Class Risk.RiskLog.Entry

java.lang.Object
gov.nist.secauto.oscal.lib.model.Risk.RiskLog.Entry
All Implemented Interfaces:
gov.nist.secauto.metaschema.core.model.IBoundObject
Enclosing class:
Risk.RiskLog

@MetaschemaAssembly(formalName="Risk Log Entry", description="Identifies an individual risk response that occurred as part of managing an identified risk.", name="entry", moduleClass=OscalAssessmentCommonModule.class, valueConstraints=@AllowedValues(level=ERROR,target="prop[has-oscal-namespace(\'http://csrc.nist.gov/ns/oscal\')]/@name",values=@AllowedValue(value="type",description="The type of remediation tracking entry. Can be multi-valued.")) @AllowedValues(level=ERROR,target="prop[has-oscal-namespace(\'http://csrc.nist.gov/ns/oscal\') and @name=\'type\']/@value",allowOthers=true,values={@AllowedValue(value="vendor-check-in",description="Contacted vendor to determine the status of a pending fix to a known vulnerability."),@AllowedValue(value="status-update",description="Information related to the current state of response to this risk."),@AllowedValue(value="milestone-complete",description="A significant step in the response plan has been achieved."),@AllowedValue(value="mitigation",description="An activity was completed that reduces the likelihood or impact of this risk."),@AllowedValue(value="remediated",description="An activity was completed that eliminates the likelihood or impact of this risk."),@AllowedValue(value="closed",description="The risk is no longer applicable to the system."),@AllowedValue(value="dr-submission",description="A deviation request was made to the authorizing official."),@AllowedValue(value="dr-updated",description="A previously submitted deviation request has been modified."),@AllowedValue(value="dr-approved",description="The authorizing official approved the deviation."),@AllowedValue(value="dr-rejected",description="The authorizing official rejected the deviation.")})) public static class Risk.RiskLog.Entry extends Object implements gov.nist.secauto.metaschema.core.model.IBoundObject
Identifies an individual risk response that occurred as part of managing an identified risk.