diff --git a/features/fedramp_extensions.feature b/features/fedramp_extensions.feature index f593d98d1..edcfa7d10 100644 --- a/features/fedramp_extensions.feature +++ b/features/fedramp_extensions.feature @@ -113,6 +113,12 @@ Examples: | import-profile-has-href-attribute-PASS.yaml | | import-profile-has-valid-content-FAIL.yaml | | import-profile-has-valid-content-PASS.yaml | + | information-type-has-availability-impact-FAIL.yaml | + | information-type-has-availability-impact-PASS.yaml | + | information-type-has-confidentiality-impact-FAIL.yaml | + | information-type-has-confidentiality-impact-PASS.yaml | + | information-type-has-integrity-impact-FAIL.yaml | + | information-type-has-integrity-impact-PASS.yaml | | information-type-id-FAIL.yaml | | information-type-id-PASS.yaml | | information-type-system-FAIL.yaml | @@ -218,6 +224,9 @@ Examples: | import-profile-has-href-attribute | | import-profile-has-valid-content | | information-type-800-60-v2r1 | + | information-type-has-availability-impact | + | information-type-has-confidentiality-impact | + | information-type-has-integrity-impact | | information-type-system | | interconnection-direction | | interconnection-security | diff --git a/src/validations/constraints/content/ssp-has-network-architecture-INVALID.xml b/src/validations/constraints/content/ssp-has-network-architecture-INVALID.xml index 25cbe3dbe..f6d9f9996 100644 --- a/src/validations/constraints/content/ssp-has-network-architecture-INVALID.xml +++ b/src/validations/constraints/content/ssp-has-network-architecture-INVALID.xml @@ -5,4 +5,4 @@ uuid="12345678-1234-4321-8765-123456789012"> - + \ No newline at end of file diff --git a/src/validations/constraints/content/ssp-information-type-has-availability-impact-INVALID.xml b/src/validations/constraints/content/ssp-information-type-has-availability-impact-INVALID.xml new file mode 100644 index 000000000..4763f1b47 --- /dev/null +++ b/src/validations/constraints/content/ssp-information-type-has-availability-impact-INVALID.xml @@ -0,0 +1,12 @@ + + + + + + + + + \ No newline at end of file diff --git a/src/validations/constraints/content/ssp-information-type-has-confidentiality-impact-INVALID.xml b/src/validations/constraints/content/ssp-information-type-has-confidentiality-impact-INVALID.xml new file mode 100644 index 000000000..4763f1b47 --- /dev/null +++ b/src/validations/constraints/content/ssp-information-type-has-confidentiality-impact-INVALID.xml @@ -0,0 +1,12 @@ + + + + + + + + + \ No newline at end of file diff --git a/src/validations/constraints/content/ssp-information-type-has-integrity-impact-INVALID.xml b/src/validations/constraints/content/ssp-information-type-has-integrity-impact-INVALID.xml new file mode 100644 index 000000000..4763f1b47 --- /dev/null +++ b/src/validations/constraints/content/ssp-information-type-has-integrity-impact-INVALID.xml @@ -0,0 +1,12 @@ + + + + + + + + + \ No newline at end of file diff --git a/src/validations/constraints/fedramp-external-constraints.xml b/src/validations/constraints/fedramp-external-constraints.xml index 7a2288d53..40a444b02 100644 --- a/src/validations/constraints/fedramp-external-constraints.xml +++ b/src/validations/constraints/fedramp-external-constraints.xml @@ -174,6 +174,18 @@ A FedRAMP SSP MUST import a profile or catalog of security controls to reference implemented requirements against those control(s). + + + A FedRAMP SSP information type MUST have a confidentiality impact. + + + + A FedRAMP SSP information type MUST have an integrity impact. + + + + A FedRAMP SSP information type MUST have an availability impact. + diff --git a/src/validations/constraints/unit-tests/information-type-has-availability-impact-FAIL.yaml b/src/validations/constraints/unit-tests/information-type-has-availability-impact-FAIL.yaml new file mode 100644 index 000000000..5cc345d3f --- /dev/null +++ b/src/validations/constraints/unit-tests/information-type-has-availability-impact-FAIL.yaml @@ -0,0 +1,7 @@ +test-case: + name: Negative Test for