OSCAL source · MRART
{
"artifactId": "MRART",
"iso": [
"9.3"
],
"catalog": [
{
"iso": "9.3",
"oscalId": "iso27001-9.3",
"title": "Management review",
"className": "iso27001-clause",
"group": "Performance evaluation"
}
],
"profileAlters": [
{
"control-id": "iso27001-9.3",
"adds": [
{
"props": [
{
"name": "applicability",
"value": "applicable"
},
{
"name": "applicability-justification",
"value": "ISO/IEC 27001:2022 management-system clause. Always in the certification scope; not subject to Annex A SoA exclusion."
},
{
"name": "implementation-status",
"value": "always-in-scope"
}
]
}
]
}
],
"components": [],
"sspImplementedRequirements": [
{
"control-id": "iso27001-5.1",
"props": [
{
"name": "iso-id",
"value": "5.1"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "always-in-scope"
},
{
"name": "control-owner",
"value": "Top Management"
},
{
"name": "evidence-status",
"value": "documented"
},
{
"name": "unresolved-evidence",
"value": "ISP"
}
],
"links": [
{
"rel": "cites",
"text": "MRART"
},
{
"rel": "cites",
"text": "MRMT"
},
{
"rel": "cites",
"text": "ISOCL"
}
]
},
{
"control-id": "iso27001-7.1",
"props": [
{
"name": "iso-id",
"value": "7.1"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "always-in-scope"
},
{
"name": "control-owner",
"value": "Top Management"
},
{
"name": "evidence-status",
"value": "documented"
},
{
"name": "unresolved-evidence",
"value": "GS"
}
],
"links": [
{
"rel": "cites",
"text": "MRART"
},
{
"rel": "cites",
"text": "MRMT"
},
{
"rel": "cites",
"text": "ISOCL"
}
]
},
{
"control-id": "iso27001-9.1",
"props": [
{
"name": "iso-id",
"value": "9.1"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "always-in-scope"
},
{
"name": "control-owner",
"value": "Security Lead"
},
{
"name": "evidence-status",
"value": "documented"
},
{
"name": "unresolved-evidence",
"value": "MME"
}
],
"links": [
{
"rel": "cites",
"text": "IMPL-WB"
},
{
"rel": "cites",
"text": "MRART"
},
{
"rel": "cites",
"text": "ISOCL"
}
]
},
{
"control-id": "iso27001-9.3",
"props": [
{
"name": "iso-id",
"value": "9.3"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "always-in-scope"
},
{
"name": "control-owner",
"value": "Top Management"
},
{
"name": "evidence-status",
"value": "documented"
}
],
"links": [
{
"rel": "cites",
"text": "MRART"
},
{
"rel": "cites",
"text": "MRMT"
},
{
"rel": "cites",
"text": "ISOCL"
}
]
}
]
}
Close
