4_smt.b sa-4_smt.c sa-4_smt.d sa-4_smt.e sa-4_smt.f sa-4_smt.g sa-5_smt.a sa-5_smt.b sa-5_smt.c sa-5_smt.d sa-5_smt.e sa-9_smt.a sa-9_smt.b sa-9_smt.c sc-7_smt.a sc-7_smt.b sc-7_smt.c sc-15_smt.a sc-15_smt.b sc-20_smt.a sc-20_smt.b si-2_smt.a si-2_smt.b si-2_smt.c si-2_smt.d si-3_smt.a si-3_smt.b si-3_smt.c si-3_smt.d si-4_smt.a si-4_smt.b si-4_smt.c si-4_smt.d si-4_smt.e si-4_smt.f si-4_smt.g si-5_smt.a si-5_smt.b si-5_smt.c si-5_smt.d.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][11]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement mp-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][11]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement mp-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][11]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement mp-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][12]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:failed-assert test="not(exists($missing))" | |
| id="missing-response-points" | |
| role="error" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][12]"> | |
| <svrl:text>This SSP has not implemented a statement for each of the following lettered response points for required controls: ac-2_smt.b ac-2_smt.c ac-2_smt.d ac-2_smt.e ac-2_smt.f ac-2_smt.g ac-2_smt.h ac-2_smt.i ac-2_smt.j ac-2_smt.k ac-7_smt.a ac-7_smt.b ac-8_smt.a ac-8_smt.b ac-8_smt.c ac-14_smt.a ac-14_smt.b ac-17_smt.a ac-17_smt.b ac-18_smt.a ac-18_smt.b ac-19_smt.a ac-19_smt.b ac-20_smt.a ac-20_smt.b ac-22_smt.a ac-22_smt.b ac-22_smt.c ac-22_smt.d at-2_smt.a at-2_smt.b at-2_smt.c at-3_smt.a at-3_smt.b at-3_smt.c at-4_smt.a at-4_smt.b au-2_smt.a au-2_smt.b au-2_smt.c au-2_smt.d au-5_smt.a au-5_smt.b au-6_smt.a au-6_smt.b au-8_smt.a au-8_smt.b au-12_smt.a au-12_smt.b au-12_smt.c ca-2_smt.a ca-2_smt.b ca-2_smt.c ca-2_smt.d ca-3_smt.a ca-3_smt.b ca-3_smt.c ca-5_smt.a ca-5_smt.b ca-6_smt.a ca-6_smt.b ca-6_smt.c ca-7_smt.a ca-7_smt.b ca-7_smt.c ca-7_smt.d ca-7_smt.e ca-7_smt.f ca-7_smt.g ca-9_smt.a ca-9_smt.b cm-6_smt.a cm-6_smt.b cm-6_smt.c cm-6_smt.d cm-7_smt.a cm-7_smt.b cm-8_smt.a cm-8_smt.b cm-10_smt.a cm-10_smt.b cm-10_smt.c cm-11_smt.a cm-11_smt.b cm-11_smt.c cp-2_smt.a cp-2_smt.b cp-2_smt.c cp-2_smt.d cp-2_smt.e cp-2_smt.f cp-2_smt.g cp-3_smt.a cp-3_smt.b cp-3_smt.c cp-4_smt.a cp-4_smt.b cp-4_smt.c cp-9_smt.a cp-9_smt.b cp-9_smt.c cp-9_smt.d ia-4_smt.a ia-4_smt.b ia-4_smt.c ia-4_smt.d ia-4_smt.e ia-5_smt.a ia-5_smt.b ia-5_smt.c ia-5_smt.d ia-5_smt.e ia-5_smt.f ia-5_smt.g ia-5_smt.h ia-5_smt.i ia-5_smt.j ia-5.1_smt.a ia-5.1_smt.b ia-5.1_smt.c ia-5.1_smt.d ia-5.1_smt.e ia-5.1_smt.f ir-2_smt.a ir-2_smt.b ir-2_smt.c ir-4_smt.a ir-4_smt.b ir-4_smt.c ir-6_smt.a ir-6_smt.b ir-8_smt.a ir-8_smt.b ir-8_smt.c ir-8_smt.d ir-8_smt.e ir-8_smt.f ma-2_smt.a ma-2_smt.b ma-2_smt.c ma-2_smt.d ma-2_smt.e ma-2_smt.f ma-4_smt.a ma-4_smt.b ma-4_smt.c ma-4_smt.d ma-4_smt.e ma-5_smt.a ma-5_smt.b ma-5_smt.c mp-6_smt.a mp-6_smt.b pe-2_smt.a pe-2_smt.b pe-2_smt.c pe-2_smt.d pe-3_smt.a pe-3_smt.b pe-3_smt.c pe-3_smt.d pe-3_smt.e pe-3_smt.f pe-3_smt.g pe-6_smt.a pe-6_smt.b pe-6_smt.c pe-8_smt.a pe-8_smt.b pe-14_smt.a pe-14_smt.b pl-2_smt.a pl-2_smt.b pl-2_smt.c pl-2_smt.d pl-2_smt.e pl-4_smt.a pl-4_smt.b pl-4_smt.c pl-4_smt.d ps-2_smt.a ps-2_smt.b ps-2_smt.c ps-3_smt.a ps-3_smt.b ps-4_smt.a ps-4_smt.b ps-4_smt.c ps-4_smt.d ps-4_smt.e ps-4_smt.f ps-5_smt.a ps-5_smt.b ps-5_smt.c ps-5_smt.d ps-6_smt.a ps-6_smt.b ps-6_smt.c ps-7_smt.a ps-7_smt.b ps-7_smt.c ps-7_smt.d ps-7_smt.e ps-8_smt.a ps-8_smt.b ra-2_smt.a ra-2_smt.b ra-2_smt.c ra-3_smt.a ra-3_smt.b ra-3_smt.c ra-3_smt.d ra-3_smt.e ra-5_smt.a ra-5_smt.b ra-5_smt.c ra-5_smt.d ra-5_smt.e sa-2_smt.a sa-2_smt.b sa-2_smt.c sa-3_smt.a sa-3_smt.b sa-3_smt.c sa-3_smt.d sa-4_smt.a sa-4_smt.b sa-4_smt.c sa-4_smt.d sa-4_smt.e sa-4_smt.f sa-4_smt.g sa-5_smt.a sa-5_smt.b sa-5_smt.c sa-5_smt.d sa-5_smt.e sa-9_smt.a sa-9_smt.b sa-9_smt.c sc-7_smt.a sc-7_smt.b sc-7_smt.c sc-15_smt.a sc-15_smt.b sc-20_smt.a sc-20_smt.b si-2_smt.a si-2_smt.b si-2_smt.c si-2_smt.d si-3_smt.a si-3_smt.b si-3_smt.c si-3_smt.d si-4_smt.a si-4_smt.b si-4_smt.c si-4_smt.d si-4_smt.e si-4_smt.f si-4_smt.g si-5_smt.a si-5_smt.b si-5_smt.c si-5_smt.d.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][12]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement pe-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][12]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement pe-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][12]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement pe-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][13]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:failed-assert test="not(exists($missing))" | |
| id="missing-response-points" | |
| role="error" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][13]"> | |
