Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

use ubuntu and nist 800-53 #10

Open
degenaro opened this issue Feb 26, 2025 · 0 comments
Open

use ubuntu and nist 800-53 #10

degenaro opened this issue Feb 26, 2025 · 0 comments
Labels

Comments

@degenaro
Copy link
Contributor

degenaro commented Feb 26, 2025

  • create oscal-compass repo's:

    • ubuntu xccdf
    • ubuntu ssp
    • ubuntu cd
    • NIST 800-53 profile
    • NIST 800-53 catalog
  • move oscal-compass repo's to CaC:

    • rhel9 xsccdf
    • rhel9 ssp
    • rhel9 cd
    • CIS Profile
    • CIS Catalog
  • update e2e-demo diagrams, links, text

  • steps for creating Ubuntu CD

  1. Take CIS Benchmark and generate csv and/or OSCAL json
  2. Take CIS Controls to NIST 800-53 mapping document and replace the CIS control with NIST controls in the above Comp Def.
  3. Take the CIS Ubuntu yaml file from CaC and has map (textual) rules name to CIS Benchmark ID (Recommendation #s')
  4. Make new CD with with one row for each textual rule, and the NIST controls are the corresponding aggregation of row with that recommendation number.
@degenaro degenaro changed the title use ubuntu and nist-80053 use ubuntu and nist 800-53 Feb 26, 2025
@degenaro degenaro added the task label Mar 3, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant