diff --git a/features/fedramp_extensions.feature b/features/fedramp_extensions.feature index ad786a87a..40b265bf6 100644 --- a/features/fedramp_extensions.feature +++ b/features/fedramp_extensions.feature @@ -29,6 +29,18 @@ Examples: | control-implementation-status-PASS.yaml | | deployment-mode-FAIL.yaml | | deployment-mode-PASS.yaml | + | has-configuration-management-plan-FAIL.yaml | + | has-configuration-management-plan-PASS.yaml | + | has-incident-response-plan-FAIL.yaml | + | has-incident-response-plan-PASS.yaml | + | has-information-system-contingency-plan-FAIL.yaml | + | has-information-system-contingency-plan-PASS.yaml | + | has-rules-of-behavior-FAIL.yaml | + | has-rules-of-behavior-PASS.yaml | + | has-separation-of-duties-matrix-FAIL.yaml | + | has-separation-of-duties-matrix-PASS.yaml | + | has-user-guide-FAIL.yaml | + | has-user-guide-PASS.yaml | | information-type-system-FAIL.yaml | | information-type-system-PASS.yaml | | interconnection-direction-FAIL.yaml | @@ -65,6 +77,12 @@ Examples: | component-type | | control-implementation-status | | deployment-model | + | has-configuration-management-plan | + | has-incident-response-plan | + | has-information-system-contingency-plan | + | has-rules-of-behavior | + | has-separation-of-duties-matrix | + | has-user-guide | | information-type-system | | interconnection-direction | | interconnection-security | diff --git a/src/validations/constraints/content/ssp-all-VALID.xml b/src/validations/constraints/content/ssp-all-VALID.xml index e0e99e30c..a2ca41ba2 100644 --- a/src/validations/constraints/content/ssp-all-VALID.xml +++ b/src/validations/constraints/content/ssp-all-VALID.xml @@ -195,5 +195,92 @@ + + User's Guide + +

User's Guide

+ + + + + +

Table 12-1 Attachments: User's Guide Attachment

+

May use rlink with a relative path, or embedded as base64.

+ + + + Document Title + +

Rules of Behavior

+ + + + + + 00000000 + +

Table 12-1 Attachments: Rules of Behavior (ROB)

+

May use rlink with a relative path, or embedded as base64.

+ + + + Document Title + +

Contingency Plan (CP)

+ + + + + + 00000000 + +

Table 12-1 Attachments: Contingency Plan (CP) Attachment

+

May use rlink with a relative path, or embedded as base64.

+ + + + Document Title + +

Configuration Management (CM) Plan

+ + + + + + 00000000 + +

Table 12-1 Attachments: Configuration Management (CM) Plan Attachment

+

May use rlink with a relative path, or embedded as base64.

+ + + + Document Title + +

Incident Response (IR) Plan

+ + + + + + 00000000 + +

Table 12-1 Attachments: Incident Response (IR) Plan Attachment

+

May use rlink with a relative path, or embedded as base64.

+ + + + Separation of Duties Matrix + +

Separation of Duties Matrix

+ + + + + + 00000000 + +

May use rlink with a relative path, or embedded as base64.

