System Information

## System Information

###

Cloud Service Provider (CSP) Name

The cloud service provider (CSP) must be provided as one of the party assemblies within the metadata.

####

OSCAL Representation
{{<

highlight xml "linenos=table, hl_lines=5" >}}

<system-security-plan>
   
 <metadata>
   
 <!-- CSP Name -->
   
 <party uuid=”uuid-of-csp” type=”organization”>
   
 <name>Cloud Service Provider (CSP) Name</name>
   
 </party>
   
 </metadata>
  
</system-security-plan>
{{</  

highlight

>}}

####

XPath Queries
{{<

highlight xml "linenos=table" >}}

Cloud Service Provider (CSP) Name:
  /*/metadata/party[@uuid='uuid-of-csp']/name
{{</ highlight >}}

---
###

---

System Name, Abbreviation, and FedRAMP UniquePackage Identifier

ID

The remainder of the system information is provided in the
system-characteristics assembly.

The FedRAMP-assigned applicationpackage number is the unique ID for a FedRAMP system. OSCAL supports several system identifiers, which may be assigned by different organizations.

For this reason, OSCAL requires the identifier-type flag be present and have a value that uniquely identifies the issuing organization. FedRAMP requires its value to be "http://fedramp.gov/ns/oscal" for all FedRAMP-issued application numbers.

{{< figure src="/img/ssp-figure-5.png" title="FedRAMP SSP template System Name and Package ID" alt="Screenshot of the system name, and package ID in the FedRAMP SSP template." >}}

This assembly defines the full name of the system and its short name. A FedRAMP OSCAL SSP must define the system name and its short name.

####

OSCAL Representation
{{<

highlight xml "linenos=table, hl_lines=9-13" >}}

<system-security-plan>
   
 <metadata>
   
 <!-- CSP Name -->
   
 <party uuid="uuid-of-csp" type="organization">
   
 <name>Cloud Service Provider (CSP) Name</name>
   
 </party>
   
 </metadata>
   
 <system-characteristics>
   
 <!-- System Name &amp; Abbreviation -->
   
 <system-name>System's Full Name</system-name>
   
 <system-name-short>System's Short Name or Acronym</system-name-short>   
 
        <!-- FedRAMP Unique Identifier -->
   
 <system-id identifier-type="http://fedramp.gov/ns/oscal">F00000000</system-id>
   
 <!-- cut -->   
 
    </system-characteristics>
   
 <!-- cut -->
  
</system-security-plan>
{{</  
highlight

>}}

---

<br />
{{<callout>}}

**FedRAMP Allowed Value** Value

Required Identifier Type:
-

• identifier-type="http://fedramp.gov/ns/oscal"

{{</callout>}}

####

XPath Queries
{{<

highlight xml "linenos=table" >}}
   

Information System Name:

     

/*/system-characteristics/system-name
  Information System Abbreviation:
  /*/system-characteristics/system-name-short
  FedRAMP Unique Identifier:
  /*/system-characteristics/system-id[@identifier-type="http://fedramp.gov/ns/oscal"]
{{</ highlight >}}