The Component Definition model describes the security capabilities and control implementations provided by reusable components. Components can represent software, hardware, services, policies, procedures, or other elements that contribute to the security posture of a system.
This directory contains the OSCAL Component Definition artifacts for the Summit system by Oscalate Systems. These files define the individual components that make up the Summit system and their respective security control implementations.
- OSCAL Component Definition files (JSON, XML, or YAML)
- Vendor-provided component definitions
- Reusable capability descriptions for system components
- Components: Individual elements (software, hardware, services, policies)
- Control Implementations: How a component satisfies specific controls
- Capabilities: Groupings of related control implementations
- Responsibility: Whether control satisfaction is provided, shared, or inherited