diff --git a/features/fedramp_extensions.feature b/features/fedramp_extensions.feature index a59781806..e9975ef23 100644 --- a/features/fedramp_extensions.feature +++ b/features/fedramp_extensions.feature @@ -45,6 +45,7 @@ Examples: | data-center-us | | deployment-model | | external-system-nature-of-agreement | + | fedramp-citations-has-correct-link | | fedramp-version | | fully-operational-date-is-valid | | fully-operational-date-type | @@ -71,7 +72,10 @@ Examples: | has-data-flow-diagram-link-rel | | has-data-flow-diagram-link-rel-allowed-value | | has-data-flow-diagram-uuid | + | has-digital-identity-worksheet | + | has-e-authentication-workflow | | has-federation-assurance-level | + | has-fedramp-citations | | has-fully-operational-date | | has-identity-assurance-level | | has-incident-response-plan | @@ -85,6 +89,7 @@ Examples: | has-network-architecture-diagram-link-href-target | | has-network-architecture-diagram-link-rel | | has-network-architecture-diagram-link-rel-allowed-value | + | has-privacy-impact-assessment | | has-published-date | | has-rules-of-behavior | | has-security-impact-level | @@ -195,6 +200,8 @@ Examples: | deployment-model-PASS.yaml | | external-system-nature-of-agreement-FAIL.yaml | | external-system-nature-of-agreement-PASS.yaml | + | fedramp-citations-has-correct-link-FAIL.yaml | + | fedramp-citations-has-correct-link-PASS.yaml | | fedramp-version-FAIL.yaml | | fedramp-version-PASS.yaml | | fully-operational-date-is-valid-FAIL.yaml | @@ -247,8 +254,14 @@ Examples: | has-data-flow-diagram-link-rel-allowed-value-PASS.yaml | | has-data-flow-diagram-uuid-FAIL.yaml | | has-data-flow-diagram-uuid-PASS.yaml | + | has-digital-identity-worksheet-FAIL.yaml | + | has-digital-identity-worksheet-PASS.yaml | + | has-e-authentication-workflow-FAIL.yaml | + | has-e-authentication-workflow-PASS.yaml | | has-federation-assurance-level-FAIL.yaml | | has-federation-assurance-level-PASS.yaml | + | has-fedramp-citations-FAIL.yaml | + | has-fedramp-citations-PASS.yaml | | has-fully-operational-date-FAIL.yaml | | has-fully-operational-date-PASS.yaml | | has-identity-assurance-level-FAIL.yaml | @@ -275,6 +288,8 @@ Examples: | has-network-architecture-diagram-link-rel-PASS.yaml | | has-network-architecture-diagram-link-rel-allowed-value-FAIL.yaml | | has-network-architecture-diagram-link-rel-allowed-value-PASS.yaml | + | has-privacy-impact-assessment-FAIL.yaml | + | has-privacy-impact-assessment-PASS.yaml | | has-published-date-FAIL.yaml | | has-published-date-PASS.yaml | | has-rules-of-behavior-FAIL.yaml | diff --git a/src/validations/constraints/content/ssp-all-VALID.xml b/src/validations/constraints/content/ssp-all-VALID.xml index 521cc3b0a..4e97f144c 100644 --- a/src/validations/constraints/content/ssp-all-VALID.xml +++ b/src/validations/constraints/content/ssp-all-VALID.xml @@ -561,7 +561,7 @@

Data flow Diagram

- + @@ -570,5 +570,53 @@

May use rlink with a relative path, or embedded as base64.

+ + + Privacy Impact Assessment + +

Privacy Impact Assessment (PIA)

+
+ + + + + 00000000 + +

Table 12-1 Attachments: Privacy Impact Assessment

+

May use rlink with a relative path, or embedded as base64.

+
+
+ + + E-Authentication Workflow + +

E-Authentication Workflow Diagram

+
+ + + + + 00000000 + +

Table 12-1 Attachments: E-Authentication Workflow Diagram

+

May use rlink with a relative path, or embedded as base64.

+
+
+ + + Digital Identity Worksheet + +

Digital Identity Determination Worksheet

+
+ + + + + 00000000 + +

Table 12-1 Attachments: Digital Identity Worksheet

+

May use rlink with a relative path, or embedded as base64.

+
+
\ No newline at end of file diff --git a/src/validations/constraints/content/ssp-fedramp-citations-has-correct-link-INVALID.xml b/src/validations/constraints/content/ssp-fedramp-citations-has-correct-link-INVALID.xml new file mode 100644 index 000000000..1b7451db1 --- /dev/null +++ b/src/validations/constraints/content/ssp-fedramp-citations-has-correct-link-INVALID.xml @@ -0,0 +1,186 @@ + + + + Access Control Policy + +

Detailed access control policy document

+
+ + +
+ + User's Guide + +

User's Guide

+
+ + + + +

Table 12-1 Attachments: User's Guide Attachment

+

May use rlink with a relative path, or embedded as base64.

+
+
+ + Document Title + +

Rules of Behavior

+
+ + + + + 00000000 + +

Table 12-1 Attachments: Rules of Behavior (ROB)

+

May use rlink with a relative path, or embedded as base64.

+
+
+ + Document Title + +

Contingency Plan (CP)

+
+ + + + + 00000000 + +

Table 12-1 Attachments: Contingency Plan (CP) Attachment

+

May use rlink with a relative path, or embedded as base64.

+
+
+ + Document Title + +

Configuration Management (CM) Plan

+
+ + + + + 00000000 + +

Table 12-1 Attachments: Configuration Management (CM) Plan Attachment

+

May use rlink with a relative path, or embedded as base64.

+
+
+ + Document Title + +

Incident Response (IR) Plan

+
+ + + + + 00000000 + +

Table 12-1 Attachments: Incident Response (IR) Plan Attachment

+

May use rlink with a relative path, or embedded as base64.

+
+
+ + Separation of Duties Matrix + +

Separation of Duties Matrix

+
+ + + + + 00000000 + +

May use rlink with a relative path, or embedded as base64.

+
+
+ + Authorization Boundary + +

Authorization Boundary Diagram

+
+ + + + + 00000000 + +

May use rlink with a relative path, or embedded as base64.

+
+
+ + Network Architecture + +

Network Architecture Diagram

+
+ + + + + 00000000 + +

May use rlink with a relative path, or embedded as base64.

+
+
+ + Data Flow + +

Data flow Diagram

+
+ + + + + 00000000 + +

May use rlink with a relative path, or embedded as base64.

+
+
+ + Privacy Impact Assessment + +

Privacy Impact Assessment (PIA)

+
+ + + + + 00000000 + +

Table 12-1 Attachments: Privacy Impact Assessment

+

May use rlink with a relative path, or embedded as base64.

+
+
+ + E-Authentication Workflow + +

E-Authentication Workflow Diagram

+
+ + + + + 00000000 + +

Table 12-1 Attachments: E-Authentication Workflow Diagram

+

May use rlink with a relative path, or embedded as base64.

+
+
+ + Digital Identity Worksheet + +

Digital Identity Determination Worksheet

+
+ + + + + 00000000 + +

Table 12-1 Attachments: Digital Identity Worksheet

+

May use rlink with a relative path, or embedded as base64.

+
+
+
+
\ No newline at end of file diff --git a/src/validations/constraints/content/ssp-has-digital-identity-worksheet-INVALID.xml b/src/validations/constraints/content/ssp-has-digital-identity-worksheet-INVALID.xml new file mode 100644 index 000000000..c05d3dd4f --- /dev/null +++ b/src/validations/constraints/content/ssp-has-digital-identity-worksheet-INVALID.xml @@ -0,0 +1,141 @@ + + + + Access Control Policy + +

Detailed access control policy document

+
+ + +
+ + User's Guide + +

User's Guide

+
+ + + + +

Table 12-1 Attachments: User's Guide Attachment

+

May use rlink with a relative path, or embedded as base64.

+
+
+ + Document Title + +

Rules of Behavior

+
+ + + + + 00000000 + +

Table 12-1 Attachments: Rules of Behavior (ROB)

+

May use rlink with a relative path, or embedded as base64.

+
+
+ + Document Title + +

Contingency Plan (CP)

+
+ + + + + 00000000 + +

Table 12-1 Attachments: Contingency Plan (CP) Attachment

+

May use rlink with a relative path, or embedded as base64.

+
+
+ + Document Title + +

Configuration Management (CM) Plan

+
+ + + + + 00000000 + +

Table 12-1 Attachments: Configuration Management (CM) Plan Attachment

+

May use rlink with a relative path, or embedded as base64.

+
+
+ + Document Title + +

Incident Response (IR) Plan

+
+ + + + + 00000000 + +

Table 12-1 Attachments: Incident Response (IR) Plan Attachment

+

May use rlink with a relative path, or embedded as base64.

+
+
+ + Separation of Duties Matrix + +

Separation of Duties Matrix

+
+ + + + + 00000000 + +

May use rlink with a relative path, or embedded as base64.

+
+
+ + Authorization Boundary + +

Authorization Boundary Diagram

+
+ + + + + 00000000 + +

May use rlink with a relative path, or embedded as base64.

+
+
+ + Network Architecture + +

Network Architecture Diagram

+
+ + + + + 00000000 + +

May use rlink with a relative path, or embedded as base64.

+
+
+ + Data Flow + +

Data flow Diagram

+
+ + + + + 00000000 + +

May use rlink with a relative path, or embedded as base64.

+
+
+
+
\ No newline at end of file diff --git a/src/validations/constraints/content/ssp-has-e-authentication-workflow-INVALID.xml b/src/validations/constraints/content/ssp-has-e-authentication-workflow-INVALID.xml new file mode 100644 index 000000000..c05d3dd4f --- /dev/null +++ b/src/validations/constraints/content/ssp-has-e-authentication-workflow-INVALID.xml @@ -0,0 +1,141 @@ + + + + Access Control Policy + +

Detailed access control policy document

+
+ + +
+ + User's Guide + +

User's Guide

+
+ + + + +

Table 12-1 Attachments: User's Guide Attachment

+

May use rlink with a relative path, or embedded as base64.

+
+
+ + Document Title + +

Rules of Behavior

+
+ + + + + 00000000 + +

Table 12-1 Attachments: Rules of Behavior (ROB)

+

May use rlink with a relative path, or embedded as base64.

+
+
+ + Document Title + +

Contingency Plan (CP)

+
+ + + + + 00000000 + +

Table 12-1 Attachments: Contingency Plan (CP) Attachment

+

May use rlink with a relative path, or embedded as base64.

+
+
+ + Document Title + +

Configuration Management (CM) Plan

+
+ + + + + 00000000 + +

Table 12-1 Attachments: Configuration Management (CM) Plan Attachment

+

May use rlink with a relative path, or embedded as base64.

+
+
+ + Document Title + +

Incident Response (IR) Plan

+
+ + + + + 00000000 + +

Table 12-1 Attachments: Incident Response (IR) Plan Attachment

+

May use rlink with a relative path, or embedded as base64.

+
+
+ + Separation of Duties Matrix + +

Separation of Duties Matrix

+
+ + + + + 00000000 + +

May use rlink with a relative path, or embedded as base64.

+
+
+ + Authorization Boundary + +

Authorization Boundary Diagram

+
+ + + + + 00000000 + +

May use rlink with a relative path, or embedded as base64.

+
+
+ + Network Architecture + +

Network Architecture Diagram

+
+ + + + + 00000000 + +

May use rlink with a relative path, or embedded as base64.

+
+
+ + Data Flow + +

Data flow Diagram

+
+ + + + + 00000000 + +

May use rlink with a relative path, or embedded as base64.

+
+
+
+
\ No newline at end of file diff --git a/src/validations/constraints/content/ssp-has-fedramp-citations-INVALID.xml b/src/validations/constraints/content/ssp-has-fedramp-citations-INVALID.xml new file mode 100644 index 000000000..1b7451db1 --- /dev/null +++ b/src/validations/constraints/content/ssp-has-fedramp-citations-INVALID.xml @@ -0,0 +1,186 @@ + + + + Access Control Policy + +

Detailed access control policy document

+
+ + +
+ + User's Guide + +

User's Guide

+
+ + + + +

Table 12-1 Attachments: User's Guide Attachment

+

May use rlink with a relative path, or embedded as base64.

+
+
+ + Document Title + +

Rules of Behavior

+
+ + + + + 00000000 + +

Table 12-1 Attachments: Rules of Behavior (ROB)

+

May use rlink with a relative path, or embedded as base64.

+
+
+ + Document Title + +

Contingency Plan (CP)

+
+ + + + + 00000000 + +

Table 12-1 Attachments: Contingency Plan (CP) Attachment

+

May use rlink with a relative path, or embedded as base64.

+
+
+ + Document Title + +

Configuration Management (CM) Plan

+
+ + + + + 00000000 + +

Table 12-1 Attachments: Configuration Management (CM) Plan Attachment

+

May use rlink with a relative path, or embedded as base64.

+
+
+ + Document Title + +

Incident Response (IR) Plan

+
+ + + + + 00000000 + +

Table 12-1 Attachments: Incident Response (IR) Plan Attachment

+

May use rlink with a relative path, or embedded as base64.

+
+
+ + Separation of Duties Matrix + +

Separation of Duties Matrix

+
+ + + + + 00000000 + +

May use rlink with a relative path, or embedded as base64.

+
+
+ + Authorization Boundary + +

Authorization Boundary Diagram

+
+ + + + + 00000000 + +

May use rlink with a relative path, or embedded as base64.

+
+
+ + Network Architecture + +

Network Architecture Diagram

+
+ + + + + 00000000 + +

May use rlink with a relative path, or embedded as base64.

+
+
+ + Data Flow + +

Data flow Diagram

+
+ + + + + 00000000 + +

May use rlink with a relative path, or embedded as base64.

+
+
+ + Privacy Impact Assessment + +

Privacy Impact Assessment (PIA)

+
+ + + + + 00000000 + +

Table 12-1 Attachments: Privacy Impact Assessment

+

May use rlink with a relative path, or embedded as base64.

+
+
+ + E-Authentication Workflow + +

E-Authentication Workflow Diagram

+
+ + + + + 00000000 + +

Table 12-1 Attachments: E-Authentication Workflow Diagram

+

May use rlink with a relative path, or embedded as base64.

+
+
+ + Digital Identity Worksheet + +

Digital Identity Determination Worksheet

+
+ + + + + 00000000 + +

Table 12-1 Attachments: Digital Identity Worksheet

+

May use rlink with a relative path, or embedded as base64.

+
+
+
+
\ No newline at end of file diff --git a/src/validations/constraints/content/ssp-has-privacy-impact-assessment-INVALID.xml b/src/validations/constraints/content/ssp-has-privacy-impact-assessment-INVALID.xml new file mode 100644 index 000000000..c05d3dd4f --- /dev/null +++ b/src/validations/constraints/content/ssp-has-privacy-impact-assessment-INVALID.xml @@ -0,0 +1,141 @@ + + + + Access Control Policy + +

Detailed access control policy document

+
+ + +
+ + User's Guide + +

User's Guide

+
+ + + + +

Table 12-1 Attachments: User's Guide Attachment

+

May use rlink with a relative path, or embedded as base64.

+
+
+ + Document Title + +

Rules of Behavior

+
+ + + + + 00000000 + +

Table 12-1 Attachments: Rules of Behavior (ROB)

+

May use rlink with a relative path, or embedded as base64.

+
+
+ + Document Title + +

Contingency Plan (CP)

+
+ + + + + 00000000 + +

Table 12-1 Attachments: Contingency Plan (CP) Attachment

+

May use rlink with a relative path, or embedded as base64.

+
+
+ + Document Title + +

Configuration Management (CM) Plan

+
+ + + + + 00000000 + +

Table 12-1 Attachments: Configuration Management (CM) Plan Attachment

+

May use rlink with a relative path, or embedded as base64.

+
+
+ + Document Title + +

Incident Response (IR) Plan

+
+ + + + + 00000000 + +

Table 12-1 Attachments: Incident Response (IR) Plan Attachment

+

May use rlink with a relative path, or embedded as base64.

+
+
+ + Separation of Duties Matrix + +

Separation of Duties Matrix

+
+ + + + + 00000000 + +

May use rlink with a relative path, or embedded as base64.

+
+
+ + Authorization Boundary + +

Authorization Boundary Diagram

+
+ + + + + 00000000 + +

May use rlink with a relative path, or embedded as base64.

+
+
+ + Network Architecture + +

Network Architecture Diagram

+
+ + + + + 00000000 + +

May use rlink with a relative path, or embedded as base64.

+
+
+ + Data Flow + +

Data flow Diagram

+
+ + + + + 00000000 + +

May use rlink with a relative path, or embedded as base64.

+
+
+
+
\ No newline at end of file diff --git a/src/validations/constraints/fedramp-external-constraints.xml b/src/validations/constraints/fedramp-external-constraints.xml index eebb1b89a..2254b86b3 100644 --- a/src/validations/constraints/fedramp-external-constraints.xml +++ b/src/validations/constraints/fedramp-external-constraints.xml @@ -584,4 +584,34 @@ - \ No newline at end of file + + + + + Has Privacy Impact Assessment + + A FedRAMP SSP MUST have a Privacy Impact Assessment attached. + + + Has E-Authentication Workflow + + A FedRAMP SSP MUST have an E-Authentication Workflow diagram attached. + + + Has Digital Identity Worksheet + + A FedRAMP SSP MUST have a Digital Identity Worksheet attached. + + + Has FedRAMP Citations Reference + + There must be exactly one resource with a link to the FedRAMP Laws, Regulations, Standards and Guidance. None found. + + + FedRAMP Citations Has Correct Link + + The resource with the FedRAMP Laws, Regulations, Standards and Guidance is present; however, the link is incorrect. + + + + diff --git a/src/validations/constraints/unit-tests/fedramp-citations-has-correct-link-FAIL.yaml b/src/validations/constraints/unit-tests/fedramp-citations-has-correct-link-FAIL.yaml new file mode 100644 index 000000000..42fa89f94 --- /dev/null +++ b/src/validations/constraints/unit-tests/fedramp-citations-has-correct-link-FAIL.yaml @@ -0,0 +1,9 @@ +test-case: + name: Negative Test for fedramp-citations-has-correct-link + description: >- + This test case validates the behavior of constraint + fedramp-citations-has-correct-link + content: ../content/ssp-fedramp-citations-has-correct-link-INVALID.xml + expectations: + - constraint-id: fedramp-citations-has-correct-link + result: fail diff --git a/src/validations/constraints/unit-tests/fedramp-citations-has-correct-link-PASS.yaml b/src/validations/constraints/unit-tests/fedramp-citations-has-correct-link-PASS.yaml new file mode 100644 index 000000000..e08d874b2 --- /dev/null +++ b/src/validations/constraints/unit-tests/fedramp-citations-has-correct-link-PASS.yaml @@ -0,0 +1,9 @@ +test-case: + name: Positive Test for fedramp-citations-has-correct-link + description: >- + This test case validates the behavior of constraint + fedramp-citations-has-correct-link + content: ../content/ssp-all-VALID.xml + expectations: + - constraint-id: fedramp-citations-has-correct-link + result: pass diff --git a/src/validations/constraints/unit-tests/has-digital-identity-worksheet-FAIL.yaml b/src/validations/constraints/unit-tests/has-digital-identity-worksheet-FAIL.yaml new file mode 100644 index 000000000..e76eace25 --- /dev/null +++ b/src/validations/constraints/unit-tests/has-digital-identity-worksheet-FAIL.yaml @@ -0,0 +1,9 @@ +test-case: + name: Negative Test for has-digital-identity-worksheet + description: >- + This test case validates the behavior of constraint + has-digital-identity-worksheet + content: ../content/ssp-has-digital-identity-worksheet-INVALID.xml + expectations: + - constraint-id: has-digital-identity-worksheet + result: fail diff --git a/src/validations/constraints/unit-tests/has-digital-identity-worksheet-PASS.yaml b/src/validations/constraints/unit-tests/has-digital-identity-worksheet-PASS.yaml new file mode 100644 index 000000000..374db3879 --- /dev/null +++ b/src/validations/constraints/unit-tests/has-digital-identity-worksheet-PASS.yaml @@ -0,0 +1,9 @@ +test-case: + name: Positive Test for has-digital-identity-worksheet + description: >- + This test case validates the behavior of constraint + has-digital-identity-worksheet + content: ../content/ssp-all-VALID.xml + expectations: + - constraint-id: has-digital-identity-worksheet + result: pass diff --git a/src/validations/constraints/unit-tests/has-e-authentication-workflow-FAIL.yaml b/src/validations/constraints/unit-tests/has-e-authentication-workflow-FAIL.yaml new file mode 100644 index 000000000..5c74be108 --- /dev/null +++ b/src/validations/constraints/unit-tests/has-e-authentication-workflow-FAIL.yaml @@ -0,0 +1,9 @@ +test-case: + name: Negative Test for has-e-authentication-workflow + description: >- + This test case validates the behavior of constraint + has-e-authentication-workflow + content: ../content/ssp-has-e-authentication-workflow-INVALID.xml + expectations: + - constraint-id: has-e-authentication-workflow + result: fail diff --git a/src/validations/constraints/unit-tests/has-e-authentication-workflow-PASS.yaml b/src/validations/constraints/unit-tests/has-e-authentication-workflow-PASS.yaml new file mode 100644 index 000000000..a647599a5 --- /dev/null +++ b/src/validations/constraints/unit-tests/has-e-authentication-workflow-PASS.yaml @@ -0,0 +1,9 @@ +test-case: + name: Positive Test for has-e-authentication-workflow + description: >- + This test case validates the behavior of constraint + has-e-authentication-workflow + content: ../content/ssp-all-VALID.xml + expectations: + - constraint-id: has-e-authentication-workflow + result: pass diff --git a/src/validations/constraints/unit-tests/has-fedramp-citations-FAIL.yaml b/src/validations/constraints/unit-tests/has-fedramp-citations-FAIL.yaml new file mode 100644 index 000000000..f37ea97ec --- /dev/null +++ b/src/validations/constraints/unit-tests/has-fedramp-citations-FAIL.yaml @@ -0,0 +1,7 @@ +test-case: + name: Negative Test for has-fedramp-citations + description: This test case validates the behavior of constraint has-fedramp-citations + content: ../content/ssp-has-fedramp-citations-INVALID.xml + expectations: + - constraint-id: has-fedramp-citations + result: fail diff --git a/src/validations/constraints/unit-tests/has-fedramp-citations-PASS.yaml b/src/validations/constraints/unit-tests/has-fedramp-citations-PASS.yaml new file mode 100644 index 000000000..068fef386 --- /dev/null +++ b/src/validations/constraints/unit-tests/has-fedramp-citations-PASS.yaml @@ -0,0 +1,7 @@ +test-case: + name: Positive Test for has-fedramp-citations + description: This test case validates the behavior of constraint has-fedramp-citations + content: ../content/ssp-all-VALID.xml + expectations: + - constraint-id: has-fedramp-citations + result: pass diff --git a/src/validations/constraints/unit-tests/has-privacy-impact-assessment-FAIL.yaml b/src/validations/constraints/unit-tests/has-privacy-impact-assessment-FAIL.yaml new file mode 100644 index 000000000..5c01a2847 --- /dev/null +++ b/src/validations/constraints/unit-tests/has-privacy-impact-assessment-FAIL.yaml @@ -0,0 +1,9 @@ +test-case: + name: Negative Test for has-privacy-impact-assessment + description: >- + This test case validates the behavior of constraint + has-privacy-impact-assessment + content: ../content/ssp-has-privacy-impact-assessment-INVALID.xml + expectations: + - constraint-id: has-privacy-impact-assessment + result: fail diff --git a/src/validations/constraints/unit-tests/has-privacy-impact-assessment-PASS.yaml b/src/validations/constraints/unit-tests/has-privacy-impact-assessment-PASS.yaml new file mode 100644 index 000000000..64faae07e --- /dev/null +++ b/src/validations/constraints/unit-tests/has-privacy-impact-assessment-PASS.yaml @@ -0,0 +1,9 @@ +test-case: + name: Positive Test for has-privacy-impact-assessment + description: >- + This test case validates the behavior of constraint + has-privacy-impact-assessment + content: ../content/ssp-all-VALID.xml + expectations: + - constraint-id: has-privacy-impact-assessment + result: pass