Skip to main content

System Information

ssp_03_system_information.png

Cloud Service Provider (CSP) Name

The cloud service provider (CSP) must be provided as one of the party assemblies within the metadata.

OSCAL Representation

<system-security-plan>  
 <metadata>  
 <!-- CSP Name -->  
 <party uuid=”uuid-of-csp” type=”organization”>  
 <name>Cloud Service Provider (CSP) Name</name>  
 </party>  
 </metadata>  
</system-security-plan>  

XPath Queries

Cloud Service Provider (CSP) Name:
/*/metadata/party[@uuid='uuid-of-csp']/name


System Name, Abbreviation, and FedRAMP Package ID

The remainder of the system information is provided in the
system-characteristics assembly.

The FedRAMP-assigned package number is the unique ID for a FedRAMP system. OSCAL supports several system identifiers, which may be assigned by different organizations.

For this reason, OSCAL requires the identifier-type flag be present and have a value that uniquely identifies the issuing organization. FedRAMP requires its value to be "http://fedramp.gov/ns/oscal" for all FedRAMP-issued application numbers.

This assembly defines the full name of the system and its short name. A FedRAMP OSCAL SSP must define the system name and its short name.

OSCAL Representation

<system-security-plan>  
 <metadata>  
 <!-- CSP Name -->  
 <party uuid="uuid-of-csp" type="organization">  
 <name>Cloud Service Provider (CSP) Name</name>  
 </party>  
 </metadata>  
 <system-characteristics>  
 <!-- System Name &amp; Abbreviation -->  
 <system-name>System's Full Name</system-name>  
 <system-name-short>System's Short Name or Acronym</system-name-short>   
 <!-- FedRAMP Unique Identifier -->  
 <system-id identifier-type="http://fedramp.gov/ns/oscal">F00000000</system-id>  
 <!-- cut -->   
 </system-characteristics>  
 <!-- cut -->  
</system-security-plan>  

FedRAMP Allowed Value

Required Identifier Type:

  • identifier-type="http://fedramp.gov/ns/oscal"

XPath Queries

Information System Name:

/*/system-characteristics/system-name
Information System Abbreviation:
/*/system-characteristics/system-name-short
FedRAMP Unique Identifier:
/*/system-characteristics/system-id[@identifier-type="http://fedramp.gov/ns/oscal"]