[Verse 1] Assessment Plan arrives with blueprint precision Imports your SSP like a detective's mission Scope and methodology mapped with care Components, inventory, locations declared Teams and tools assembled, rules engaged Schedule carved in stone, objectives staged [Chorus] AP starts the dance, AR captures the glance POA&M tracks the stance of remediation Three models spinning round the assessment ground Where findings meet solutions, documentation [Verse 2] Assessment Results freeze the moment tight Snapshot evidence in black and white Observations logged with timestamp truth Findings traced back to control proof Risks emerge from shadows into view Linking objectives to the work you do [Chorus] AP starts the dance, AR captures the glance POA&M tracks the stance of remediation Three models spinning round the assessment ground Where findings meet solutions, documentation [Verse 3] Plan of Action grabs the weakness thread Milestones marching where the risks are fed False positives filtered, adjustments made Operational risks carefully weighed Remediation steps in sequence flow Timeline targets help the healing grow [Bridge] Syntax shared between the AR and POA Risk statements echo in the same array SSP alignment keeps the models true Assessment layers working straight on through [Chorus] AP starts the dance, AR captures the glance POA&M tracks the stance of remediation Three models spinning round the assessment ground Where findings meet solutions, documentation [Outro] Continuous monitoring or point-in-time Assessment layers keeping systems prime Four components of the OSCAL spine Assessment mastery by design
← 3 Implementation Layer | 5 Common OSCAL Structure (All Models) →