Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Document ports, protocols, services for UDS Core #754

Open
mjnagel opened this issue Sep 11, 2024 · 3 comments
Open

Document ports, protocols, services for UDS Core #754

mjnagel opened this issue Sep 11, 2024 · 3 comments
Assignees
Labels
enhancement New feature or request security
Milestone

Comments

@mjnagel
Copy link
Contributor

mjnagel commented Sep 11, 2024

Is your feature request related to a problem? Please describe.

When deploying to a secure environment I am required to answer NIST controls, including SA-4(9). This requires documentation of ports, protocols, and services in use in my applications - to include UDS Core.

Describe the solution you'd like

To provide an easier deployment experience and inheritance of controls, we should provide a document with PPS for end users.

Additional context

See these resources:

It would also be ideal if this could be automated, to reduce maintenance needs when applications update/change. I am unsure if there are existing tools that would do this.

@mjnagel mjnagel added enhancement New feature or request security labels Sep 11, 2024
@mjnagel mjnagel added this to the 0.28.0 milestone Sep 17, 2024
@CloudBeard CloudBeard self-assigned this Sep 25, 2024
@CloudBeard
Copy link
Contributor

CloudBeard commented Sep 25, 2024

@rjferguson21 hooked me up with the ports/protocols.

I will need to add this to the OSCAL Component-Definitions per service (lets the data roll up into other OSCAL models) and update the issue in UniRAMP with any additional documentation/Diagram.

  • PPS added to OSCAL
  • UniRAMP Issue Updated
  • Additional Doc/Diagram created

@CloudBeard
Copy link
Contributor

OSCAL update to include PPS is partially blocked until this issue is completed. #797

The OSCAL can be updated upstream in Compliance-Artifacts and moved over with the decompose work.

@mjnagel mjnagel modified the milestones: 0.28.0, 0.30.0 Sep 27, 2024
@CloudBeard
Copy link
Contributor

Updated the UniRAMP repo's issue with the data.

Leaving issue open to track it being added to the OSCAL too and brought over.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request security
Projects
Status: 🏗 In Progress
Development

No branches or pull requests

3 participants