| <svrl:text>This SSP has not implemented a statement for each of the following lettered response points for required controls: ac-2_smt.b ac-2_smt.c ac-2_smt.d ac-2_smt.e ac-2_smt.f ac-2_smt.g ac-2_smt.h ac-2_smt.i ac-2_smt.j ac-2_smt.k ac-7_smt.a ac-7_smt.b ac-8_smt.a ac-8_smt.b ac-8_smt.c ac-14_smt.a ac-14_smt.b ac-17_smt.a ac-17_smt.b ac-18_smt.a ac-18_smt.b ac-19_smt.a ac-19_smt.b ac-20_smt.a ac-20_smt.b ac-22_smt.a ac-22_smt.b ac-22_smt.c ac-22_smt.d at-2_smt.a at-2_smt.b at-2_smt.c at-3_smt.a at-3_smt.b at-3_smt.c at-4_smt.a at-4_smt.b au-2_smt.a au-2_smt.b au-2_smt.c au-2_smt.d au-5_smt.a au-5_smt.b au-6_smt.a au-6_smt.b au-8_smt.a au-8_smt.b au-12_smt.a au-12_smt.b au-12_smt.c ca-2_smt.a ca-2_smt.b ca-2_smt.c ca-2_smt.d ca-3_smt.a ca-3_smt.b ca-3_smt.c ca-5_smt.a ca-5_smt.b ca-6_smt.a ca-6_smt.b ca-6_smt.c ca-7_smt.a ca-7_smt.b ca-7_smt.c ca-7_smt.d ca-7_smt.e ca-7_smt.f ca-7_smt.g ca-9_smt.a ca-9_smt.b cm-6_smt.a cm-6_smt.b cm-6_smt.c cm-6_smt.d cm-7_smt.a cm-7_smt.b cm-8_smt.a cm-8_smt.b cm-10_smt.a cm-10_smt.b cm-10_smt.c cm-11_smt.a cm-11_smt.b cm-11_smt.c cp-2_smt.a cp-2_smt.b cp-2_smt.c cp-2_smt.d cp-2_smt.e cp-2_smt.f cp-2_smt.g cp-3_smt.a cp-3_smt.b cp-3_smt.c cp-4_smt.a cp-4_smt.b cp-4_smt.c cp-9_smt.a cp-9_smt.b cp-9_smt.c cp-9_smt.d ia-4_smt.a ia-4_smt.b ia-4_smt.c ia-4_smt.d ia-4_smt.e ia-5_smt.a ia-5_smt.b ia-5_smt.c ia-5_smt.d ia-5_smt.e ia-5_smt.f ia-5_smt.g ia-5_smt.h ia-5_smt.i ia-5_smt.j ia-5.1_smt.a ia-5.1_smt.b ia-5.1_smt.c ia-5.1_smt.d ia-5.1_smt.e ia-5.1_smt.f ir-2_smt.a ir-2_smt.b ir-2_smt.c ir-4_smt.a ir-4_smt.b ir-4_smt.c ir-6_smt.a ir-6_smt.b ir-8_smt.a ir-8_smt.b ir-8_smt.c ir-8_smt.d ir-8_smt.e ir-8_smt.f ma-2_smt.a ma-2_smt.b ma-2_smt.c ma-2_smt.d ma-2_smt.e ma-2_smt.f ma-4_smt.a ma-4_smt.b ma-4_smt.c ma-4_smt.d ma-4_smt.e ma-5_smt.a ma-5_smt.b ma-5_smt.c mp-6_smt.a mp-6_smt.b pe-2_smt.a pe-2_smt.b pe-2_smt.c pe-2_smt.d pe-3_smt.a pe-3_smt.b pe-3_smt.c pe-3_smt.d pe-3_smt.e pe-3_smt.f pe-3_smt.g pe-6_smt.a pe-6_smt.b pe-6_smt.c pe-8_smt.a pe-8_smt.b pe-14_smt.a pe-14_smt.b pl-2_smt.a pl-2_smt.b pl-2_smt.c pl-2_smt.d pl-2_smt.e pl-4_smt.a pl-4_smt.b pl-4_smt.c pl-4_smt.d ps-2_smt.a ps-2_smt.b ps-2_smt.c ps-3_smt.a ps-3_smt.b ps-4_smt.a ps-4_smt.b ps-4_smt.c ps-4_smt.d ps-4_smt.e ps-4_smt.f ps-5_smt.a ps-5_smt.b ps-5_smt.c ps-5_smt.d ps-6_smt.a ps-6_smt.b ps-6_smt.c ps-7_smt.a ps-7_smt.b ps-7_smt.c ps-7_smt.d ps-7_smt.e ps-8_smt.a ps-8_smt.b ra-2_smt.a ra-2_smt.b ra-2_smt.c ra-3_smt.a ra-3_smt.b ra-3_smt.c ra-3_smt.d ra-3_smt.e ra-5_smt.a ra-5_smt.b ra-5_smt.c ra-5_smt.d ra-5_smt.e sa-2_smt.a sa-2_smt.b sa-2_smt.c sa-3_smt.a sa-3_smt.b sa-3_smt.c sa-3_smt.d sa-4_smt.a sa-4_smt.b sa-4_smt.c sa-4_smt.d sa-4_smt.e sa-4_smt.f sa-4_smt.g sa-5_smt.a sa-5_smt.b sa-5_smt.c sa-5_smt.d sa-5_smt.e sa-9_smt.a sa-9_smt.b sa-9_smt.c sc-7_smt.a sc-7_smt.b sc-7_smt.c sc-15_smt.a sc-15_smt.b sc-20_smt.a sc-20_smt.b si-2_smt.a si-2_smt.b si-2_smt.c si-2_smt.d si-3_smt.a si-3_smt.b si-3_smt.c si-3_smt.d si-4_smt.a si-4_smt.b si-4_smt.c si-4_smt.d si-4_smt.e si-4_smt.f si-4_smt.g si-5_smt.a si-5_smt.b si-5_smt.c si-5_smt.d.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][13]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement pl-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][13]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement pl-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][13]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement pl-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][14]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:failed-assert test="not(exists($missing))" | |
| id="missing-response-points" | |
| role="error" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][14]"> | |
| <svrl:text>This SSP has not implemented a statement for each of the following lettered response points for required controls: ac-2_smt.b ac-2_smt.c ac-2_smt.d ac-2_smt.e ac-2_smt.f ac-2_smt.g ac-2_smt.h ac-2_smt.i ac-2_smt.j ac-2_smt.k ac-7_smt.a ac-7_smt.b ac-8_smt.a ac-8_smt.b ac-8_smt.c ac-14_smt.a ac-14_smt.b ac-17_smt.a ac-17_smt.b ac-18_smt.a ac-18_smt.b ac-19_smt.a ac-19_smt.b ac-20_smt.a ac-20_smt.b ac-22_smt.a ac-22_smt.b ac-22_smt.c ac-22_smt.d at-2_smt.a at-2_smt.b at-2_smt.c at-3_smt.a at-3_smt.b at-3_smt.c at-4_smt.a at-4_smt.b au-2_smt.a au-2_smt.b au-2_smt.c au-2_smt.d au-5_smt.a au-5_smt.b au-6_smt.a au-6_smt.b au-8_smt.a au-8_smt.b au-12_smt.a au-12_smt.b au-12_smt.c ca-2_smt.a ca-2_smt.b ca-2_smt.c ca-2_smt.d ca-3_smt.a ca-3_smt.b ca-3_smt.c ca-5_smt.a ca-5_smt.b ca-6_smt.a ca-6_smt.b ca-6_smt.c ca-7_smt.a ca-7_smt.b ca-7_smt.c ca-7_smt.d ca-7_smt.e ca-7_smt.f ca-7_smt.g ca-9_smt.a ca-9_smt.b cm-6_smt.a cm-6_smt.b cm-6_smt.c cm-6_smt.d cm-7_smt.a cm-7_smt.b cm-8_smt.a cm-8_smt.b cm-10_smt.a cm-10_smt.b cm-10_smt.c cm-11_smt.a cm-11_smt.b cm-11_smt.c cp-2_smt.a cp-2_smt.b cp-2_smt.c cp-2_smt.d cp-2_smt.e cp-2_smt.f cp-2_smt.g cp-3_smt.a cp-3_smt.b cp-3_smt.c cp-4_smt.a cp-4_smt.b cp-4_smt.c cp-9_smt.a cp-9_smt.b cp-9_smt.c cp-9_smt.d ia-4_smt.a ia-4_smt.b ia-4_smt.c ia-4_smt.d ia-4_smt.e ia-5_smt.a ia-5_smt.b ia-5_smt.c ia-5_smt.d ia-5_smt.e ia-5_smt.f ia-5_smt.g ia-5_smt.h ia-5_smt.i ia-5_smt.j ia-5.1_smt.a ia-5.1_smt.b ia-5.1_smt.c ia-5.1_smt.d ia-5.1_smt.e ia-5.1_smt.f ir-2_smt.a ir-2_smt.b ir-2_smt.c ir-4_smt.a ir-4_smt.b ir-4_smt.c ir-6_smt.a ir-6_smt.b ir-8_smt.a ir-8_smt.b ir-8_smt.c ir-8_smt.d ir-8_smt.e ir-8_smt.f ma-2_smt.a ma-2_smt.b ma-2_smt.c ma-2_smt.d ma-2_smt.e ma-2_smt.f ma-4_smt.a ma-4_smt.b ma-4_smt.c ma-4_smt.d ma-4_smt.e ma-5_smt.a ma-5_smt.b ma-5_smt.c mp-6_smt.a mp-6_smt.b pe-2_smt.a pe-2_smt.b pe-2_smt.c pe-2_smt.d pe-3_smt.a pe-3_smt.b pe-3_smt.c pe-3_smt.d pe-3_smt.e pe-3_smt.f pe-3_smt.g pe-6_smt.a pe-6_smt.b pe-6_smt.c pe-8_smt.a pe-8_smt.b pe-14_smt.a pe-14_smt.b pl-2_smt.a pl-2_smt.b pl-2_smt.c pl-2_smt.d pl-2_smt.e pl-4_smt.a pl-4_smt.b pl-4_smt.c pl-4_smt.d ps-2_smt.a ps-2_smt.b ps-2_smt.c ps-3_smt.a ps-3_smt.b ps-4_smt.a ps-4_smt.b ps-4_smt.c ps-4_smt.d ps-4_smt.e ps-4_smt.f ps-5_smt.a ps-5_smt.b ps-5_smt.c ps-5_smt.d ps-6_smt.a ps-6_smt.b ps-6_smt.c ps-7_smt.a ps-7_smt.b ps-7_smt.c ps-7_smt.d ps-7_smt.e ps-8_smt.a ps-8_smt.b ra-2_smt.a ra-2_smt.b ra-2_smt.c ra-3_smt.a ra-3_smt.b ra-3_smt.c ra-3_smt.d ra-3_smt.e ra-5_smt.a ra-5_smt.b ra-5_smt.c ra-5_smt.d ra-5_smt.e sa-2_smt.a sa-2_smt.b sa-2_smt.c sa-3_smt.a sa-3_smt.b sa-3_smt.c sa-3_smt.d sa-4_smt.a sa-4_smt.b sa-4_smt.c sa-4_smt.d sa-4_smt.e sa-4_smt.f sa-4_smt.g sa-5_smt.a sa-5_smt.b sa-5_smt.c sa-5_smt.d sa-5_smt.e sa-9_smt.a sa-9_smt.b sa-9_smt.c sc-7_smt.a sc-7_smt.b sc-7_smt.c sc-15_smt.a sc-15_smt.b sc-20_smt.a sc-20_smt.b si-2_smt.a si-2_smt.b si-2_smt.c si-2_smt.d si-3_smt.a si-3_smt.b si-3_smt.c si-3_smt.d si-4_smt.a si-4_smt.b si-4_smt.c si-4_smt.d si-4_smt.e si-4_smt.f si-4_smt.g si-5_smt.a si-5_smt.b si-5_smt.c si-5_smt.d.