OSCAL source · IAS
{
"artifactId": "IAS",
"iso": [
"A.5.9",
"A.5.12",
"A.5.15"
],
"catalog": [
{
"iso": "A.5.9",
"oscalId": "iso27001-a.5.9",
"title": "Inventory of information and other associated assets",
"className": "iso27001-annex-a",
"group": "Organizational controls (Annex A.5)"
},
{
"iso": "A.5.12",
"oscalId": "iso27001-a.5.12",
"title": "Classification of information",
"className": "iso27001-annex-a",
"group": "Organizational controls (Annex A.5)"
},
{
"iso": "A.5.15",
"oscalId": "iso27001-a.5.15",
"title": "Access control",
"className": "iso27001-annex-a",
"group": "Organizational controls (Annex A.5)"
}
],
"profileAlters": [
{
"control-id": "iso27001-a.5.9",
"adds": [
{
"props": [
{
"name": "applicability",
"value": "applicable"
},
{
"name": "applicability-justification",
"value": "Required because in-scope assets support customer, HR, code, identity and evidence processes."
},
{
"name": "implementation-status",
"value": "Implemented"
}
]
}
]
},
{
"control-id": "iso27001-a.5.12",
"adds": [
{
"props": [
{
"name": "applicability",
"value": "applicable"
},
{
"name": "applicability-justification",
"value": "Required for handling and protection decisions."
},
{
"name": "implementation-status",
"value": "Implemented"
}
]
}
]
},
{
"control-id": "iso27001-a.5.15",
"adds": [
{
"props": [
{
"name": "applicability",
"value": "applicable"
},
{
"name": "applicability-justification",
"value": "Required to protect production, identity, HR and evidence systems."
},
{
"name": "implementation-status",
"value": "Implemented"
}
]
}
]
}
],
"components": [],
"sspImplementedRequirements": []
}
Close
