Spiral 1: Consolidate all issues and research into single spiral.

[Compton-US]

Belongs to #18

• Relates to: OSCAL mapping model support for identifying controls in a catalog that are not mapped OSCAL#1333
• All issues related to mapping requirements and feedback need to be consolidated and synthesized.
• Findings were produced at the end of 2022, but not shared. These need to be summarized as a part of the effort.
• A draft of updates to the model needs to be produced.

[Compton-US]

Draft: https://github.com/usnistgov/OSCAL-DEFINE/blob/research-mapping-model/research-2023/effort-mapping-model/2023-04-28.001.md

Pull request to follow...

[Compton-US]

PR reviewed yesterday.

To do list moving forward, based on what I know at this moment:

• Create change/feature requests for 1 and 2 in recommended actions.

There are unknown details around the specific attributes and enumerations, but it seems like we can reason through that in engineering. We always have the option to come back to DEFINE with specific needs or questions. A little work may be required to fully address the requests (examples being one item). Will do this as a part of a spiral to create each request.

• Item 3 needs additional definition, and this can be a future spiral to determine the solution for unmapped/unresolved mappings.

• Item 4 potentially has a path using existing models, but should also be a spiral.

I will create issues for each item, but there is no decision on who and when for these spirals.