ExportableProof — Routines today. Proof tomorrow.

Policy

Risk Analysis Statement according to Magerit and ISO 27005

Document the analytical basis for information security risk analysis.

Back to demo

OSCAL source · RASM

{
  "artifactId": "RASM",
  "iso": [
    "6.1"
  ],
  "catalog": [],
  "profileAlters": [],
  "components": [
    {
      "uuid": "0118a201-7b5c-55b6-8127-cc53b5915775",
      "type": "policy",
      "title": "Arcfield Risk Analysis Statement according to Magerit and ISO 27005 (SIMULATION)",
      "purpose": "Document the analytical basis for information security risk analysis.",
      "props": [
        {
          "name": "simulation",
          "value": "true"
        },
        {
          "name": "artifact-id",
          "value": "RASM"
        },
        {
          "name": "object-type",
          "value": "policy"
        },
        {
          "name": "comparison",
          "value": "a"
        },
        {
          "name": "pack-role",
          "value": "in-pack"
        },
        {
          "name": "implemented-requirement-count",
          "value": "3"
        },
        {
          "name": "volumes",
          "value": "1,2"
        },
        {
          "name": "unresolved-cites",
          "value": "SINV"
        }
      ]
    }
  ],
  "sspImplementedRequirements": [
    {
      "control-id": "iso27001-6.1.1",
      "props": [
        {
          "name": "iso-id",
          "value": "6.1.1"
        },
        {
          "name": "applicability",
          "value": "applicable"
        },
        {
          "name": "evidence-layer",
          "value": "linked"
        },
        {
          "name": "implementation-status-raw",
          "value": "always-in-scope"
        },
        {
          "name": "control-owner",
          "value": "Risk Manager"
        },
        {
          "name": "evidence-status",
          "value": "documented"
        }
      ],
      "links": [
        {
          "rel": "cites",
          "text": "RR"
        },
        {
          "rel": "cites",
          "text": "RTP"
        },
        {
          "rel": "cites",
          "text": "CIL"
        },
        {
          "rel": "cites",
          "text": "ISOCL"
        },
        {
          "rel": "cites",
          "text": "RASM"
        },
        {
          "rel": "cites",
          "text": "MDR"
        },
        {
          "rel": "cites",
          "text": "DR"
        },
        {
          "rel": "cites",
          "text": "RRS"
        },
        {
          "rel": "cites",
          "text": "AI"
        },
        {
          "rel": "cites",
          "text": "UAI"
        }
      ]
    },
    {
      "control-id": "iso27001-6.1.2",
      "props": [
        {
          "name": "iso-id",
          "value": "6.1.2"
        },
        {
          "name": "applicability",
          "value": "applicable"
        },
        {
          "name": "evidence-layer",
          "value": "linked"
        },
        {
          "name": "implementation-status-raw",
          "value": "always-in-scope"
        },
        {
          "name": "control-owner",
          "value": "Risk Manager"
        },
        {
          "name": "evidence-status",
          "value": "documented"
        },
        {
          "name": "unresolved-evidence",
          "value": "RAM; RAMT"
        }
      ],
      "links": [
        {
          "rel": "cites",
          "text": "RASM"
        },
        {
          "rel": "cites",
          "text": "RR"
        },
        {
          "rel": "cites",
          "text": "ISOCL"
        },
        {
          "rel": "cites",
          "text": "MDR"
        },
        {
          "rel": "cites",
          "text": "DR"
        },
        {
          "rel": "cites",
          "text": "RRS"
        },
        {
          "rel": "cites",
          "text": "AI"
        },
        {
          "rel": "cites",
          "text": "UAI"
        }
      ]
    },
    {
      "control-id": "iso27001-6.1.3",
      "props": [
        {
          "name": "iso-id",
          "value": "6.1.3"
        },
        {
          "name": "applicability",
          "value": "applicable"
        },
        {
          "name": "evidence-layer",
          "value": "linked"
        },
        {
          "name": "implementation-status-raw",
          "value": "always-in-scope"
        },
        {
          "name": "control-owner",
          "value": "Risk Manager"
        },
        {
          "name": "evidence-status",
          "value": "documented"
        }
      ],
      "links": [
        {
          "rel": "cites",
          "text": "RTP"
        },
        {
          "rel": "cites",
          "text": "SOA"
        },
        {
          "rel": "cites",
          "text": "ISOCTRL"
        },
        {
          "rel": "cites",
          "text": "ISOCL"
        },
        {
          "rel": "cites",
          "text": "RASM"
        },
        {
          "rel": "cites",
          "text": "MDR"
        },
        {
          "rel": "cites",
          "text": "DR"
        },
        {
          "rel": "cites",
          "text": "RRS"
        },
        {
          "rel": "cites",
          "text": "AI"
        },
        {
          "rel": "cites",
          "text": "UAI"
        }
      ]
    }
  ]
}

Check installation

What is installed here. Extra volumes are optional and do not change Ready. Update re-runs the check.

CheckResult
Webserver…
Python…
Volumes…
Scripts…
Ready…
Working directory…
Last update…