OSCAL source · MDR
{
"artifactId": "MDR",
"iso": [
"8.1",
"7.5"
],
"catalog": [
{
"iso": "8.1",
"oscalId": "iso27001-8.1",
"title": "Operational planning and control",
"className": "iso27001-clause",
"group": "Operation"
},
{
"iso": "7.5",
"oscalId": "iso27001-7.5",
"title": "Documented information",
"className": "iso27001-clause",
"group": "Support"
}
],
"profileAlters": [
{
"control-id": "iso27001-7.5",
"adds": [
{
"props": [
{
"name": "applicability",
"value": "applicable"
},
{
"name": "applicability-justification",
"value": "ISO/IEC 27001:2022 management-system clause. Always in the certification scope; not subject to Annex A SoA exclusion."
},
{
"name": "implementation-status",
"value": "always-in-scope"
}
]
}
]
},
{
"control-id": "iso27001-8.1",
"adds": [
{
"props": [
{
"name": "applicability",
"value": "applicable"
},
{
"name": "applicability-justification",
"value": "ISO/IEC 27001:2022 management-system clause. Always in the certification scope; not subject to Annex A SoA exclusion."
},
{
"name": "implementation-status",
"value": "always-in-scope"
}
]
}
]
}
],
"components": [],
"sspImplementedRequirements": [
{
"control-id": "iso27001-6.1.1",
"props": [
{
"name": "iso-id",
"value": "6.1.1"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "always-in-scope"
},
{
"name": "control-owner",
"value": "Risk Manager"
},
{
"name": "evidence-status",
"value": "documented"
}
],
"links": [
{
"rel": "cites",
"text": "RR"
},
{
"rel": "cites",
"text": "RTP"
},
{
"rel": "cites",
"text": "CIL"
},
{
"rel": "cites",
"text": "ISOCL"
},
{
"rel": "cites",
"text": "RASM"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-6.1.2",
"props": [
{
"name": "iso-id",
"value": "6.1.2"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "always-in-scope"
},
{
"name": "control-owner",
"value": "Risk Manager"
},
{
"name": "evidence-status",
"value": "documented"
},
{
"name": "unresolved-evidence",
"value": "RAM; RAMT"
}
],
"links": [
{
"rel": "cites",
"text": "RASM"
},
{
"rel": "cites",
"text": "RR"
},
{
"rel": "cites",
"text": "ISOCL"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-6.1.3",
"props": [
{
"name": "iso-id",
"value": "6.1.3"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "always-in-scope"
},
{
"name": "control-owner",
"value": "Risk Manager"
},
{
"name": "evidence-status",
"value": "documented"
}
],
"links": [
{
"rel": "cites",
"text": "RTP"
},
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "ISOCL"
},
{
"rel": "cites",
"text": "RASM"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-7.2",
"props": [
{
"name": "iso-id",
"value": "7.2"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "always-in-scope"
},
{
"name": "control-owner",
"value": "HR Manager"
},
{
"name": "evidence-status",
"value": "documented"
},
{
"name": "unresolved-evidence",
"value": "TR; TRC; HRP"
}
],
"links": [
{
"rel": "cites",
"text": "CMTP"
},
{
"rel": "cites",
"text": "ISOCL"
},
{
"rel": "cites",
"text": "HRSP"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-a.5.19",
"props": [
{
"name": "iso-id",
"value": "A.5.19"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "In progress"
},
{
"name": "control-owner",
"value": "Supplier Manager"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "SINV"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "CSS"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-a.5.22",
"props": [
{
"name": "iso-id",
"value": "A.5.22"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "In progress"
},
{
"name": "control-owner",
"value": "Supplier Manager"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "SINV"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "CSS"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-a.5.23",
"props": [
{
"name": "iso-id",
"value": "A.5.23"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "In progress"
},
{
"name": "control-owner",
"value": "Cloud Service Owner"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "CLOUD-CTRL-2026-Q3"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "CSS"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-a.5.24",
"props": [
{
"name": "iso-id",
"value": "A.5.24"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "Incident Manager"
},
{
"name": "evidence-status",
"value": "Complete"
},
{
"name": "unresolved-evidence",
"value": "IRP"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "IMP"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-a.5.25",
"props": [
{
"name": "iso-id",
"value": "A.5.25"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "Incident Manager"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "SIR"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "IMP"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-a.5.26",
"props": [
{
"name": "iso-id",
"value": "A.5.26"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "Incident Manager"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "IR-RB"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "IMP"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-a.5.27",
"props": [
{
"name": "iso-id",
"value": "A.5.27"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Planned"
},
{
"name": "control-owner",
"value": "Incident Manager"
},
{
"name": "evidence-status",
"value": "Partial"
}
],
"links": [
{
"rel": "field-ref",
"text": "CIL"
},
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "IMP"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-a.5.28",
"props": [
{
"name": "iso-id",
"value": "A.5.28"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "ISMS Manager"
},
{
"name": "evidence-status",
"value": "Complete"
}
],
"links": [
{
"rel": "field-ref",
"text": "ELAI"
},
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "IMP"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-a.6.1",
"props": [
{
"name": "iso-id",
"value": "A.6.1"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "HR Manager"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "HR-ONB-2026-023"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "HRSP"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-a.6.2",
"props": [
{
"name": "iso-id",
"value": "A.6.2"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "HR Manager"
},
{
"name": "evidence-status",
"value": "Complete"
},
{
"name": "unresolved-evidence",
"value": "HR-ONB-2026-023"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "HRSP"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-a.6.3",
"props": [
{
"name": "iso-id",
"value": "A.6.3"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "HR Manager"
},
{
"name": "evidence-status",
"value": "Complete"
},
{
"name": "unresolved-evidence",
"value": "TRAIN-REC-2026-188"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "HRSP"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-a.6.5",
"props": [
{
"name": "iso-id",
"value": "A.6.5"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "HR Manager"
},
{
"name": "evidence-status",
"value": "Complete"
},
{
"name": "unresolved-evidence",
"value": "OFC"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "HRSP"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-a.8.9",
"props": [
{
"name": "iso-id",
"value": "A.8.9"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "In progress"
},
{
"name": "control-owner",
"value": "IT Operations"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "CFG-BASE-2026"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "CSS"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-a.8.15",
"props": [
{
"name": "iso-id",
"value": "A.8.15"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "Security Lead"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "LOG-2026-Q3"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "CSS"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-a.8.16",
"props": [
{
"name": "iso-id",
"value": "A.8.16"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "In progress"
},
{
"name": "control-owner",
"value": "Security Lead"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "MON-2026-Q3"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "CSS"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
}
]
}
Close
