Export engagement data as OSCAL Assessment Plan files to share testing plans with auditors or import into external systems.
Antes de Iniciar
- Authorization package in Assess step or later
- At least one engagement exists in the package
Role required: sn_grc_cam.manager, sn_grc_cam.admin, or sn_grc_cam.isso
Por Que e Quando Desempenhar Esta Tarefa
Exporting an OSCAL Assessment Plan from CAM generates a zip file containing all necessary OSCAL model files. The export includes the Assessment Plan file for each engagement plus supporting files (Catalog, Profile, SSP). You can
use exported files to share testing plans with external auditors or import into other OSCAL-compliant systems.
The export process generates files asynchronously. After generation completes, download buttons appear on the package form.
Procedimento
-
Navigate to and then select the lists icon.
-
From the Authorization packages in the RMF list, select an authorization package record in Assess step or later.
-
On the Controls tab, select Generate OSCAL from the form actions.
-
From the drop-down menu, select Generate OSCAL AP.
The system starts generating OSCAL files asynchronously. This process takes a few minutes depending on package complexity.
-
Refresh the package form or wait for the generation to complete.
The system creates attachments on the package record after files are generated. The Download OSCAL AP button appears when the process is complete.
-
Select Download OSCAL AP.
A zip file downloads containing all generated OSCAL files: Catalog, Profile, SSP, and one AP file per engagement in the package.
The downloaded zip file contains OSCAL-compliant JSON files. You can validate these
files using the OSCAL CLI validator and import them into other systems or share them with external auditors for assessment planning.