Add system-characteristics 'has-security' constraints

[Gabeblis]

Committer Notes

Description

Added system-characteristics 'has-security' constraints and tests for each of the constraints. These should be added as they are part of the effort write all of the constraints from the constraint tracker.

Changes

• Added constraints has-security-sensitivity-level, has-security-impact-level, has-security-objective-confidentiality, has-security-objective-integrity, has-security-objective-availability to fedramp-external-constraints.xml.
• Added pass and fail yaml tests for all of the above constraints.
• Edited ssp-all-INVALID.xml to ensure all constraints fail correctly.

{Please provide a description of what this PR accomplishes. Be sure to reference any issues addressed. If the PR is a work-in-progress submitted for early review, please submit the PR as a draft PR using the "Draft pull request" dropdown.}

All Submissions:

• Have you selected the correct base branch per Contributing guidance?
• Have you set "Allow edits and access to secrets by maintainers"?
• Have you checked to ensure there aren't other open Pull Requests for the same update/change?
• Have you squashed any non-relevant commits and commit messages? [instructions]
• Have you added an explanation of what your changes do and why you'd like us to include them?
• If applicable, have all FedRAMP Documents Related to OSCAL Adoption affected by the changes in this issue have been updated.?
• If applicable, does this PR reference the issue it addresses and explain how it addresses the issue?

By submitting a pull request, you are agreeing to provide this contribution under the CC0 1.0 Universal public domain dedication.

[aj-stein-gsa]

Can you @Rene2mt sync on this PR and #610. I know they are different but there is some overlap, so I would like to review synchronously while we are on a call, perhaps tail end of standup today?

[aj-stein-gsa]

Can you @Rene2mt sync on this PR and #610. I know they are different but there is some overlap, so I would like to review synchronously while we are on a call, perhaps tail end of standup today?

AJ will disregard his own remark given our discussion during today's standup, a more comprehensive review is needed and warranted. @Gabeblis gets tell me "Overruled!" 😆