Publish Updated NIST SP 800-53 Revision 5.1.1 Controls #220

aj-stein-nist · 2023-11-09T22:51:26Z

Committer Notes

This pull request will update the catalog to the recent release of NIST SP 800-53 Revision 5.1.1 controls.

All Submissions:

Have you followed the guidelines in our Contributing document?
Have you checked to ensure there aren't other open Pull Requests for the same update/change?
Have you squashed any non-relevant commits and commit messages? [instructions]
Do all automated CI/CD checks pass?

Changes to Core Features:

Have you added an explanation of what your changes do and why you'd like us to include them? All commits include relevant details about changes
~~Have you written new tests for your core changes, as applicable?~~ N/A
~~Have you included examples of how to use your new feature(s)?~~ N/A

iMichaela

@aj-stein-nist - the new catalog has the same metadata (same root uuid, date, catalog version) with the old one but it was changed and the IA-13 was added plus some editorial changes.

aj-stein-nist · 2023-11-14T14:10:05Z

@aj-stein-nist - the new catalog has the same metadata (same root uuid, date, catalog version) with the old one but it was changed and the IA-13 was added plus some editorial changes.

I was unable to finish work on this last night prior to your review. Expect changes this morning, apologies. This was on the to-do last night I had not completed.

iMichaela · 2023-11-14T15:52:22Z

@aj-stein-nist - the new catalog has the same metadata (same root uuid, date, catalog version) with the old one but it was changed and the IA-13 was added plus some editorial changes.

I was unable to finish work on this last night prior to your review. Expect changes this morning, apologies. This was on the to-do last night I had not completed.

Perfect. Thank you. I saw the submission of the PR, did not realize it is not ready for review.

wendellpiez

Markup appears all to be consistent - an exacting task, nicely done.

Re-running Schematron one last time indicated the final digit was missing from this UUID.

wendellpiez

Thanks for the trouble on final-final automated checks, as well.

src/nist.gov/SP800-53/rev5/xml/NIST_SP-800-53_rev5_catalog.xml

iMichaela

Can we discuss the comments? Everything else looks great. Thank you for all this work. I did not have the edits from the RMF team so precise accuracy of the content could not be assessed.

src/nist.gov/SP800-53/rev5/xml/NIST_SP-800-53_rev5_catalog.xml

wendellpiez

Looking good and better too, thanks AJ.

This was resolved.

@name

* Adding links from assessment objectives to statement items (#147) * For consistency providing link bindings, making three corrections by hand on label properties (prop[@name='label']: - 'AC-20a.1' becomes 'AC-20a.01' - 'AC-20a.2' becomes 'AC-20a.02' - 'PE-03(01)02]' becomes 'PE-03(01)[02]' * Adding enhancement XSLT with preliminary result * Cleanup: updating content, removing preliminary result * Correcting validation error * Publish Updated NIST SP 800-53 Revision 5.1.1 Controls (#220) * Update param AC-07(02)_ODP[02] to use and, not or. * Param AC-24_ODP[01] to require only one choice. * Add parens to param CA_02(03)_ODP[01] pluralization * Limit param CA-08(03)_ODP[02] to 1, not >=1 select * Change PM-31_ODP[02] and PM-31_ODP[03] param plurals * Add control IA-13 to catalog. * Add control enhancement IA-13.1 to catalog. * Add control enhancement IA-13.2 to catalog. * IA-13 control and enhancements refs must link back. * Implementation level and assurance tag for new controls. * Add FIPS 196 and FIPS 198-1 for IA-13.3 references to back-matter. * Add IA-13.3, align final edits from RMF Team, and version metadata. * Fix bad copy-paste on FIPS-196 UUID anchor for IA-13.3 refs Re-running Schematron one last time indicated the final digit was missing from this UUID. * Fix revisions, errant link/@rel, and resource title * Add missing ia-13 links. * added links for assessment objectives * contrpl ia-13.3 error fixed * Per reviewer's comment, replaced depends-on with related-to. * Updated last-modified and version * updated rel value to assessment-for per FedRAMP's request * updated profiles' metadata * updated profiles' root uuid --------- Co-authored-by: Wendell Piez <[email protected]> Co-authored-by: A.J. Stein <[email protected]> Co-authored-by: Iorga <[email protected]> Co-authored-by: Iorga <[email protected]>

@name

* Adding links from assessment objectives to statement items (#147) * For consistency providing link bindings, making three corrections by hand on label properties (prop[@name='label']: - 'AC-20a.1' becomes 'AC-20a.01' - 'AC-20a.2' becomes 'AC-20a.02' - 'PE-03(01)02]' becomes 'PE-03(01)[02]' * Adding enhancement XSLT with preliminary result * Cleanup: updating content, removing preliminary result * Correcting validation error * Publish Updated NIST SP 800-53 Revision 5.1.1 Controls (#220) * Update param AC-07(02)_ODP[02] to use and, not or. * Param AC-24_ODP[01] to require only one choice. * Add parens to param CA_02(03)_ODP[01] pluralization * Limit param CA-08(03)_ODP[02] to 1, not >=1 select * Change PM-31_ODP[02] and PM-31_ODP[03] param plurals * Add control IA-13 to catalog. * Add control enhancement IA-13.1 to catalog. * Add control enhancement IA-13.2 to catalog. * IA-13 control and enhancements refs must link back. * Implementation level and assurance tag for new controls. * Add FIPS 196 and FIPS 198-1 for IA-13.3 references to back-matter. * Add IA-13.3, align final edits from RMF Team, and version metadata. * Fix bad copy-paste on FIPS-196 UUID anchor for IA-13.3 refs Re-running Schematron one last time indicated the final digit was missing from this UUID. * Fix revisions, errant link/@rel, and resource title * Add missing ia-13 links. * added links for assessment objectives * contrpl ia-13.3 error fixed * Per reviewer's comment, replaced depends-on with related-to. * Updated last-modified and version * updated rel value to assessment-for per FedRAMP's request * updated profiles' metadata * updated profiles' root uuid --------- Co-authored-by: Wendell Piez <[email protected]> Co-authored-by: A.J. Stein <[email protected]> Co-authored-by: Iorga <[email protected]> Co-authored-by: Iorga <[email protected]>

@name

* Feature 800 53 updates (#221) * Adding links from assessment objectives to statement items (#147) * For consistency providing link bindings, making three corrections by hand on label properties (prop[@name='label']: - 'AC-20a.1' becomes 'AC-20a.01' - 'AC-20a.2' becomes 'AC-20a.02' - 'PE-03(01)02]' becomes 'PE-03(01)[02]' * Adding enhancement XSLT with preliminary result * Cleanup: updating content, removing preliminary result * Correcting validation error * Publish Updated NIST SP 800-53 Revision 5.1.1 Controls (#220) * Update param AC-07(02)_ODP[02] to use and, not or. * Param AC-24_ODP[01] to require only one choice. * Add parens to param CA_02(03)_ODP[01] pluralization * Limit param CA-08(03)_ODP[02] to 1, not >=1 select * Change PM-31_ODP[02] and PM-31_ODP[03] param plurals * Add control IA-13 to catalog. * Add control enhancement IA-13.1 to catalog. * Add control enhancement IA-13.2 to catalog. * IA-13 control and enhancements refs must link back. * Implementation level and assurance tag for new controls. * Add FIPS 196 and FIPS 198-1 for IA-13.3 references to back-matter. * Add IA-13.3, align final edits from RMF Team, and version metadata. * Fix bad copy-paste on FIPS-196 UUID anchor for IA-13.3 refs Re-running Schematron one last time indicated the final digit was missing from this UUID. * Fix revisions, errant link/@rel, and resource title * Add missing ia-13 links. * added links for assessment objectives * contrpl ia-13.3 error fixed * Per reviewer's comment, replaced depends-on with related-to. * Updated last-modified and version * updated rel value to assessment-for per FedRAMP's request * updated profiles' metadata * updated profiles' root uuid --------- Co-authored-by: Wendell Piez <[email protected]> Co-authored-by: A.J. Stein <[email protected]> Co-authored-by: Iorga <[email protected]> Co-authored-by: Iorga <[email protected]> * Adjust home repository to oscal-content --------- Co-authored-by: Wendell Piez <[email protected]> Co-authored-by: A.J. Stein <[email protected]> Co-authored-by: Iorga <[email protected]> Co-authored-by: Iorga <[email protected]>

aj-stein-nist added 9 commits November 3, 2023 11:37

Update param AC-07(02)_ODP[02] to use and, not or.

ec848c5

Param AC-24_ODP[01] to require only one choice.

a8e4f55

Add parens to param CA_02(03)_ODP[01] pluralization

216b5b4

Limit param CA-08(03)_ODP[02] to 1, not >=1 select

226febc

Change PM-31_ODP[02] and PM-31_ODP[03] param plurals

369bd03

Add control IA-13 to catalog.

f31c552

Add control enhancement IA-13.1 to catalog.

b8a6828

Add control enhancement IA-13.2 to catalog.

967bf22

IA-13 control and enhancements refs must link back.

17a13c8

aj-stein-nist self-assigned this Nov 9, 2023

iMichaela previously requested changes Nov 14, 2023

View reviewed changes

Implementation level and assurance tag for new controls.

4e1f6b4

aj-stein-nist force-pushed the content-updates-5.1.1 branch from 09507c5 to 4e1f6b4 Compare November 14, 2023 17:28

Add FIPS 196 and FIPS 198-1 for IA-13.3 references to back-matter.

bfeb400

aj-stein-nist requested a review from iMichaela November 14, 2023 21:20

aj-stein-nist marked this pull request as ready for review November 14, 2023 21:20

aj-stein-nist requested a review from wendellpiez November 14, 2023 21:20

Add IA-13.3, align final edits from RMF Team, and version metadata.

21160e6

aj-stein-nist force-pushed the content-updates-5.1.1 branch from 023de0e to 21160e6 Compare November 14, 2023 21:27

wendellpiez approved these changes Nov 14, 2023

View reviewed changes

Fix bad copy-paste on FIPS-196 UUID anchor for IA-13.3 refs

5aef8c2

Re-running Schematron one last time indicated the final digit was missing from this UUID.

aj-stein-nist requested a review from wendellpiez November 14, 2023 22:25

wendellpiez approved these changes Nov 14, 2023

View reviewed changes

Compton-US reviewed Nov 15, 2023

View reviewed changes

src/nist.gov/SP800-53/rev5/xml/NIST_SP-800-53_rev5_catalog.xml Show resolved Hide resolved

Compton-US reviewed Nov 15, 2023

View reviewed changes

src/nist.gov/SP800-53/rev5/xml/NIST_SP-800-53_rev5_catalog.xml Show resolved Hide resolved

iMichaela reviewed Nov 16, 2023

View reviewed changes

src/nist.gov/SP800-53/rev5/xml/NIST_SP-800-53_rev5_catalog.xml Show resolved Hide resolved

src/nist.gov/SP800-53/rev5/xml/NIST_SP-800-53_rev5_catalog.xml Show resolved Hide resolved

src/nist.gov/SP800-53/rev5/xml/NIST_SP-800-53_rev5_catalog.xml Outdated Show resolved Hide resolved

Fix revisions, errant link/@rel, and resource title

e6bfb87

aj-stein-nist force-pushed the content-updates-5.1.1 branch from 048fe91 to e6bfb87 Compare November 16, 2023 17:24

aj-stein-nist requested review from wendellpiez, Compton-US and iMichaela November 16, 2023 17:29

wendellpiez approved these changes Nov 16, 2023

View reviewed changes

david-waltermire mentioned this pull request Nov 28, 2023

Update FedRAMP baselines based on NIST SP 800-53 rev5.1.1 release GSA/fedramp-automation#533

Closed

18 tasks

Compton-US changed the base branch from develop to feature-800-53-updates November 29, 2023 15:58

Compton-US merged commit d6ec10e into feature-800-53-updates Nov 29, 2023
1 check passed

Compton-US deleted the content-updates-5.1.1 branch November 29, 2023 16:03

Compton-US mentioned this pull request Nov 29, 2023

Feature 800 53 updates #221

Merged

9 tasks

Compton-US mentioned this pull request Dec 5, 2023

Feature 800 53 updates (#221) #222

Merged

7 tasks

iMichaela mentioned this pull request Dec 13, 2023

Addresses bugs in 800-53 catalog (issues 224 226 227 for OSCAL content patch 1.2.1 #228

Merged

10 tasks

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Publish Updated NIST SP 800-53 Revision 5.1.1 Controls #220

Publish Updated NIST SP 800-53 Revision 5.1.1 Controls #220

aj-stein-nist commented Nov 9, 2023 •

edited

Loading

iMichaela left a comment

aj-stein-nist commented Nov 14, 2023

iMichaela commented Nov 14, 2023

wendellpiez left a comment

wendellpiez left a comment

iMichaela left a comment

wendellpiez left a comment

Publish Updated NIST SP 800-53 Revision 5.1.1 Controls #220

Publish Updated NIST SP 800-53 Revision 5.1.1 Controls #220

Conversation

aj-stein-nist commented Nov 9, 2023 • edited Loading

Committer Notes

All Submissions:

Changes to Core Features:

iMichaela left a comment

Choose a reason for hiding this comment

aj-stein-nist commented Nov 14, 2023

iMichaela commented Nov 14, 2023

wendellpiez left a comment

Choose a reason for hiding this comment

wendellpiez left a comment

Choose a reason for hiding this comment

iMichaela left a comment

Choose a reason for hiding this comment

wendellpiez left a comment

Choose a reason for hiding this comment

aj-stein-nist commented Nov 9, 2023 •

edited

Loading