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][14]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ps-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][14]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ps-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][14]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ps-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][15]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:failed-assert test="not(exists($missing))" | |
| id="missing-response-points" | |
| role="error" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][15]"> | |
| <svrl:text>This SSP has not implemented a statement for each of the following lettered response points for required controls: ac-2_smt.b ac-2_smt.c ac-2_smt.d ac-2_smt.e ac-2_smt.f ac-2_smt.g ac-2_smt.h ac-2_smt.i ac-2_smt.j ac-2_smt.k ac-7_smt.a ac-7_smt.b ac-8_smt.a ac-8_smt.b ac-8_smt.c ac-14_smt.a ac-14_smt.b ac-17_smt.a ac-17_smt.b ac-18_smt.a ac-18_smt.b ac-19_smt.a ac-19_smt.b ac-20_smt.a ac-20_smt.b ac-22_smt.a ac-22_smt.b ac-22_smt.c ac-22_smt.d at-2_smt.a at-2_smt.b at-2_smt.c at-3_smt.a at-3_smt.b at-3_smt.c at-4_smt.a at-4_smt.b au-2_smt.a au-2_smt.b au-2_smt.c au-2_smt.d au-5_smt.a au-5_smt.b au-6_smt.a au-6_smt.b au-8_smt.a au-8_smt.b au-12_smt.a au-12_smt.b au-12_smt.c ca-2_smt.a ca-2_smt.b ca-2_smt.c ca-2_smt.d ca-3_smt.a ca-3_smt.b ca-3_smt.c ca-5_smt.a ca-5_smt.b ca-6_smt.a ca-6_smt.b ca-6_smt.c ca-7_smt.a ca-7_smt.b ca-7_smt.c ca-7_smt.d ca-7_smt.e ca-7_smt.f ca-7_smt.g ca-9_smt.a ca-9_smt.b cm-6_smt.a cm-6_smt.b cm-6_smt.c cm-6_smt.d cm-7_smt.a cm-7_smt.b cm-8_smt.a cm-8_smt.b cm-10_smt.a cm-10_smt.b cm-10_smt.c cm-11_smt.a cm-11_smt.b cm-11_smt.c cp-2_smt.a cp-2_smt.b cp-2_smt.c cp-2_smt.d cp-2_smt.e cp-2_smt.f cp-2_smt.g cp-3_smt.a cp-3_smt.b cp-3_smt.c cp-4_smt.a cp-4_smt.b cp-4_smt.c cp-9_smt.a cp-9_smt.b cp-9_smt.c cp-9_smt.d ia-4_smt.a ia-4_smt.b ia-4_smt.c ia-4_smt.d ia-4_smt.e ia-5_smt.a ia-5_smt.b ia-5_smt.c ia-5_smt.d ia-5_smt.e ia-5_smt.f ia-5_smt.g ia-5_smt.h ia-5_smt.i ia-5_smt.j ia-5.1_smt.a ia-5.1_smt.b ia-5.1_smt.c ia-5.1_smt.d ia-5.1_smt.e ia-5.1_smt.f ir-2_smt.a ir-2_smt.b ir-2_smt.c ir-4_smt.a ir-4_smt.b ir-4_smt.c ir-6_smt.a ir-6_smt.b ir-8_smt.a ir-8_smt.b ir-8_smt.c ir-8_smt.d ir-8_smt.e ir-8_smt.f ma-2_smt.a ma-2_smt.b ma-2_smt.c ma-2_smt.d ma-2_smt.e ma-2_smt.f ma-4_smt.a ma-4_smt.b ma-4_smt.c ma-4_smt.d ma-4_smt.e ma-5_smt.a ma-5_smt.b ma-5_smt.c mp-6_smt.a mp-6_smt.b pe-2_smt.a pe-2_smt.b pe-2_smt.c pe-2_smt.d pe-3_smt.a pe-3_smt.b pe-3_smt.c pe-3_smt.d pe-3_smt.e pe-3_smt.f pe-3_smt.g pe-6_smt.a pe-6_smt.b pe-6_smt.c pe-8_smt.a pe-8_smt.b pe-14_smt.a pe-14_smt.b pl-2_smt.a pl-2_smt.b pl-2_smt.c pl-2_smt.d pl-2_smt.e pl-4_smt.a pl-4_smt.b pl-4_smt.c pl-4_smt.d ps-2_smt.a ps-2_smt.b ps-2_smt.c ps-3_smt.a ps-3_smt.b ps-4_smt.a ps-4_smt.b ps-4_smt.c ps-4_smt.d ps-4_smt.e ps-4_smt.f ps-5_smt.a ps-5_smt.b ps-5_smt.c ps-5_smt.d ps-6_smt.a ps-6_smt.b ps-6_smt.c ps-7_smt.a ps-7_smt.b ps-7_smt.c ps-7_smt.d ps-7_smt.e ps-8_smt.a ps-8_smt.b ra-2_smt.a ra-2_smt.b ra-2_smt.c ra-3_smt.a ra-3_smt.b ra-3_smt.c ra-3_smt.d ra-3_smt.e ra-5_smt.a ra-5_smt.b ra-5_smt.c ra-5_smt.d ra-5_smt.e sa-2_smt.a sa-2_smt.b sa-2_smt.c sa-3_smt.a sa-3_smt.b sa-3_smt.c sa-3_smt.d sa-4_smt.a sa-4_smt.b sa-4_smt.c sa-4_smt.d sa-4_smt.e sa-4_smt.f sa-4_smt.g sa-5_smt.a sa-5_smt.b sa-5_smt.c sa-5_smt.d sa-5_smt.e sa-9_smt.a sa-9_smt.b sa-9_smt.c sc-7_smt.a sc-7_smt.b sc-7_smt.c sc-15_smt.a sc-15_smt.b sc-20_smt.a sc-20_smt.b si-2_smt.a si-2_smt.b si-2_smt.c si-2_smt.d si-3_smt.a si-3_smt.b si-3_smt.c si-3_smt.d si-4_smt.a si-4_smt.b si-4_smt.c si-4_smt.d si-4_smt.e si-4_smt.f si-4_smt.g si-5_smt.a si-5_smt.b si-5_smt.c si-5_smt.d.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][15]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ra-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][15]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ra-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][15]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ra-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][16]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:failed-assert test="not(exists($missing))" | |
| id="missing-response-points" | |
| role="error" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][16]"> | |
