{"assessment-results":{"import-ap":{"href":"../assessment-plans/Ubuntu-System-ap-fedramp-low/assessment-plan.json"},"local-definitions":{"activities":[{"description":"XCCDF rule results were normalized and mapped to FedRAMP Rev 5 Low control identifiers.","steps":[{"description":"Collected rule pass/fail results for all 10 Ubuntu servers.","title":"Parse XCCDF rule results","uuid":"bafc8d79-224d-4181-bd71-389d01c16afd"},{"description":"Used component definition implemented-requirement Rule_Id properties to associate evidence with controls.","title":"Map rules to controls","uuid":"9c03cde4-0699-4853-89f8-9200f4674ecd"}],"title":"Mapped XCCDF evidence analysis","uuid":"11b5caf5-b564-48ec-ba18-2f7368981b2c"}]},"metadata":{"last-modified":"Sat, 09 May 2026 08:16:56 GMT","oscal-version":"1.2.1","props":[{"name":"regulation","value":"FedRAMP Rev 5 Low"},{"name":"platform","value":"Ubuntu 24.04 LTS"},{"name":"assessment-scope","value":"host-assessment"},{"name":"assessment-subject-count","value":"6"},{"name":"result-summary","value":"partial-pass-with-findings"},{"name":"mapped-control-count","value":"19"}],"published":"Sat, 09 May 2026 08:16:56 GMT","title":"Ubuntu System Assessment Results - FedRAMP Low","version":"1.0"},"results":[{"assessment-log":{"entries":[{"description":"Executed security compliance scans on 10 inventory items.","end":"Fri, 10 Apr 2026 08:16:56 GMT","start":"Thu, 09 Apr 2026 08:16:56 GMT","title":"XCCDF scans executed","uuid":"48dd1e63-9176-4104-9d51-2e94df9dfd8f"},{"description":"Mapped rule-level evidence to control identifiers using component definitions and regulatory mappings.","end":"Sat, 09 May 2026 08:16:56 GMT","start":"Fri, 08 May 2026 08:16:56 GMT","title":"Control mapping analysis completed","uuid":"029f6630-23f4-4f47-ba9c-666fa87b7ff8"}]},"description":"Assessment results for 10 inventory items evaluated against FedRAMP Rev 5 Low using mapped XCCDF evidence.","end":"Sat, 09 May 2026 08:16:56 GMT","observations":[{"collected":"Sat, 09 May 2026 08:16:56 GMT","description":"Control ac-1 is partially-satisfied based on 20 passing and 4 failing mapped XCCDF rule evaluations across 6 assessed subjects.","methods":["TEST"],"props":[{"name":"control-id","value":"ac-1"},{"name":"status","value":"partially-satisfied"},{"name":"pass-count","value":"20"},{"name":"fail-count","value":"4"},{"name":"rule-count","value":"4"},{"name":"coverage","value":"1.0"}],"relevant-evidence":[{"description":"Mapped rules: accounts_passwords_pam_faillock_deny, accounts_passwords_pam_faillock_enabled, accounts_passwords_pam_faillock_root_unlock_time, accounts_passwords_pam_faillock_unlock_time"}],"subjects":[{"subject-uuid":"0bf82faf-25d9-4376-a8b7-a89549eaea69","type":"component"},{"subject-uuid":"285b88bb-48ff-47ac-ab00-8dfb0068e0ec","type":"component"},{"subject-uuid":"31b486c9-9c3e-456c-aa13-0c704cbe9e91","type":"component"},{"subject-uuid":"57ceca5c-87e1-46f2-80e7-505b63d77990","type":"component"},{"subject-uuid":"81eeb04b-174a-4dd6-9341-83d0dbb68e48","type":"component"},{"subject-uuid":"a3a56487-ab2f-4bea-9c1e-09c3212ec516","type":"component"}],"title":"Control ac-1 assessment outcome","types":["finding"],"uuid":"de2aa02c-952b-40ac-8a87-ef6c1071e723"},{"collected":"Sat, 09 May 2026 08:16:56 GMT","description":"Control ac-2 is partially-satisfied based on 20 passing and 4 failing mapped XCCDF rule evaluations across 6 assessed subjects.","methods":["TEST"],"props":[{"name":"control-id","value":"ac-2"},{"name":"status","value":"partially-satisfied"},{"name":"pass-count","value":"20"},{"name":"fail-count","value":"4"},{"name":"rule-count","value":"4"},{"name":"coverage","value":"1.0"}],"relevant-evidence":[{"description":"Mapped