diff --git a/src/validations/constraints/fedramp-external-constraints.xml b/src/validations/constraints/fedramp-external-constraints.xml index 9bad8c674..bd9f75b82 100644 --- a/src/validations/constraints/fedramp-external-constraints.xml +++ b/src/validations/constraints/fedramp-external-constraints.xml @@ -78,7 +78,7 @@ Component Has Non-Provider Responsible Role - Each component dealing with leveraged systems, interconnections, or authorized services MUST have at least one responsible role other than "provider". + A FedRAMP SSP MUST have each component describing leveraged systems, interconnections, or authorized services identify at least one responsible role other than "provider". Component Has Provider Responsible Role @@ -121,7 +121,7 @@ Non-Provider Responsible Role References User - Each non-provider responsible role MUST reference at least one user with an authorized privilege and function performed via the "privilege-uuid" property. + A FedRAMP SSP MUST have each component describing leveraged systems, interconnections, or authorized services reference at least one user with an authorized privilege and function performed via the "privilege-uuid" property.