Assessment Results (SAR)
OSCAL Model: Security Assessment Results
The Security Assessment Results (SAR) model captures the findings from a security assessment. It documents the observations, risks, and determinations made during the assessment of an information system’s security controls.
Summit Context
This directory contains the OSCAL Assessment Results artifacts for the Summit system by Oscalate Systems. These files capture the outcomes of security assessments conducted against the Summit system.
What Belongs Here
- OSCAL Assessment Results files (JSON, XML, or YAML)
- Assessment findings and observations
- Risk determinations and evidence references
Key Concepts
- Import AP: Reference to the Assessment Plan that guided the assessment
- Results: Container for assessment findings from a specific assessment run
- Findings: Individual control assessment outcomes
- Observations: Evidence and observations supporting findings
- Risks: Identified risks resulting from assessment findings
- Attestations: Assessor statements about the assessment
OSCAL Reference