rules: accounts_passwords_pam_faillock_deny, accounts_passwords_pam_faillock_enabled, accounts_passwords_pam_faillock_root_unlock_time, accounts_passwords_pam_faillock_unlock_time"}],"subjects":[{"subject-uuid":"0bf82faf-25d9-4376-a8b7-a89549eaea69","type":"component"},{"subject-uuid":"285b88bb-48ff-47ac-ab00-8dfb0068e0ec","type":"component"},{"subject-uuid":"31b486c9-9c3e-456c-aa13-0c704cbe9e91","type":"component"},{"subject-uuid":"57ceca5c-87e1-46f2-80e7-505b63d77990","type":"component"},{"subject-uuid":"81eeb04b-174a-4dd6-9341-83d0dbb68e48","type":"component"},{"subject-uuid":"a3a56487-ab2f-4bea-9c1e-09c3212ec516","type":"component"}],"title":"Control ac-2 assessment outcome","types":["finding"],"uuid":"ce32fedb-a7ad-415a-80fd-a3a3edb53bf4"},{"collected":"Sat, 09 May 2026 08:16:56 GMT","description":"Control ac-3 is partially-satisfied based on 88 passing and 20 failing mapped XCCDF rule evaluations across 6 assessed subjects.","methods":["TEST"],"props":[{"name":"control-id","value":"ac-3"},{"name":"status","value":"partially-satisfied"},{"name":"pass-count","value":"88"},{"name":"fail-count","value":"20"},{"name":"rule-count","value":"18"},{"name":"coverage","value":"1.0"}],"relevant-evidence":[{"description":"Mapped rules: accounts_password_pam_unix_enabled, accounts_root_gid_zero, accounts_umask_etc_bashrc, accounts_umask_etc_login_defs, accounts_umask_etc_profile, accounts_umask_root, ensure_pam_wheel_group_empty, ensure_root_access_controlled, file_groupowner_sshd_config, file_owner_sshd_config, file_permissions_sshd_config, file_permissions_sshd_private_key, file_permissions_sshd_pub_key, groups_no_zero_gid_except_root, no_invalid_shell_accounts_unlocked, no_shelllogin_for_systemaccounts, sshd_limit_user_access, use_pam_wheel_group_for_su"}],"subjects":[{"subject-uuid":"0bf82faf-25d9-4376-a8b7-a89549eaea69","type":"component"},{"subject-uuid":"285b88bb-48ff-47ac-ab00-8dfb0068e0ec","type":"component"},{"subject-uuid":"31b486c9-9c3e-456c-aa13-0c704cbe9e91","type":"component"},{"subject-uuid":"57ceca5c-87e1-46f2-80e7-505b63d77990","type":"component"},{"subject-uuid":"81eeb04b-174a-4dd6-9341-83d0dbb68e48","type":"component"},{"subject-uuid":"a3a56487-ab2f-4bea-9c1e-09c3212ec516","type":"component"}],"title":"Control ac-3 assessment outcome","types":["finding"],"uuid":"3be92fb7-a148-4e7b-a35b-17996340014f"},{"collected":"Sat, 09 May 2026 08:16:56 GMT","description":"Control au-12 is partially-satisfied based on 6 passing and 12 failing mapped XCCDF rule evaluations across 6 assessed subjects.","methods":["TEST"],"props":[{"name":"control-id","value":"au-12"},{"name":"status","value":"partially-satisfied"},{"name":"pass-count","value":"6"},{"name":"fail-count","value":"12"},{"name":"rule-count","value":"3"},{"name":"coverage","value":"1.0"}],"relevant-evidence":[{"description":"Mapped rules: sshd_set_loglevel_info, sshd_set_max_auth_tries, sudo_custom_logfile"}],"subjects":[{"subject-uuid":"0bf82faf-25d9-4376-a8b7-a89549eaea69","type":"component"},{"subject-uuid":"285b88bb-48ff-47ac-ab00-8dfb0068e0ec","type":"component"},{"subject-uuid":"31b486c9-9c3e-456c-aa13-0c704cbe9e91","type":"component"},{"subject-uuid":"57ceca5c-87e1-46f2-80e7-505b63d77990","type":"component"},{"subject-uuid":"81eeb04b-174a-4dd6-9341-83d0dbb68e48","type":"component"},{"subject-uuid":"a3a56487-ab2f-4bea-9c1e-09c3212ec516","type":"component"}],"title":"Control