Skip to content

Commit 14b8a3c

Browse files
author
Guy
committed
Init commit
0 parents  commit 14b8a3c

7 files changed

Lines changed: 37998 additions & 0 deletions

‎extracted_classified_information_overlay.json‎

Lines changed: 847 additions & 0 deletions
Large diffs are not rendered by default.

‎extracted_cnssi_1253_overlay.json‎

Lines changed: 902 additions & 0 deletions
Large diffs are not rendered by default.

‎extracted_fedramp_plus_overlay.json‎

Lines changed: 137 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,137 @@
1+
{
2+
"AC-7": {
3+
"parameter_values": "For privileged users, DOD required an account lock after three unsuccessful attempts for Impact Levels 2/4/5 and after five unsuccessful attempts for accounts using a SIPR token. All levels must be configured to require an administrator unlock the account. For nonprivileged users, if rate limiting, DOD will allow 10 attempts with the account automatically unlocked after 30 minutes. If rate limiting is not used, normal DSPAV will be required.",
4+
"impact_levels": ["IL4", "IL5", "IL6"],
5+
"page": 110
6+
},
7+
"AU-5(1)": {
8+
"parameter_values": "CSP/CSO may use FedRAMP value.",
9+
"impact_levels": ["IL4", "IL5", "IL6"],
10+
"page": 110
11+
},
12+
"CM-7(5)": {
13+
"parameter_values": "DSPAV must be used.",
14+
"impact_levels": ["IL4", "IL5", "IL6"],
15+
"page": 110
16+
},
17+
"IA-5(1)": {
18+
"parameter_values": "DSPAV must be used.",
19+
"impact_levels": ["IL4", "IL5", "IL6"],
20+
"page": 110
21+
},
22+
"PE-15": {
23+
"parameter_values": "DSPAV must be used.",
24+
"impact_levels": ["IL4", "IL5", "IL6"],
25+
"page": 110
26+
},
27+
"PS-3(4)": {
28+
"parameter_values": "All information systems. Users: U.S. citizens, U.S. nationals, or U.S. persons, foreign personnel as allowed by current DOD polices with AO approval. Administrators: U.S. citizens, U.S. nationals, or U.S. persons. Refer to Section 5.5.2, CSP Personnel Requirements, for more information.",
29+
"impact_levels": ["IL4", "IL5", "IL6"],
30+
"page": 110
31+
},
32+
"MA-5(2)": {
33+
"parameter_values": "",
34+
"impact_levels": ["IL6"],
35+
"page": 111
36+
},
37+
"MA-5(3)": {
38+
"parameter_values": "",
39+
"impact_levels": ["IL6"],
40+
"page": 111
41+
},
42+
"MA-5(4)": {
43+
"parameter_values": "",
44+
"impact_levels": ["IL6"],
45+
"page": 111
46+
},
47+
"MA-5(5)": {
48+
"parameter_values": "",
49+
"impact_levels": ["IL4", "IL5", "IL6"],
50+
"page": 111
51+
},
52+
"MA-6": {
53+
"parameter_values": "CSP/CSO may use FedRAMP value.",
54+
"impact_levels": ["IL4", "IL5", "IL6"],
55+
"page": 111
56+
},
57+
"PS-4": {
58+
"parameter_values": "CSP/CSO may use FedRAMP value.",
59+
"impact_levels": ["IL4", "IL5", "IL6"],
60+
"page": 111
61+
},
62+
"SA-4(5)": {
63+
"parameter_values": "DSPAV must be used.",
64+
"impact_levels": ["IL4", "IL5", "IL6"],
65+
"page": 111
66+
},
67+
"SA-9(1)": {
68+
"parameter_values": "DSPAV must be used.",
69+
"impact_levels": ["IL4", "IL5", "IL6"],
70+
"page": 111
71+
},
72+
"SA-9(3)": {
73+
"parameter_values": "DSPAV must be used.",
74+
"impact_levels": ["IL4", "IL5", "IL6"],
75+
"page": 111
76+
},
77+
"SA-9(5)": {
78+
"parameter_values": "SA-9 (5)-1 [information processing, information or data, AND system services]. SA-9 (5)-2 [U.S./U.S. Territories or geographic locations where there is U.S. jurisdiction]. SA-9 (5)-3 [all data, systems, or services].",
79+
"impact_levels": ["IL4", "IL5", "IL6"],
80+
"page": 111
81+
},
82+
"SA-9(6)": {
83+
"parameter_values": "",
84+
"impact_levels": ["IL4", "IL5", "IL6"],
85+
"page": 111
86+
},
87+
"SA-9(7)": {
88+
"parameter_values": "",
89+
"impact_levels": ["IL4", "IL5", "IL6"],
90+
"page": 111
91+
},
92+
"SA-9(8)": {
93+
"parameter_values": "",
94+
"impact_levels": ["IL4", "IL5", "IL6"],
95+
"page": 111
96+
},
97+
"SC-12(6)": {
98+
"parameter_values": "",
99+
"impact_levels": ["IL4", "IL5", "IL6"],
100+
"page": 111
101+
},
102+
"SC-17": {
103+
"parameter_values": "DODI 8520.02, Public Key Infrastructure (PKI) and Public Key Enabling (PKE).",
104+
"impact_levels": ["IL4", "IL5", "IL6"],
105+
"page": 111
106+
},
107+
"SC-18": {
108+
"parameter_values": "",
109+
"impact_levels": ["IL4", "IL5", "IL6"],
110+
"page": 111
111+
},
112+
"SC-18(2)": {
113+
"parameter_values": "DSPAV must be used.",
114+
"impact_levels": ["IL4", "IL5", "IL6"],
115+
"page": 111
116+
},
117+
"SC-18(3)": {
118+
"parameter_values": "Supplemental guidance: For the protection of the infrastructure supporting a CSO, CSPs are required to apply this control to their organizational IT systems and the infrastructure supporting their CSO(s). For the protection of Mission Owners, their end users, and networks, CSP CSOs must not support the downloading of mobile code, which is deemed unacceptable to DOD. Refer to Section 5.11, Mobile Code, for more information.",
119+
"impact_levels": ["IL5", "IL6"],
120+
"page": 111
121+
},
122+
"SC-18(4)": {
123+
"parameter_values": "Software applications such as but not limited to email, scriptable document/file editing applications that support documents with embedded code (e.g., Microsoft Office applications/documents), etc. Prompting the user for permission.",
124+
"impact_levels": ["IL5", "IL6"],
125+
"page": 111
126+
},
127+
"SC-24": {
128+
"parameter_values": "DSPAV must be used.",
129+
"impact_levels": ["IL4", "IL5", "IL6"],
130+
"page": 111
131+
},
132+
"SC-46": {
133+
"parameter_values": "DSPAV must be used. If CDS is used",
134+
"impact_levels": ["IL4", "IL5", "IL6"],
135+
"page": 111
136+
}
137+
}

0 commit comments

Comments
 (0)