Comments (2)
12/034/2020
This issue was not addressed by the PR #32 .
The component example indicates that it implements the control enhancement AC-2(2) from Rev4 which reads:
(2) ACCOUNT MANAGEMENT | REMOVAL OF TEMPORARY / EMERGENCY ACCOUNTS
The information system automatically [Selection: removes; disables] temporary and emergency accounts after [Assignment: organization-defined time period for each type of account].
Supplemental Guidance: This control enhancement requires the removal of both temporary and emergency accounts automatically after a predefined period of time has elapsed, rather than at the convenience of the systems administrator.
But the OSCAL component example reproduced below addresses inactive accounts:
"control-implementations": [
{
"uuid": "cfcdd674-8595-4f98-a9d1-3ac70825c49f",
"source": "../../../content/nist.gov/SP800-53/rev4/json/NIST_SP-800-53_rev4_catalog.json",
"description": "This is a partial implementation of the SP 800-53 rev4 catalog, focusing on the control enhancement AC-2 (2).",
"implemented-requirements": [
{
"uuid": "d1016df0-9b5c-4839-86cd-f9c1d113077b",
"description": "Inactive accounts are automatically disabled based on the duration specified by the duration parameter. Disabled accounts are expected to be reviewed and removed when appropriate.",
"control-id": "ac-2.2"
}
]
},
AC-2(3) deals with inactive accounts, not not AC-2(2).
AC-2(3) reads in 800-53 r4:
(3) ACCOUNT MANAGEMENT | DISABLE INACTIVE ACCOUNTS
The information system automatically disables inactive accounts after [Assignment: organization-defined time period].
from oscal-content.
True. PR #32 focused on changes to the SP 800-53 content. Related content has not been updated yet. This issue is still open because this still needs to be fixed.
from oscal-content.
Related Issues (20)
- YAML Folding Block Error from Filetype Extension Conversion HOT 1
- Add Linking from Objectives to Statements for the 800-53 Catalog HOT 8
- Invalid party references in SP 800-53 rev4 catalog
- Integrate profile checker Schematron into CI/CD HOT 7
- Examples of Actions in Metadata Assembly of Different OSCAL Model Instances HOT 6
- Auto-generate Content in New Development Branch
- Refresh production pipelines for Rev 5 update HOT 24
- SP800-53 Rev 5.2 improvements / EPIC
- Clean Up Extraneous Example Content HOT 1
- Example SSP Doesn't Use `this-system` Component Approach HOT 3
- Create a very basic example to trace one control through the OSCAL models. HOT 5
- Towards rev 5.2 update: control patch detector and writer HOT 2
- Add Catalog Content for NIST 800-171 HOT 3
- Current Resolved Catalogs for SP 800-53B Rev5 Baselines Missing `alt-identier` props after Resolution HOT 7
- Draft Profiles Resolve Against No Longer Existing Import HOT 2
- Hyperlink needs update HOT 1
- Set up Link Checking for Markdown and Repo Files HOT 5
- Link to JSON Catalog in Source Directory README is wrong
- Enriching copy of SP800-53 with explicit links?
- Enriching SP800-53A with links to statements
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from oscal-content.