| <svrl:text>This SSP has not implemented a statement for each of the following lettered response points for required controls: ac-2_smt.b ac-2_smt.c ac-2_smt.d ac-2_smt.e ac-2_smt.f ac-2_smt.g ac-2_smt.h ac-2_smt.i ac-2_smt.j ac-2_smt.k ac-7_smt.a ac-7_smt.b ac-8_smt.a ac-8_smt.b ac-8_smt.c ac-14_smt.a ac-14_smt.b ac-17_smt.a ac-17_smt.b ac-18_smt.a ac-18_smt.b ac-19_smt.a ac-19_smt.b ac-20_smt.a ac-20_smt.b ac-22_smt.a ac-22_smt.b ac-22_smt.c ac-22_smt.d at-2_smt.a at-2_smt.b at-2_smt.c at-3_smt.a at-3_smt.b at-3_smt.c at-4_smt.a at-4_smt.b au-2_smt.a au-2_smt.b au-2_smt.c au-2_smt.d au-5_smt.a au-5_smt.b au-6_smt.a au-6_smt.b au-8_smt.a au-8_smt.b au-12_smt.a au-12_smt.b au-12_smt.c ca-2_smt.a ca-2_smt.b ca-2_smt.c ca-2_smt.d ca-3_smt.a ca-3_smt.b ca-3_smt.c ca-5_smt.a ca-5_smt.b ca-6_smt.a ca-6_smt.b ca-6_smt.c ca-7_smt.a ca-7_smt.b ca-7_smt.c ca-7_smt.d ca-7_smt.e ca-7_smt.f ca-7_smt.g ca-9_smt.a ca-9_smt.b cm-6_smt.a cm-6_smt.b cm-6_smt.c cm-6_smt.d cm-7_smt.a cm-7_smt.b cm-8_smt.a cm-8_smt.b cm-10_smt.a cm-10_smt.b cm-10_smt.c cm-11_smt.a cm-11_smt.b cm-11_smt.c cp-2_smt.a cp-2_smt.b cp-2_smt.c cp-2_smt.d cp-2_smt.e cp-2_smt.f cp-2_smt.g cp-3_smt.a cp-3_smt.b cp-3_smt.c cp-4_smt.a cp-4_smt.b cp-4_smt.c cp-9_smt.a cp-9_smt.b cp-9_smt.c cp-9_smt.d ia-4_smt.a ia-4_smt.b ia-4_smt.c ia-4_smt.d ia-4_smt.e ia-5_smt.a ia-5_smt.b ia-5_smt.c ia-5_smt.d ia-5_smt.e ia-5_smt.f ia-5_smt.g ia-5_smt.h ia-5_smt.i ia-5_smt.j ia-5.1_smt.a ia-5.1_smt.b ia-5.1_smt.c ia-5.1_smt.d ia-5.1_smt.e ia-5.1_smt.f ir-2_smt.a ir-2_smt.b ir-2_smt.c ir-4_smt.a ir-4_smt.b ir-4_smt.c ir-6_smt.a ir-6_smt.b ir-8_smt.a ir-8_smt.b ir-8_smt.c ir-8_smt.d ir-8_smt.e ir-8_smt.f ma-2_smt.a ma-2_smt.b ma-2_smt.c ma-2_smt.d ma-2_smt.e ma-2_smt.f ma-4_smt.a ma-4_smt.b ma-4_smt.c ma-4_smt.d ma-4_smt.e ma-5_smt.a ma-5_smt.b ma-5_smt.c mp-6_smt.a mp-6_smt.b pe-2_smt.a pe-2_smt.b pe-2_smt.c pe-2_smt.d pe-3_smt.a pe-3_smt.b pe-3_smt.c pe-3_smt.d pe-3_smt.e pe-3_smt.f pe-3_smt.g pe-6_smt.a pe-6_smt.b pe-6_smt.c pe-8_smt.a pe-8_smt.b pe-14_smt.a pe-14_smt.b pl-2_smt.a pl-2_smt.b pl-2_smt.c pl-2_smt.d pl-2_smt.e pl-4_smt.a pl-4_smt.b pl-4_smt.c pl-4_smt.d ps-2_smt.a ps-2_smt.b ps-2_smt.c ps-3_smt.a ps-3_smt.b ps-4_smt.a ps-4_smt.b ps-4_smt.c ps-4_smt.d ps-4_smt.e ps-4_smt.f ps-5_smt.a ps-5_smt.b ps-5_smt.c ps-5_smt.d ps-6_smt.a ps-6_smt.b ps-6_smt.c ps-7_smt.a ps-7_smt.b ps-7_smt.c ps-7_smt.d ps-7_smt.e ps-8_smt.a ps-8_smt.b ra-2_smt.a ra-2_smt.b ra-2_smt.c ra-3_smt.a ra-3_smt.b ra-3_smt.c ra-3_smt.d ra-3_smt.e ra-5_smt.a ra-5_smt.b ra-5_smt.c ra-5_smt.d ra-5_smt.e sa-2_smt.a sa-2_smt.b sa-2_smt.c sa-3_smt.a sa-3_smt.b sa-3_smt.c sa-3_smt.d sa-4_smt.a sa-4_smt.b sa-4_smt.c sa-4_smt.d sa-4_smt.e sa-4_smt.f sa-4_smt.g sa-5_smt.a sa-5_smt.b sa-5_smt.c sa-5_smt.d sa-5_smt.e sa-9_smt.a sa-9_smt.b sa-9_smt.c sc-7_smt.a sc-7_smt.b sc-7_smt.c sc-15_smt.a sc-15_smt.b sc-20_smt.a sc-20_smt.b si-2_smt.a si-2_smt.b si-2_smt.c si-2_smt.d si-3_smt.a si-3_smt.b si-3_smt.c si-3_smt.d si-4_smt.a si-4_smt.b si-4_smt.c si-4_smt.d si-4_smt.e si-4_smt.f si-4_smt.g si-5_smt.a si-5_smt.b si-5_smt.c si-5_smt.d.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][16]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement sa-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][16]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement sa-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][16]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement sa-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][17]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:failed-assert test="not(exists($missing))" | |
| id="missing-response-points" | |
| role="error" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][17]"> | |
| <svrl:text>This SSP has not implemented a statement for each of the following lettered response points for required controls: ac-2_smt.b ac-2_smt.c ac-2_smt.d ac-2_smt.e ac-2_smt.f ac-2_smt.g ac-2_smt.h ac-2_smt.i ac-2_smt.j ac-2_smt.k ac-7_smt.a ac-7_smt.b ac-8_smt.a ac-8_smt.b ac-8_smt.c ac-14_smt.a ac-14_smt.b ac-17_smt.a ac-17_smt.b ac-18_smt.a ac-18_smt.b ac-19_smt.a ac-19_smt.b ac-20_smt.a ac-20_smt.b ac-22_smt.a ac-22_smt.b ac-22_smt.c ac-22_smt.d at-2_smt.a at-2_smt.b at-2_smt.c at-3_smt.a at-3_smt.b at-3_smt.c at-4_smt.a at-4_smt.b au-2_smt.a au-2_smt.b au-2_smt.c au-2_smt.d au-5_smt.a au-5_smt.b au-6_smt.a au-6_smt.b au-8_smt.a au-8_smt.b au-12_smt.a au-12_smt.b au-12_smt.c ca-2_smt.a ca-2_smt.b ca-2_smt.c ca-2_smt.d ca-3_smt.a ca-3_smt.b ca-3_smt.c ca-5_smt.a ca-5_smt.b ca-6_smt.a ca-6_smt.b ca-6_smt.c ca-7_smt.a ca-7_smt.b ca-7_smt.c ca-7_smt.d ca-7_smt.e ca-7_smt.f ca-7_smt.g ca-9_smt.a ca-9_smt.b cm-6_smt.a cm-6_smt.b cm-6_smt.c cm-6_smt.d cm-7_smt.a cm-7_smt.b cm-8_smt.a cm-8_smt.b cm-10_smt.a cm-10_smt.b cm-10_smt.c cm-11_smt.a cm-11_smt.b cm-11_smt.c cp-2_smt.a cp-2_smt.b cp-2_smt.c cp-2_smt.d cp-2_smt.e cp-2_smt.f cp-2_smt.g cp-3_smt.a cp-3_smt.b cp-3_smt.c cp-4_smt.a cp-4_smt.b cp-4_smt.c cp-9_smt.a cp-9_smt.b cp-9_smt.c cp-9_smt.d ia-4_smt.a ia-4_smt.b ia-4_smt.c ia-4_smt.d ia-4_smt.e ia-5_smt.a ia-5_smt.b ia-5_smt.c ia-5_smt.d ia-5_smt.e ia-5_smt.f ia-5_smt.g ia-5_smt.h ia-5_smt.i ia-5_smt.j ia-5.1_smt.a ia-5.1_smt.b ia-5.1_smt.c ia-5.1_smt.d ia-5.1_smt.e ia-5.1_smt.f ir-2_smt.a ir-2_smt.b ir-2_smt.c ir-4_smt.a ir-4_smt.b ir-4_smt.c ir-6_smt.a ir-6_smt.b ir-8_smt.a ir-8_smt.b ir-8_smt.c ir-8_smt.d ir-8_smt.e ir-8_smt.f ma-2_smt.a ma-2_smt.b ma-2_smt.c ma-2_smt.d ma-2_smt.e ma-2_smt.f ma-4_smt.a ma-4_smt.b ma-4_smt.c ma-4_smt.d ma-4_smt.e ma-5_smt.a ma-5_smt.b ma-5_smt.c mp-6_smt.a mp-6_smt.b pe-2_smt.a pe-2_smt.b pe-2_smt.c pe-2_smt.d pe-3_smt.a pe-3_smt.b pe-3_smt.c pe-3_smt.d pe-3_smt.e pe-3_smt.f pe-3_smt.g pe-6_smt.a pe-6_smt.b pe-6_smt.c pe-8_smt.a pe-8_smt.b pe-14_smt.a pe-14_smt.b pl-2_smt.a pl-2_smt.b pl-2_smt.c pl-2_smt.d pl-2_smt.e pl-4_smt.a pl-4_smt.b pl-4_smt.c pl-4_smt.d ps-2_smt.a ps-2_smt.b ps-2_smt.c ps-3_smt.a ps-3_smt.b ps-4_smt.a ps-4_smt.b ps-4_smt.c ps-4_smt.d ps-4_smt.e ps-4_smt.f ps-5_smt.a ps-5_smt.b ps-5_smt.c ps-5_smt.d ps-6_smt.a ps-6_smt.b ps-6_smt.c ps-7_smt.a ps-7_smt.b ps-7_smt.c ps-7_smt.d ps-7_smt.e ps-8_smt.a ps-8_smt.b ra-2_smt.a ra-2_smt.b ra-2_smt.c ra-3_smt.a ra-3_smt.b ra-3_smt.c ra-3_smt.d ra-3_smt.e ra-5_smt.a ra-5_smt.b ra-5_smt.c ra-5_smt.d ra-5_smt.e sa-2_smt.a sa-2_smt.b sa-2_smt.c sa-3_smt.a sa-3_smt.b sa-3_smt.c sa-3_smt.d sa-4_smt.a sa-4_smt.b sa-4_smt.c sa-4_smt.d sa-4_smt.e sa-4_smt.f sa-4_smt.g sa-5_smt.a sa-5_smt.b sa-5_smt.c sa-5_smt.d sa-5_smt.e sa-9_smt.a sa-9_smt.b sa-9_smt.c sc-7_smt.a sc-7_smt.b sc-7_smt.c sc-15_smt.a sc-15_smt.b sc-20_smt.a sc-20_smt.b si-2_smt.a si-2_smt.b si-2_smt.c si-2_smt.d si-3_smt.a si-3_smt.b si-3_smt.c si-3_smt.d si-4_smt.a si-4_smt.b si-4_smt.c si-4_smt.d si-4_smt.e si-4_smt.f si-4_smt.g si-5_smt.a si-5_smt.b si-5_smt.c si-5_smt.d.