+ + - \ No newline at end of file + diff --git a/src/validations/constraints/fedramp-external-constraints.xml b/src/validations/constraints/fedramp-external-constraints.xml index f8a7babf9..aad19b32a 100644 --- a/src/validations/constraints/fedramp-external-constraints.xml +++ b/src/validations/constraints/fedramp-external-constraints.xml @@ -19,4 +19,29 @@ - + + + + + + + A FedRAMP SSP must have a User Guide attached. + + + A FedRAMP SSP must have Rules of Behavior. + + + A FedRAMP SSP must have a Contingency Plan attached. + + + A FedRAMP SSP must have a Configuration Management Plan attached. + + + A FedRAMP SSP must have an Incident Response Plan attached. + + + A FedRAMP SSP must have a Separation of Duties Matrix attached. + + + + \ No newline at end of file diff --git a/src/validations/constraints/unit-tests/has-configuration-management-plan-FAIL.yaml b/src/validations/constraints/unit-tests/has-configuration-management-plan-FAIL.yaml new file mode 100644 index 000000000..8690c51cf --- /dev/null +++ b/src/validations/constraints/unit-tests/has-configuration-management-plan-FAIL.yaml @@ -0,0 +1,9 @@ +test-case: + name: Negative Test for has-configuration-management-plan + description: >- + This test case validates the behavior of constraint + has-configuration-management-plan + content: ../content/ssp-all-INVALID.xml + expectations: + - constraint-id: has-configuration-management-plan + result: fail diff --git a/src/validations/constraints/unit-tests/has-configuration-management-plan-PASS.yaml b/src/validations/constraints/unit-tests/has-configuration-management-plan-PASS.yaml new file mode 100644 index 000000000..e0549b2de --- /dev/null +++ b/src/validations/constraints/unit-tests/has-configuration-management-plan-PASS.yaml @@ -0,0 +1,9 @@ +test-case: + name: Positive Test for has-configuration-management-plan + description: >- + This test case validates the behavior of constraint + has-configuration-management-plan + content: ../content/ssp-all-VALID.xml + expectations: + - constraint-id: has-configuration-management-plan + result: pass diff --git a/src/validations/constraints/unit-tests/has-incident-response-plan-FAIL.yaml b/src/validations/constraints/unit-tests/has-incident-response-plan-FAIL.yaml new file mode 100644 index 000000000..00571bd54 --- /dev/null +++ b/src/validations/constraints/unit-tests/has-incident-response-plan-FAIL.yaml @@ -0,0 +1,9 @@ +test-case: + name: Negative Test for has-incident-response-plan + description: >- + This test case validates the behavior of constraint + has-incident-response-plan + content: ../content/ssp-all-INVALID.xml + expectations: + - constraint-id: has-incident-response-plan + result: fail diff --git a/src/validations/constraints/unit-tests/has-incident-response-plan-PASS.yaml b/src/validations/constraints/unit-tests/has-incident-response-plan-PASS.yaml new file mode 100644 index 000000000..5fc613770 --- /dev/null +++ b/src/validations/constraints/unit-tests/has-incident-response-plan-PASS.yaml @@ -0,0 +1,9 @@ +test-case: + name: Positive Test for has-incident-response-plan + description: >- + This test case validates the behavior of constraint + has-incident-response-plan + content: ../content/ssp-all-VALID.xml + expectations: + - constraint-id: has-incident-response-plan + result: pass diff --git a/src/validations/constraints/unit-tests/has-information-system-contingency-plan-FAIL.yaml b/src/validations/constraints/unit-tests/has-information-system-contingency-plan-FAIL.yaml new file mode 100644 index 000000000..12829e89d --- /dev/null +++ b/src/validations/constraints/unit-tests/has-information-system-contingency-plan-FAIL.yaml @@ -0,0 +1,9 @@ +test-case: + name: Negative Test for has-information-system-contingency-plan + description: >- + This test case validates the behavior of constraint + has-information-system-contingency-plan + content: ../content/ssp-all-INVALID.xml + expectations: + - constraint-id: has-information-system-contingency-plan + result: fail diff --git a/src/validations/constraints/unit-tests/has-information-system-contingency-plan-PASS.yaml