Required Metadata

All OSCAL artifacts must have the following content in metadata:

• title: The artifact's title
• last-modified: The date/timestamp of the last modification to any content in the artifact. This is an date-time-with-timezone format.
• version: The version of the content iself. May be any string, including "draft".
• oscal-version: The OSCAL version of the syntax. This must be a published OSCAL version, such as "1.1.3" or "1.2.1".

Example

system-security-plan:
  uuid: 11111111-2222-4000-8000-000000000000
  metadata:
    title: \[EXAMPLE\] FedRAMP \[Baseline Name\] System Security Plan (SSP)
    last-modified: '2025-01-08T04:18:29Z'
    version: fedramp-3.0.0rc1-oscal-1.1.2
    oscal-version: 1.1.3