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][17]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement sc-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][17]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement sc-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][17]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement sc-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][18]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:failed-assert test="not(exists($missing))" | |
| id="missing-response-points" | |
| role="error" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][18]"> | |
| <svrl:text>This SSP has not implemented a statement for each of the following lettered response points for required controls: ac-2_smt.b ac-2_smt.c ac-2_smt.d ac-2_smt.e ac-2_smt.f ac-2_smt.g ac-2_smt.h ac-2_smt.i ac-2_smt.j ac-2_smt.k ac-7_smt.a ac-7_smt.b ac-8_smt.a ac-8_smt.b ac-8_smt.c ac-14_smt.a ac-14_smt.b ac-17_smt.a ac-17_smt.b ac-18_smt.a ac-18_smt.b ac-19_smt.a ac-19_smt.b ac-20_smt.a ac-20_smt.b ac-22_smt.a ac-22_smt.b ac-22_smt.c ac-22_smt.d at-2_smt.a at-2_smt.b at-2_smt.c at-3_smt.a at-3_smt.b at-3_smt.c at-4_smt.a at-4_smt.b au-2_smt.a au-2_smt.b au-2_smt.c au-2_smt.d au-5_smt.a au-5_smt.b au-6_smt.a au-6_smt.b au-8_smt.a au-8_smt.b au-12_smt.a au-12_smt.b au-12_smt.c ca-2_smt.a ca-2_smt.b ca-2_smt.c ca-2_smt.d ca-3_smt.a ca-3_smt.b ca-3_smt.c ca-5_smt.a ca-5_smt.b ca-6_smt.a ca-6_smt.b ca-6_smt.c ca-7_smt.a ca-7_smt.b ca-7_smt.c ca-7_smt.d ca-7_smt.e ca-7_smt.f ca-7_smt.g ca-9_smt.a ca-9_smt.b cm-6_smt.a cm-6_smt.b cm-6_smt.c cm-6_smt.d cm-7_smt.a cm-7_smt.b cm-8_smt.a cm-8_smt.b cm-10_smt.a cm-10_smt.b cm-10_smt.c cm-11_smt.a cm-11_smt.b cm-11_smt.c cp-2_smt.a cp-2_smt.b cp-2_smt.c cp-2_smt.d cp-2_smt.e cp-2_smt.f cp-2_smt.g cp-3_smt.a cp-3_smt.b cp-3_smt.c cp-4_smt.a cp-4_smt.b cp-4_smt.c cp-9_smt.a cp-9_smt.b cp-9_smt.c cp-9_smt.d ia-4_smt.a ia-4_smt.b ia-4_smt.c ia-4_smt.d ia-4_smt.e ia-5_smt.a ia-5_smt.b ia-5_smt.c ia-5_smt.d ia-5_smt.e ia-5_smt.f ia-5_smt.g ia-5_smt.h ia-5_smt.i ia-5_smt.j ia-5.1_smt.a ia-5.1_smt.b ia-5.1_smt.c ia-5.1_smt.d ia-5.1_smt.e ia-5.1_smt.f ir-2_smt.a ir-2_smt.b ir-2_smt.c ir-4_smt.a ir-4_smt.b ir-4_smt.c ir-6_smt.a ir-6_smt.b ir-8_smt.a ir-8_smt.b ir-8_smt.c ir-8_smt.d ir-8_smt.e ir-8_smt.f ma-2_smt.a ma-2_smt.b ma-2_smt.c ma-2_smt.d ma-2_smt.e ma-2_smt.f ma-4_smt.a ma-4_smt.b ma-4_smt.c ma-4_smt.d ma-4_smt.e ma-5_smt.a ma-5_smt.b ma-5_smt.c mp-6_smt.a mp-6_smt.b pe-2_smt.a pe-2_smt.b pe-2_smt.c pe-2_smt.d pe-3_smt.a pe-3_smt.b pe-3_smt.c pe-3_smt.d pe-3_smt.e pe-3_smt.f pe-3_smt.g pe-6_smt.a pe-6_smt.b pe-6_smt.c pe-8_smt.a pe-8_smt.b pe-14_smt.a pe-14_smt.b pl-2_smt.a pl-2_smt.b pl-2_smt.c pl-2_smt.d pl-2_smt.e pl-4_smt.a pl-4_smt.b pl-4_smt.c pl-4_smt.d ps-2_smt.a ps-2_smt.b ps-2_smt.c ps-3_smt.a ps-3_smt.b ps-4_smt.a ps-4_smt.b ps-4_smt.c ps-4_smt.d ps-4_smt.e ps-4_smt.f ps-5_smt.a ps-5_smt.b ps-5_smt.c ps-5_smt.d ps-6_smt.a ps-6_smt.b ps-6_smt.c ps-7_smt.a ps-7_smt.b ps-7_smt.c ps-7_smt.d ps-7_smt.e ps-8_smt.a ps-8_smt.b ra-2_smt.a ra-2_smt.b ra-2_smt.c ra-3_smt.a ra-3_smt.b ra-3_smt.c ra-3_smt.d ra-3_smt.e ra-5_smt.a ra-5_smt.b ra-5_smt.c ra-5_smt.d ra-5_smt.e sa-2_smt.a sa-2_smt.b sa-2_smt.c sa-3_smt.a sa-3_smt.b sa-3_smt.c sa-3_smt.d sa-4_smt.a sa-4_smt.b sa-4_smt.c sa-4_smt.d sa-4_smt.e sa-4_smt.f sa-4_smt.g sa-5_smt.a sa-5_smt.b sa-5_smt.c sa-5_smt.d sa-5_smt.e sa-9_smt.a sa-9_smt.b sa-9_smt.c sc-7_smt.a sc-7_smt.b sc-7_smt.c sc-15_smt.a sc-15_smt.b sc-20_smt.a sc-20_smt.b si-2_smt.a si-2_smt.b si-2_smt.c si-2_smt.d si-3_smt.a si-3_smt.b si-3_smt.c si-3_smt.d si-4_smt.a si-4_smt.b si-4_smt.c si-4_smt.d si-4_smt.e si-4_smt.f si-4_smt.g si-5_smt.a si-5_smt.b si-5_smt.c si-5_smt.d.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][18]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement si-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][18]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement si-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][18]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement si-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| </svrl:schematron-output> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <?xml version="1.0" encoding="UTF-8" standalone="yes"?> | |
| <svrl:schematron-output xmlns:f="https://fedramp.gov/ns/oscal" | |
| xmlns:iso="http://purl.oclc.org/dsdl/schematron" | |
| xmlns:lv="local-validations" | |
| xmlns:o="http://csrc.nist.gov/ns/oscal/1.0" | |
| xmlns:oscal="http://csrc.nist.gov/ns/oscal/1.0" | |
| xmlns:saxon="http://saxon.sf.net/" | |
| xmlns:schold="http://www.ascc.net/xml/schematron" | |
| xmlns:svrl="http://purl.oclc.org/dsdl/svrl" | |
| xmlns:xhtml="http://www.w3.org/1999/xhtml" | |
| xmlns:xs="http://www.w3.org/2001/XMLSchema" | |
| xmlns:xsd="http://www.w3.org/2001/XMLSchema" | |
| title="FedRAMP System Security Plan Validations" | |
| schemaVersion=""><!-- | |
