OSCAL namespace
To include CAM-specific information, custom properties with a unique namespace are used to add impact and tailor the content as needed.
| Property | Description |
|---|---|
| impact | Captures control objective impact. |
| justification | Justification for making baseline control not applicable. Present only when a baseline control is made not applicable. |
| source | Source of baseline control objective. |
| impact-change-justification | If recommended impact is changed. This property will contain the justification for change. |
| category | Category of the information type. |
| sub_category | Subcategory of the information type. |
| pii-in-identifiable-form | Personally Identifiable Information (PII) information. |
| pii-information-about-public | PII information. |
| privacy-impact-assessment | PII information. |
| system-of-records-notice | PII information system-of-records-notice. |
| privacy-sensitive-system | PII information privacy-sensitive-system. |