b/src/validations/constraints/unit-tests/has-information-system-contingency-plan-PASS.yaml new file mode 100644 index 000000000..66b92ccff --- /dev/null +++ b/src/validations/constraints/unit-tests/has-information-system-contingency-plan-PASS.yaml @@ -0,0 +1,9 @@ +test-case: + name: Positive Test for has-information-system-contingency-plan + description: >- + This test case validates the behavior of constraint + has-information-system-contingency-plan + content: ../content/ssp-all-VALID.xml + expectations: + - constraint-id: has-information-system-contingency-plan + result: pass diff --git a/src/validations/constraints/unit-tests/has-rules-of-behavior-FAIL.yaml b/src/validations/constraints/unit-tests/has-rules-of-behavior-FAIL.yaml new file mode 100644 index 000000000..a8fb5cd39 --- /dev/null +++ b/src/validations/constraints/unit-tests/has-rules-of-behavior-FAIL.yaml @@ -0,0 +1,7 @@ +test-case: + name: Negative Test for has-rules-of-behavior + description: This test case validates the behavior of constraint has-rules-of-behavior + content: ../content/ssp-all-INVALID.xml + expectations: + - constraint-id: has-rules-of-behavior + result: fail diff --git a/src/validations/constraints/unit-tests/has-rules-of-behavior-PASS.yaml b/src/validations/constraints/unit-tests/has-rules-of-behavior-PASS.yaml new file mode 100644 index 000000000..674cd2e58 --- /dev/null +++ b/src/validations/constraints/unit-tests/has-rules-of-behavior-PASS.yaml @@ -0,0 +1,7 @@ +test-case: + name: Positive Test for has-rules-of-behavior + description: This test case validates the behavior of constraint has-rules-of-behavior + content: ../content/ssp-all-VALID.xml + expectations: + - constraint-id: has-rules-of-behavior + result: pass diff --git a/src/validations/constraints/unit-tests/has-separation-of-duties-matrix-FAIL.yaml b/src/validations/constraints/unit-tests/has-separation-of-duties-matrix-FAIL.yaml new file mode 100644 index 000000000..f08c71f1c --- /dev/null +++ b/src/validations/constraints/unit-tests/has-separation-of-duties-matrix-FAIL.yaml @@ -0,0 +1,9 @@ +test-case: + name: Negative Test for has-separation-of-duties-matrix + description: >- + This test case validates the behavior of constraint + has-separation-of-duties-matrix + content: ../content/ssp-all-INVALID.xml + expectations: + - constraint-id: has-separation-of-duties-matrix + result: fail diff --git a/src/validations/constraints/unit-tests/has-separation-of-duties-matrix-PASS.yaml b/src/validations/constraints/unit-tests/has-separation-of-duties-matrix-PASS.yaml new file mode 100644 index 000000000..25bd5240b --- /dev/null +++ b/src/validations/constraints/unit-tests/has-separation-of-duties-matrix-PASS.yaml @@ -0,0 +1,9 @@ +test-case: + name: Positive Test for has-separation-of-duties-matrix + description: >- + This test case validates the behavior of constraint + has-separation-of-duties-matrix + content: ../content/ssp-all-VALID.xml + expectations: + - constraint-id: has-separation-of-duties-matrix + result: pass diff --git a/src/validations/constraints/unit-tests/has-user-guide-FAIL.yaml b/src/validations/constraints/unit-tests/has-user-guide-FAIL.yaml new file mode 100644 index 000000000..bbe09e5ce --- /dev/null +++ b/src/validations/constraints/unit-tests/has-user-guide-FAIL.yaml @@ -0,0 +1,7 @@ +test-case: + name: Negative Test for has-user-guide + description: This test case validates the behavior of constraint has-user-guide + content: ../content/ssp-all-INVALID.xml + expectations: + - constraint-id: has-user-guide + result: fail diff --git a/src/validations/constraints/unit-tests/has-user-guide-PASS.yaml b/src/validations/constraints/unit-tests/has-user-guide-PASS.yaml new file mode 100644 index 000000000..ab5e22bc1 --- /dev/null +++ b/src/validations/constraints/unit-tests/has-user-guide-PASS.yaml @@ -0,0 +1,7 @@ +test-case: + name: Positive Test for has-user-guide + description: This test case validates the behavior of constraint has-user-guide + content: ../content/ssp-all-VALID.xml + expectations: + - constraint-id: has-user-guide + result: pass