| --> | |
| <svrl:ns-prefix-in-attribute-values uri="https://fedramp.gov/ns/oscal" prefix="f"/> | |
| <svrl:ns-prefix-in-attribute-values uri="http://csrc.nist.gov/ns/oscal/1.0" prefix="o"/> | |
| <svrl:ns-prefix-in-attribute-values uri="http://csrc.nist.gov/ns/oscal/1.0" prefix="oscal"/> | |
| <svrl:ns-prefix-in-attribute-values uri="local-validations" prefix="lv"/> | |
| <svrl:active-pattern document="file:/Users/astein/Code/fedramp-automation/resources/validations/test/demo/FedRAMP-SSP-OSCAL-Template.xml"/> | |
| <svrl:fired-rule context="/o:system-security-plan"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation"/> | |
| <svrl:successful-report test="count($required-controls) > 0" | |
| id="each-required-control-report" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>The following 125 controls are required: ac-1 ac-2 ac-3 ac-7 ac-8 ac-14 ac-17 ac-18 ac-19 ac-20 ac-22 at-1 at-2 at-3 at-4 au-1 au-2 au-3 au-4 au-5 au-6 au-8 au-9 au-11 au-12 ca-1 ca-2 ca-2.1 ca-3 ca-5 ca-6 ca-7 ca-9 cm-1 cm-2 cm-4 cm-6 cm-7 cm-8 cm-10 cm-11 cp-1 cp-2 cp-3 cp-4 cp-9 cp-10 ia-1 ia-2 ia-2.1 ia-2.12 ia-4 ia-5 ia-5.1 ia-5.11 ia-6 ia-7 ia-8 ia-8.1 ia-8.2 ia-8.3 ia-8.4 ir-1 ir-2 ir-4 ir-5 ir-6 ir-7 ir-8 ma-1 ma-2 ma-4 ma-5 mp-1 mp-2 mp-6 mp-7 pe-1 pe-2 pe-3 pe-6 pe-8 pe-12 pe-13 pe-14 pe-15 pe-16 pl-1 pl-2 pl-4 ps-1 ps-2 ps-3 ps-4 ps-5 ps-6 ps-7 ps-8 ra-1 ra-2 ra-3 ra-5 sa-1 sa-2 sa-3 sa-4 sa-5 sa-9 sc-1 sc-5 sc-7 sc-12 sc-13 sc-15 sc-20 sc-21 sc-22 sc-39 si-1 si-2 si-3 si-4 si-5 si-12 si-16</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:failed-assert test="not(exists($core-missing))" | |
| id="incomplete-core-implemented-requirements" | |
| role="error" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>This SSP has not implemented the most important 44 core controls: ac-7 ac-17 ac-18 ac-19 ac-22 at-2 at-3 at-4 au-2 au-6 au-11 ca-2 ca-3 ca-5 ca-7 ca-9 cm-6 cm-8 cp-2 cp-3 cp-4 cp-9 ia-4 ia-5 ia-5.1 ir-2 ir-6 ir-8 ma-4 pe-2 pe-3 pe-6 pe-8 pl-2 ps-3 ps-4 ps-5 ps-6 ps-7 ra-5 sc-13 si-2 si-3 si-4</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:failed-assert test="not(exists($all-missing))" | |
| id="incomplete-all-implemented-requirements" | |
| role="warn" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>This SSP has not implemented 107 controls overall: ac-3 ac-7 ac-8 ac-14 ac-17 ac-18 ac-19 ac-20 ac-22 at-2 at-3 at-4 au-2 au-3 au-4 au-5 au-6 au-8 au-9 au-11 au-12 ca-2 ca-2.1 ca-3 ca-5 ca-6 ca-7 ca-9 cm-2 cm-4 cm-6 cm-7 cm-8 cm-10 cm-11 cp-2 cp-3 cp-4 cp-9 cp-10 ia-2 ia-2.1 ia-2.12 ia-4 ia-5 ia-5.1 ia-5.11 ia-6 ia-7 ia-8 ia-8.1 ia-8.2 ia-8.3 ia-8.4 ir-2 ir-4 ir-5 ir-6 ir-7 ir-8 ma-2 ma-4 ma-5 mp-2 mp-6 mp-7 pe-2 pe-3 pe-6 pe-8 pe-12 pe-13 pe-14 pe-15 pe-16 pl-2 pl-4 ps-2 ps-3 ps-4 ps-5 ps-6 ps-7 ps-8 ra-2 ra-3 ra-5 sa-2 sa-3 sa-4 sa-5 sa-9 sc-5 sc-7 sc-12 sc-13 sc-15 sc-20 sc-21 sc-22 sc-39 si-2 si-3 si-4 si-5 si-12 si-16</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:successful-report test="count($results/errors/error) = 0" | |
| id="control-implemented-requirements-stats" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>There are 20 Control Implementation Status items total, with 0 set as implemented, 1 set as partial, 18 set as planned, 0 set as alternative, and 1 set as not-applicable. There are 0 invalid items.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:remarks"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-remarks" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:remarks[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ac-1_smt.a has remarks not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:failed-assert test="$components-count >= $required-components-count" | |
| id="missing-response-components" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]"> | |
| <svrl:text>Response statements for ac-1_smt.a.1 must have at least 1 component with a description. There are 0.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:remarks"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-remarks" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:remarks[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ac-1_smt.a.1 has remarks not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:failed-assert test="$components-count >= $required-components-count" | |
| id="missing-response-components" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]"> | |
| <svrl:text>Response statements for ac-1_smt.a.2 must have at least 1 component with a description. There are 0.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:remarks"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-remarks" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:remarks[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ac-1_smt.a.2 has remarks not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:failed-assert test="$components-count >= $required-components-count" | |
| id="missing-response-components" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][4]"> | |
| <svrl:text>Response statements for ac-1_smt.b.1 must have at least 1 component with a description. There are 0.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][4]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ac-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:failed-assert test="$components-count >= $required-components-count" | |
| id="missing-response-components" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][5]"> | |
