Add OSCAL 800-171A Rev.2 Assessment Plan and Generated Catalog (Example) #2160
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This pull request adds a validated example of an OSCAL assessment plan and a generated full catalog derived from NIST SP 800-171 Rev. 2 and SP 800-171A Rev. 2 for community reference, validation, and educational use.
This PR uses a fully expanded catalog that includes control statements, objectives, and metadata to support resolvability for related-controls and end-to-end schema validation.
The assessment plan references these controls by ID only, so an official catalog update or replacement can be dropped in later without changing any IDs or plan content.
Summary of changes
Adds examples/assessment-plan/json/nist-sp-800-171a-rev2-assessment-plan.wired.json, a structured OSCAL assessment plan using consistent related-control-id references.
Adds examples/catalog/json/nist-sp-800-171-rev2-catalog.generated.json, a fully expanded OSCAL catalog derived from NIST SP 800-171 Rev. 2.
Adds examples/README.md, documentation explaining validation steps, linkage, and file relationships.
Validation
Conforms to OSCAL 1.1.2 and passes schema validation with no unresolved control references:
bashoscal validate --no-schematron examples/catalog/json/nist-sp-800-171-rev2-catalog.generated.json
oscal validate --no-schematron examples/assessment-plan/json/nist-sp-800-171a-rev2-assessment-plan.wired.json
Notes
These files are community-derived examples and not official NIST publications. They are provided under the CC0 1.0 Universal Public Domain Dedication.
Checklist
✅ Correct base branch selected per Contributing guidance
✅ "Allow edits and access to secrets by maintainers" enabled
✅ No duplicate pull requests exist for this content
✅ Commits squashed and CI/CD checks expected to pass
✅ Examples and supporting documentation included