au-12 assessment outcome","types":["finding"],"uuid":"5f4ce7eb-5006-4421-aeff-927b4979711a"},{"collected":"Sat, 09 May 2026 08:16:56 GMT","description":"Control au-2 is not-satisfied based on 0 passing and 6 failing mapped XCCDF rule evaluations across 6 assessed subjects (all rule evaluations failed).","methods":["TEST"],"props":[{"name":"control-id","value":"au-2"},{"name":"status","value":"not-satisfied"},{"name":"pass-count","value":"0"},{"name":"fail-count","value":"6"},{"name":"rule-count","value":"1"},{"name":"coverage","value":"1.0"}],"relevant-evidence":[{"description":"Mapped rules: sshd_set_loglevel_info"}],"subjects":[{"subject-uuid":"0bf82faf-25d9-4376-a8b7-a89549eaea69","type":"component"},{"subject-uuid":"285b88bb-48ff-47ac-ab00-8dfb0068e0ec","type":"component"},{"subject-uuid":"31b486c9-9c3e-456c-aa13-0c704cbe9e91","type":"component"},{"subject-uuid":"57ceca5c-87e1-46f2-80e7-505b63d77990","type":"component"},{"subject-uuid":"81eeb04b-174a-4dd6-9341-83d0dbb68e48","type":"component"},{"subject-uuid":"a3a56487-ab2f-4bea-9c1e-09c3212ec516","type":"component"}],"title":"Control au-2 assessment outcome","types":["finding"],"uuid":"7b23ef86-b3fd-4d96-80be-d68cb99ba1b2"},{"collected":"Sat, 09 May 2026 08:16:56 GMT","description":"Control au-3 is partially-satisfied based on 6 passing and 6 failing mapped XCCDF rule evaluations across 6 assessed subjects.","methods":["TEST"],"props":[{"name":"control-id","value":"au-3"},{"name":"status","value":"partially-satisfied"},{"name":"pass-count","value":"6"},{"name":"fail-count","value":"6"},{"name":"rule-count","value":"2"},{"name":"coverage","value":"1.0"}],"relevant-evidence":[{"description":"Mapped rules: sshd_set_max_auth_tries, sudo_custom_logfile"}],"subjects":[{"subject-uuid":"0bf82faf-25d9-4376-a8b7-a89549eaea69","type":"component"},{"subject-uuid":"285b88bb-48ff-47ac-ab00-8dfb0068e0ec","type":"component"},{"subject-uuid":"31b486c9-9c3e-456c-aa13-0c704cbe9e91","type":"component"},{"subject-uuid":"57ceca5c-87e1-46f2-80e7-505b63d77990","type":"component"},{"subject-uuid":"81eeb04b-174a-4dd6-9341-83d0dbb68e48","type":"component"},{"subject-uuid":"a3a56487-ab2f-4bea-9c1e-09c3212ec516","type":"component"}],"title":"Control au-3 assessment outcome","types":["finding"],"uuid":"151f50f0-fc8a-4950-adbd-235ecb5da387"},{"collected":"Sat, 09 May 2026 08:16:56 GMT","description":"Control cm-1 is partially-satisfied based on 5 passing and 1 failing mapped XCCDF rule evaluations across 6 assessed subjects.","methods":["TEST"],"props":[{"name":"control-id","value":"cm-1"},{"name":"status","value":"partially-satisfied"},{"name":"pass-count","value":"5"},{"name":"fail-count","value":"1"},{"name":"rule-count","value":"1"},{"name":"coverage","value":"1.0"}],"relevant-evidence":[{"description":"Mapped rules: accounts_password_warn_age_login_defs"}],"subjects":[{"subject-uuid":"0bf82faf-25d9-4376-a8b7-a89549eaea69","type":"component"},{"subject-uuid":"285b88bb-48ff-47ac-ab00-8dfb0068e0ec","type":"component"},{"subject-uuid":"31b486c9-9c3e-456c-aa13-0c704cbe9e91","type":"component"},{"subject-uuid":"57ceca5c-87e1-46f2-80e7-505b63d77990","type":"component"},{"subject-uuid":"81eeb04b-174a-4dd6-9341-83d0dbb68e48","type":"component"},{"subject-uuid":"a3a56487-ab2f-4bea-9c1e-09c3212ec516","type":"component"}],"title":"Control cm-1 assessment outcome","types":["finding"],"uuid":"fcf90f1a-4816-41d6-9433-520f065a0ed2"},{"collected":"Sat, 09 May 2026 08:16:56 GMT","description":"Control cm-2 is partially-satisfied based on 5 passing and 1 failing mapped