diff --git a/features/fedramp_extensions.feature b/features/fedramp_extensions.feature index 6ffa56cfa..3f47aa976 100644 --- a/features/fedramp_extensions.feature +++ b/features/fedramp_extensions.feature @@ -101,6 +101,8 @@ Examples: | has-network-architecture-diagram-link-rel-allowed-value-PASS.yaml | | has-rules-of-behavior-FAIL.yaml | | has-rules-of-behavior-PASS.yaml | + | has-security-sensitivity-level-FAIL.yaml | + | has-security-sensitivity-level-PASS.yaml | | has-separation-of-duties-matrix-FAIL.yaml | | has-separation-of-duties-matrix-PASS.yaml | | has-user-guide-FAIL.yaml | @@ -197,6 +199,7 @@ Examples: | has-network-architecture-diagram-link-rel | | has-network-architecture-diagram-link-rel-allowed-value | | has-rules-of-behavior | + | has-security-sensitivity-level | | has-separation-of-duties-matrix | | has-user-guide | | information-type-system | diff --git a/src/validations/constraints/content/ssp-has-security-sensitivity-level-INVALID.xml b/src/validations/constraints/content/ssp-has-security-sensitivity-level-INVALID.xml new file mode 100644 index 000000000..25cbe3dbe --- /dev/null +++ b/src/validations/constraints/content/ssp-has-security-sensitivity-level-INVALID.xml @@ -0,0 +1,8 @@ + + + + + diff --git a/src/validations/constraints/fedramp-external-constraints.xml b/src/validations/constraints/fedramp-external-constraints.xml index 881e99a33..ad7180ca1 100644 --- a/src/validations/constraints/fedramp-external-constraints.xml +++ b/src/validations/constraints/fedramp-external-constraints.xml @@ -137,6 +137,9 @@ Each FedRAMP SSP data flow diagram must have a link rel attribute with the value "diagram". + + A FedRAMP SSP Must have a security sensitivity level. + diff --git a/src/validations/constraints/unit-tests/has-security-sensitivity-level-FAIL.yaml b/src/validations/constraints/unit-tests/has-security-sensitivity-level-FAIL.yaml new file mode 100644 index 000000000..0aa9e2dd7 --- /dev/null +++ b/src/validations/constraints/unit-tests/has-security-sensitivity-level-FAIL.yaml @@ -0,0 +1,9 @@ +test-case: + name: Negative Test for has-security-sensitivity-level + description: >- + This test case validates the behavior of constraint + has-security-sensitivity-level + content: ../content/ssp-has-security-sensitivity-level-INVALID.xml + expectations: + - constraint-id: has-security-sensitivity-level + result: fail diff --git a/src/validations/constraints/unit-tests/has-security-sensitivity-level-PASS.yaml b/src/validations/constraints/unit-tests/has-security-sensitivity-level-PASS.yaml new file mode 100644 index 000000000..be4216b92 --- /dev/null +++ b/src/validations/constraints/unit-tests/has-security-sensitivity-level-PASS.yaml @@ -0,0 +1,9 @@ +test-case: + name: Positive Test for has-security-sensitivity-level + description: >- + This test case validates the behavior of constraint + has-security-sensitivity-level + content: ../content/ssp-all-VALID.xml + expectations: + - constraint-id: has-security-sensitivity-level + result: pass