[Verse 1]
Start with your SSP as the foundation stone
Create Assessment Plan, reference what you own
Define the methods for each control you'll test
Three to five controls will put you to the test
Document procedures, scope and timeline clear
Assessment objectives must appear
[Chorus]
AP to AR, trace the golden thread
SSP to Profile, follow where it led
Observations turn to findings in your mind
POA and M for gaps you find
Assessment workflow, seamless and refined
Every artifact connects the dotted line
[Verse 2]
Execute assessment activities you've designed
Gather evidence, document what you find
Test implementations against control intent
Record observations, note what's present or absent
Interviews, inspections, automated scans
Multiple methods strengthen your plans
[Chorus]
AP to AR, trace the golden thread
SSP to Profile, follow where it led
Observations turn to findings in your mind
POA and M for gaps you find
Assessment workflow, seamless and refined
Every artifact connects the dotted line
[Bridge]
When findings surface, don't despair
POA and M shows how you'll repair
Risk levels, timelines, responsible parties
Remediation plans complete the stories
From Catalog down to your results today
Traceability lights the OSCAL way
[Verse 3]
Assessment Results capture what you've learned
Satisfying, Other than Satisfied earned
Risk ratings help prioritize your work
Findings reference where controls lurk
From source to implementation, crystal view
OSCAL workflow carries you through
[Chorus]
AP to AR, trace the golden thread
SSP to Profile, follow where it led
Observations turn to findings in your mind
POA and M for gaps you find
Assessment workflow, seamless and refined
Every artifact connects the dotted line
[Outro]
Plan, assess, results, and remediate
OSCAL mastery you'll demonstrate
Each document linked in perfect flow
Lab five complete, now watch you grow