XCCDF rule evaluations across 6 assessed subjects.","methods":["TEST"],"props":[{"name":"control-id","value":"cm-2"},{"name":"status","value":"partially-satisfied"},{"name":"pass-count","value":"5"},{"name":"fail-count","value":"1"},{"name":"rule-count","value":"1"},{"name":"coverage","value":"1.0"}],"relevant-evidence":[{"description":"Mapped rules: accounts_password_warn_age_login_defs"}],"subjects":[{"subject-uuid":"0bf82faf-25d9-4376-a8b7-a89549eaea69","type":"component"},{"subject-uuid":"285b88bb-48ff-47ac-ab00-8dfb0068e0ec","type":"component"},{"subject-uuid":"31b486c9-9c3e-456c-aa13-0c704cbe9e91","type":"component"},{"subject-uuid":"57ceca5c-87e1-46f2-80e7-505b63d77990","type":"component"},{"subject-uuid":"81eeb04b-174a-4dd6-9341-83d0dbb68e48","type":"component"},{"subject-uuid":"a3a56487-ab2f-4bea-9c1e-09c3212ec516","type":"component"}],"title":"Control cm-2 assessment outcome","types":["finding"],"uuid":"53782cae-40e6-4484-b7db-c918969c0520"},{"collected":"Sat, 09 May 2026 08:16:56 GMT","description":"Control cm-6 is partially-satisfied based on 10 passing and 2 failing mapped XCCDF rule evaluations across 6 assessed subjects.","methods":["TEST"],"props":[{"name":"control-id","value":"cm-6"},{"name":"status","value":"partially-satisfied"},{"name":"pass-count","value":"10"},{"name":"fail-count","value":"2"},{"name":"rule-count","value":"2"},{"name":"coverage","value":"1.0"}],"relevant-evidence":[{"description":"Mapped rules: accounts_password_warn_age_login_defs, sshd_disable_forwarding"}],"subjects":[{"subject-uuid":"0bf82faf-25d9-4376-a8b7-a89549eaea69","type":"component"},{"subject-uuid":"285b88bb-48ff-47ac-ab00-8dfb0068e0ec","type":"component"},{"subject-uuid":"31b486c9-9c3e-456c-aa13-0c704cbe9e91","type":"component"},{"subject-uuid":"57ceca5c-87e1-46f2-80e7-505b63d77990","type":"component"},{"subject-uuid":"81eeb04b-174a-4dd6-9341-83d0dbb68e48","type":"component"},{"subject-uuid":"a3a56487-ab2f-4bea-9c1e-09c3212ec516","type":"component"}],"title":"Control cm-6 assessment outcome","types":["finding"],"uuid":"9f6d7c97-0d81-43ec-b596-370784cba04b"},{"collected":"Sat, 09 May 2026 08:16:56 GMT","description":"Control cm-7 is partially-satisfied based on 10 passing and 2 failing mapped XCCDF rule evaluations across 6 assessed subjects.","methods":["TEST"],"props":[{"name":"control-id","value":"cm-7"},{"name":"status","value":"partially-satisfied"},{"name":"pass-count","value":"10"},{"name":"fail-count","value":"2"},{"name":"rule-count","value":"2"},{"name":"coverage","value":"1.0"}],"relevant-evidence":[{"description":"Mapped rules: accounts_password_warn_age_login_defs, sshd_disable_forwarding"}],"subjects":[{"subject-uuid":"0bf82faf-25d9-4376-a8b7-a89549eaea69","type":"component"},{"subject-uuid":"285b88bb-48ff-47ac-ab00-8dfb0068e0ec","type":"component"},{"subject-uuid":"31b486c9-9c3e-456c-aa13-0c704cbe9e91","type":"component"},{"subject-uuid":"57ceca5c-87e1-46f2-80e7-505b63d77990","type":"component"},{"subject-uuid":"81eeb04b-174a-4dd6-9341-83d0dbb68e48","type":"component"},{"subject-uuid":"a3a56487-ab2f-4bea-9c1e-09c3212ec516","type":"component"}],"title":"Control cm-7 assessment outcome","types":["finding"],"uuid":"3bd3e5ce-50f6-4ce2-8bd6-9e5819e75b3c"},{"collected":"Sat, 09 May 2026 08:16:56 GMT","description":"Control ia-5 is partially-satisfied based on 15 passing and 3 failing mapped XCCDF rule evaluations across 6 assessed