information-type-has-availability-impact + description: Test that an SSP system-characteristics system-information information-type element does not have an availability-impact element. + content: ../content/ssp-information-type-has-availability-impact-INVALID.xml + expectations: + - constraint-id: information-type-has-availability-impact + result: fail diff --git a/src/validations/constraints/unit-tests/information-type-has-availability-impact-PASS.yaml b/src/validations/constraints/unit-tests/information-type-has-availability-impact-PASS.yaml new file mode 100644 index 000000000..4dc13de60 --- /dev/null +++ b/src/validations/constraints/unit-tests/information-type-has-availability-impact-PASS.yaml @@ -0,0 +1,7 @@ +test-case: + name: Positive Test for information-type-has-availability-impact + description: Test that an SSP system-characteristics system-information information-type element has an availability-impact element. + content: ../content/ssp-all-VALID.xml + expectations: + - constraint-id: information-type-has-availability-impact + result: pass diff --git a/src/validations/constraints/unit-tests/information-type-has-confidentiality-impact-FAIL.yaml b/src/validations/constraints/unit-tests/information-type-has-confidentiality-impact-FAIL.yaml new file mode 100644 index 000000000..dd213b903 --- /dev/null +++ b/src/validations/constraints/unit-tests/information-type-has-confidentiality-impact-FAIL.yaml @@ -0,0 +1,7 @@ +test-case: + name: Negative Test for information-type-has-confidentiality-impact + description: Test that an SSP system-characteristics system-information information-type element does not have a confidentiality-impact element. + content: ../content/ssp-information-type-has-confidentiality-impact-INVALID.xml + expectations: + - constraint-id: information-type-has-confidentiality-impact + result: fail diff --git a/src/validations/constraints/unit-tests/information-type-has-confidentiality-impact-PASS.yaml b/src/validations/constraints/unit-tests/information-type-has-confidentiality-impact-PASS.yaml new file mode 100644 index 000000000..bb8c01682 --- /dev/null +++ b/src/validations/constraints/unit-tests/information-type-has-confidentiality-impact-PASS.yaml @@ -0,0 +1,7 @@ +test-case: + name: Positive Test for information-type-has-confidentiality-impact + description: Test that an SSP system-characteristics system-information information-type element has a confidentiality-impact element. + content: ../content/ssp-all-VALID.xml + expectations: + - constraint-id: information-type-has-confidentiality-impact + result: pass diff --git a/src/validations/constraints/unit-tests/information-type-has-integrity-impact-FAIL.yaml b/src/validations/constraints/unit-tests/information-type-has-integrity-impact-FAIL.yaml new file mode 100644 index 000000000..a36274bf5 --- /dev/null +++ b/src/validations/constraints/unit-tests/information-type-has-integrity-impact-FAIL.yaml @@ -0,0 +1,7 @@ +test-case: + name: Negative Test for information-type-has-integrity-impact + description: Test that an SSP system-characteristics system-information information-type element does not have an integrity-impact element. + content: ../content/ssp-information-type-has-integrity-impact-INVALID.xml + expectations: + - constraint-id: information-type-has-integrity-impact + result: fail diff --git a/src/validations/constraints/unit-tests/information-type-has-integrity-impact-PASS.yaml b/src/validations/constraints/unit-tests/information-type-has-integrity-impact-PASS.yaml new file mode 100644 index 000000000..0700052f6 --- /dev/null +++ b/src/validations/constraints/unit-tests/information-type-has-integrity-impact-PASS.yaml @@ -0,0 +1,7 @@ +test-case: + name: Positive Test for information-type-has-integrity-impact + description: Test that an SSP system-characteristics system-information information-type element has an integrity-impact element. + content: ../content/ssp-all-VALID.xml + expectations: + - constraint-id: information-type-has-integrity-impact + result: pass