| <svrl:text>Response statements for ac-1_smt.b.2 must have at least 1 component with a description. There are 0.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][5]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ac-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ac-2_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:remarks"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:failed-assert test="/o:system-security-plan/o:system-implementation/o:component[@uuid = $component-ref] => exists()" | |
| id="invalid-component-match" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:by-component[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]"> | |
| <svrl:text>Response statment ac-2_smt.a with component reference UUID 'b7364f67-bf65-4df2-b756-4b9c6b1c4a52' is not in the system implementation inventory, and cannot be used to define a control.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:failed-assert test="/o:system-security-plan/o:system-implementation/o:component[@uuid = $component-ref] => exists()" | |
| id="invalid-component-match" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:by-component[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]"> | |
| <svrl:text>Response statment ac-2_smt.a with component reference UUID 'cae07d12-8566-443a-95de-7596b9cac953' is not in the system implementation inventory, and cannot be used to define a control.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement at-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:failed-assert test="$components-count >= $required-components-count" | |
| id="missing-response-components" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]"> | |
| <svrl:text>Response statements for at-1_smt.a.1 must have at least 1 component with a description. There are 0.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:remarks"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-remarks" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:remarks[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement at-1_smt.a.1 has remarks not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:failed-assert test="$components-count >= $required-components-count" | |
| id="missing-response-components" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]"> | |
| <svrl:text>Response statements for at-1_smt.a.2 must have at least 1 component with a description. There are 0.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:remarks"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-remarks" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:remarks[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement at-1_smt.a.2 has remarks not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][4]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement at-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][5]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement at-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][4]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][4]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement au-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][4]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement au-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][4]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement au-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][5]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][5]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ca-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][5]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ca-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][5]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ca-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][6]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][6]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement cm-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][6]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement cm-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][6]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement cm-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][7]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][7]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement cp-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][7]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement cp-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][7]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement cp-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][8]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][8]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ia-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][8]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ia-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][8]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ia-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][9]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][9]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ir-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][9]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ir-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][9]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ir-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][10]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][10]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ma-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][10]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ma-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][10]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ma-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][11]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][11]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement mp-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][11]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement mp-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][11]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement mp-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][12]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][12]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement pe-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][12]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement pe-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][12]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement pe-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][13]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][13]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement pl-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][13]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement pl-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][13]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement pl-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][14]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][14]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ps-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][14]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ps-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][14]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ps-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][15]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][15]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ra-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][15]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ra-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][15]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement ra-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][16]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][16]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement sa-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][16]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement sa-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][16]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement sa-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][17]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][17]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement sc-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][17]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement sc-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][17]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement sc-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement"/> | |
| <svrl:successful-report test="exists($implemented)" | |
| id="implemented-response-points" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][18]"> | |
| <svrl:text>This SSP has implemented a statement for each of the following lettered response points for required controls: ac-1_smt.a ac-1_smt.a.1 ac-1_smt.a.2 ac-1_smt.b.1 ac-1_smt.b.2 ac-2_smt.a at-1_smt.a at-1_smt.a.1 at-1_smt.a.2 at-1_smt.b.1 at-1_smt.b.2 au-1_smt.a au-1_smt.b.1 au-1_smt.b.2 ca-1_smt.a ca-1_smt.b.1 ca-1_smt.b.2 cm-1_smt.a cm-1_smt.b.1 cm-1_smt.b.2 cp-1_smt.a cp-1_smt.b.1 cp-1_smt.b.2 ia-1_smt.a ia-1_smt.b.1 ia-1_smt.b.2 ir-1_smt.a ir-1_smt.b.1 ir-1_smt.b.2 ma-1_smt.a ma-1_smt.b.1 ma-1_smt.b.2 mp-1_smt.a mp-1_smt.b.1 mp-1_smt.b.2 pe-1_smt.a pe-1_smt.b.1 pe-1_smt.b.2 pl-1_smt.a pl-1_smt.b.1 pl-1_smt.b.2 ps-1_smt.a ps-1_smt.b.1 ps-1_smt.b.2 ra-1_smt.a ra-1_smt.b.1 ra-1_smt.b.2 sa-1_smt.a sa-1_smt.b.1 sa-1_smt.b.2 sc-1_smt.a sc-1_smt.b.1 sc-1_smt.b.2 si-1_smt.a si-1_smt.b.1 si-1_smt.b.2.</svrl:text> | |
| </svrl:successful-report> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][18]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement si-1_smt.a has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][18]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][2]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement si-1_smt.b.1 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:description"/> | |
| <svrl:failed-assert test=". => empty()" | |
| id="extraneous-response-description" | |
| role="warning" | |
| location="/*:system-security-plan[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:control-implementation[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]/*:implemented-requirement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][18]/*:statement[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][3]/*:description[namespace-uri()='http://csrc.nist.gov/ns/oscal/1.0'][1]"> | |
| <svrl:text>Response statement si-1_smt.b.2 has a description not within a component. That was previously allowed, but not recommended. It will soon be syntactically invalid and deprecated.</svrl:text> | |
| </svrl:failed-assert> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component"/> | |
| <svrl:fired-rule context="/o:system-security-plan/o:control-implementation/o:implemented-requirement/o:statement/o:by-component/o:description"/> | |
| </svrl:schematron-output> |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment