Skip to content

Commit

Permalink
Restructuring for new initiative
Browse files Browse the repository at this point in the history
Moved everything into 'old' and added a new subdirectory for new
experiments.

More early iteration over names

More adjustments in names mostly

HTML page for Word import testing

Just touchups this time

Updates and misc improvements

Changed document element to 'catalog'

Improved and renamed mapping transformation

Adjustments to models, schema, Schematron

Managing gitignore

Same

Minor adjustments

First cut at 27K mapping into OSCAL

Renamed directories for consistency

Cleanup

Bit more cleanup

Adjustments to mapping

Same

Numerous enhancements, some reorg

Planning notes

Added starter FO XSLT

First cut at FO XSL

Minor improvements

Small adjustments

Many/much schema enhancements; proto XSD version

First cut at inline declarations with live validation

Implementing declarations; styling

Refinements and extensions; new assign, select, withdrawn elements

More support for parameters etc.

Now implementing parameters etc.

More touches

Misc improvements

Sundry adjustments

Many more small improvements

Much documentation

More touchups

Updates

Misc adjustments and notes

Significant rework following design session esp declarations

More improvements incl extending declarations to groups

More adjustments; now mapping SP800-53A also.

More polishing and maintenance

Much more including hierarchical number checking

Adjustments, extensions, corrections

Name changes in the model

More adjustments

Cleanup of obsolete artifacts

Minor alignment

Mostly CSS, also Schematron improvements

ISO27002 mapping document

Many enhancements; new COBIT 5 mappings

More on COBIT

Improvements to mapping docs

Adjustments to mappings incl HTML versions

Moved screenshot for documentation

More adjustments and docs

Mostly improvements to documentation

Refreshed 800-53 data with adjustments

More general improvements to models and mappings

Continuing refinements to validations in samples

Update README.md

Update README.md

Update README.md

Update README.md

Minor tweaks

Including initial cut at profiling (1st, rule-based control extraction) among other refinements and improvements

No longer extant

Added new control to COBIT5 example

Misc improvements including more COBIT5 support

File rename and further adjustments

Misc adjustment; SaxonJS demo files

Misc adjustments

Updated readme contents to reflect merge.

Fixed links.

Changed text to better reflect current state and to add more links.

Rearrangement and cleanup

Schematron and schema adjustment and refactoring

SP800-53 extraction improvement, enhancement, cleanup

Improvements and enhancements to ISO27002 extraction

OSCAL Documentation

COBIT5 example tweakage

Organizational notes

Adjustments

Removed old files directory.
Moved files from draft to root.

Updated README.md to reflect new pathing.

Updated readme to contain more documentation of the OSCAL layers.

Added documentation for the working directory.

Update README.md

Edited the text.

Update README.md

Edited the text.

Added Aug 10 tiger team slides with notes

Create a prose overview of OSCAL

Update OSCAL Overview.md

Update OSCAL Overview.md

Profile and catalog mapping: a trivial example

Replacing graphic with rescaled version

Update OSCAL Overview.md

Rescaled image

Update OSCAL Overview.md

Mods to oXygen project file

Removing 'demo' (till later)

Moved proprietary file

Refinements to ISO27002 mappings (new model)

Refining SP800-53 conversion/mappings

Updating lib support for new model

Top-level org

Draft readme docs

Further adjustment to directory readme.md

More adjustments to ISO 27002 and SP800-53 (new model etc.)

More cleanup to main sample subdirectories + readme tweakage

Mostly restructuring

More adjustments to extraction, parameter support

Includes more model refinements; draft implementation of parameter resolution

Adjustments for revised models

Adjustments to demos and conversion pipelines

Experimenting with profiles

Infrastructure adjustments

Schema modifications

Minor correction to schema docs merge

Updating XSD w/ docs

More element renaming/adjustment

Now a stable schema again? With SP800-53 extraction adjustments

Profile-related mods

Org stuff

Moved mappind docs; added readme

schema documentation

Schema production and documentation pipeline

More reorg; tweaked schema; more docs

Improvements to tag library

Another attempt at internal links in md

trying again

Gonna get this eventually

More updates and tuneups

More updates to schema and docs

Lighter adjustments

Similarly subtle adjustments

Adjustments supporting parameter assignments

More docs

Enhancements to demo

Moving distractions out of the way

Slight readme tweakage

Tag library tweaks

More tag library adjustments

New readme for Schematrons

Adjustments to readme

Adjustments to mapping documents

Adjustments to readme

More adjustments to mapping documents

Updated punchlist

Updates to mapping docs

CSS for local editing of OSCAL OSCAL

Slight adjustments

Light editing

Light editing

Light edits

Light edits

Light edits

Light edits

More work on profiles

Revised directory descriptions

Added an explanation of the demo directories

More on profiling

Editorial tweaks to oscal-oscal.xml

Editorial tweaks to oscal-oscal.xml

Edits to schema documentation

More enhancements to tag library and its presentation

Internal links?

Slight adjustments

Further touchups to schema docs and their HTML rendering

Support for 'pre'

Rearranged and touched up profile experiments

More touchups to tag library (linking)

More adjustments to copy

More adjustments

Correcting display bug failing to render chars in CSS

Added a PDF with the notes.

Restoring declarations logic; updating all declarations to new model; schema adjustments

Decided to risk it

One more readme

Added timestamping to extractors

Light edits to oscal-oscal.xml

More edits to oscal-oscal.xml with regenerated materials

Refining markdown export

More edits to docs and rendering

This time smaller adjustments

More improvements to docs and rendering

Slight enhancement to schema mitigating whitespace issue in validation

Revert "Working"
  • Loading branch information
david-waltermire committed Apr 5, 2018
1 parent a47f7c3 commit 7740caf
Show file tree
Hide file tree
Showing 627 changed files with 247,668 additions and 274,316 deletions.
906 changes: 121 additions & 785 deletions OSCAL-dev.xpr → draft/OSCAL-dev.xpr

Large diffs are not rendered by default.

File renamed without changes.
File renamed without changes.
File renamed without changes.
105 changes: 105 additions & 0 deletions draft/punchlist.txt
Original file line number Diff line number Diff line change
@@ -0,0 +1,105 @@

RANDOM CHUNKS OF PROSE

Write a simple narrative describing use of OSCAL

OSCAL is a world of controls, which cluster together in groups and within other ('higher level') controls. Controls come in different types but they all have the same basic form. They probably have titles and almost certainly have some normative language, called the "description" of the control (or sometimes just the "control"). Additionally they have one or more *properties* and *statements*, which provide structured information associated with the control. Exactly which properties and statements are present or available for a control, will depend on the particular control and the control type.

Properties are best thought of as name-value pairs. assigned to a control. So for example a control may have a property 'RATING' (or 'rating') that assigns a nominal rating to a control, permitting controls in a set to be sorted and filtered by rating. The "rating" of any control will be a single value (as this is a property), a string albeit sometimes embellished a little (parameters are described below).

Statements, in contrast, are best thought of as chunks or globs or hunks of prose, of arbitrary length. (Special-purpose statements may be short but some controls use statements to help keep the description short, i.e. for 'spillover'.) They may have internal structure, or they may be simply soup or piles of paragraphs and lists. (OSCAL borrows from HTML to keep the markup inside statements familiar.) Like properties, they might be enhanced (parameters again) in certain ways, but they will generally be fairly free form.

The 'description' of a control might indeed be considered a special or privileged kind of statement, even as its title is a kind of property. For the most part, however, OSCAL permits catalogs and profiles to define their own properties, property values, and statements, for whatever purposes they might need.


Parameters

Escape hatch: 'wait list' statements (i.e. no assigned role)

Control enhancements (subcontrols)

Declarations

Adaptability

The rules that define control types can be changed, and new control types can be introduced. Organizations can share control types and share information defined and described using them - that is, as "controls".

(It should be noted in passing that these are digital data objects or data instances, not actual "controls" in the world -- something ineffable, which the documentation of a control can only represent. But metaphysics and epistemology are not in scope here.)

Interchangeability

OSCAL is an entirely independent semantic 'stack' intended to promote interchange of a particular kind (or pattern) of information, a "control set". As such it can be mapped cleanly to NISO JATS, NLM BITS, NISO STS, DITA, or any other format.



EXTRAS
o write XSLT to produce RACI chart for (all of) COBIT 5?

NOT EXTRAS

o Regression testing (for schema, XSLT etc.)
Requiring authoritative sample docs
Go / no-go
Schematron XSpec

in SaxonJS demo:
look for ixsl:onchange mode (dynamic rendering)

x XSD pathway
x RNC -> XSD frame via Trang
x XSD frame + OSCAL.oscal -> XSD (w/ warnings re disparities) cf xsd-merge-docs.xsl
o XProc for Trang?

Monday Aug 14
Adjusted schema and Schematron
changed xref to a (inline links)
pulled link validation into a separate Schematron
Updated ISO27002 extraction
Implemented ISO27002 enhancement (adding internal links)
Improved SP800-53 enhancement (picking up "withdrawn")
Tightened and tested schema, Schematrons
Much documentation

to do:

XSLT to add/normalized assign/@id
Adjust assign model:

Repair "Assignment" Schematron to new model

links -
x validate internal cross-references - href[starts-with(.,'#)]
x change xref to a
o VALIDATE link in declarations - validate required and singleton by @rel (relationship) not @class


o add xsd-type for declaration i.e. <xsd-type>decimal</xsd:type> validates $x castable as xs:decimal? (use eval)
o prop, param

o Rough out profile functionality
select controls by ID
(then deselect controls by arbitrary criteria?)
implement parameters and assignments (crude is okay)
pass 1: expand profile to contain params for all //assign
pass 2: produce collection with params in place
(and other mods e.g. overwrites, additions)

o validate collection (selected controls) against source catalog?
to verify (existence/coverage) of control

OSCAL framework in oXygen?
oXygen macros, boilerplate and auto-insert
e.g. parameter names by reference to declarations

o relax declarations: not declaring something is not an error
o collapse features and statements:
o permit prose in features
o eliminate statements and rename stmts as features

o experiment (again) w/ semantic aliases for feat[@class='objectives'] etc
o add declarations for paragraph[@class]
o contemplate recursion




File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
Loading

0 comments on commit 7740caf

Please sign in to comment.