OSCAL namespace

  • Release version: Yokohama
  • Updated January 30, 2025
  • 1 minute to read
  • To include CAM-specific information, custom properties with a unique namespace are used to add impact and tailor the content as needed.

    Property Description
    impact Captures control objective impact.
    justification Justification for making baseline control not applicable. Present only when a baseline control is made not applicable.
    source Source of baseline control objective.
    impact-change-justification If recommended impact is changed. This property will contain the justification for change.
    category Category of the information type.
    sub_category Subcategory of the information type.
    pii-in-identifiable-form Personally Identifiable Information (PII) information.
    pii-information-about-public PII information.
    privacy-impact-assessment PII information.
    system-of-records-notice PII information system-of-records-notice.
    privacy-sensitive-system PII information privacy-sensitive-system.