subjects.","methods":["TEST"],"props":[{"name":"control-id","value":"ia-5"},{"name":"status","value":"partially-satisfied"},{"name":"pass-count","value":"15"},{"name":"fail-count","value":"3"},{"name":"rule-count","value":"3"},{"name":"coverage","value":"1.0"}],"relevant-evidence":[{"description":"Mapped rules: sshd_use_strong_ciphers, sshd_use_strong_kex, sshd_use_strong_macs"}],"subjects":[{"subject-uuid":"0bf82faf-25d9-4376-a8b7-a89549eaea69","type":"component"},{"subject-uuid":"285b88bb-48ff-47ac-ab00-8dfb0068e0ec","type":"component"},{"subject-uuid":"31b486c9-9c3e-456c-aa13-0c704cbe9e91","type":"component"},{"subject-uuid":"57ceca5c-87e1-46f2-80e7-505b63d77990","type":"component"},{"subject-uuid":"81eeb04b-174a-4dd6-9341-83d0dbb68e48","type":"component"},{"subject-uuid":"a3a56487-ab2f-4bea-9c1e-09c3212ec516","type":"component"}],"title":"Control ia-5 assessment outcome","types":["finding"],"uuid":"930675ab-ca29-4b14-a0e7-55ed861de827"},{"collected":"Sat, 09 May 2026 08:16:56 GMT","description":"Control ia-5.1 is partially-satisfied based on 185 passing and 25 failing mapped XCCDF rule evaluations across 6 assessed subjects.","methods":["TEST"],"props":[{"name":"control-id","value":"ia-5.1"},{"name":"status","value":"partially-satisfied"},{"name":"pass-count","value":"185"},{"name":"fail-count","value":"25"},{"name":"rule-count","value":"35"},{"name":"coverage","value":"1.0"}],"relevant-evidence":[{"description":"Mapped rules: account_disable_post_pw_expiration, accounts_maximum_age_login_defs, accounts_minimum_age_login_defs, accounts_password_last_change_is_in_past, accounts_password_pam_dcredit, accounts_password_pam_dictcheck, accounts_password_pam_difok, accounts_password_pam_enforce_root, accounts_password_pam_enforcing, accounts_password_pam_lcredit, accounts_password_pam_maxrepeat, accounts_password_pam_maxsequence, accounts_password_pam_minclass, accounts_password_pam_minlen, accounts_password_pam_ocredit, accounts_password_pam_pwhistory_enabled, accounts_password_pam_pwhistory_enforce_root, accounts_password_pam_pwhistory_remember, accounts_password_pam_pwhistory_use_authtok, accounts_password_pam_pwquality_enabled, accounts_password_pam_ucredit, accounts_password_pam_unix_authtok, accounts_password_pam_unix_no_remember, accounts_password_set_max_life_existing, accounts_password_set_min_life_existing, no_empty_passwords_unix, set_password_hashing_algorithm_logindefs, set_password_hashing_algorithm_systemauth, sshd_disable_empty_passwords, sshd_disable_gssapi_auth, sshd_disable_rhosts, sshd_enable_pam, sshd_use_strong_ciphers, sshd_use_strong_kex, sshd_use_strong_macs"}],"subjects":[{"subject-uuid":"0bf82faf-25d9-4376-a8b7-a89549eaea69","type":"component"},{"subject-uuid":"285b88bb-48ff-47ac-ab00-8dfb0068e0ec","type":"component"},{"subject-uuid":"31b486c9-9c3e-456c-aa13-0c704cbe9e91","type":"component"},{"subject-uuid":"57ceca5c-87e1-46f2-80e7-505b63d77990","type":"component"},{"subject-uuid":"81eeb04b-174a-4dd6-9341-83d0dbb68e48","type":"component"},{"subject-uuid":"a3a56487-ab2f-4bea-9c1e-09c3212ec516","type":"component"}],"title":"Control ia-5.1 assessment outcome","types":["finding"],"uuid":"df2543d4-e139-408d-91df-5476d4c1319b"},{"collected":"Sat, 09 May 2026 08:16:56 GMT","description":"Control mp-2 is partially-satisfied based on 88 passing and 20 failing mapped XCCDF rule evaluations across 6 assessed subjects.","methods":["TEST"],"props":[{"name":"control-id","value":"mp-2"},{"name":"status","value":"partially-satisfied"},{"name":"pass-count","value":"88"},{"name":"fail-count","value":"20"},{"name":"rule-count","value":"18"},{"name":"coverage","value":"1.0"}],"relevant-evidence":[{"description":"Mapped rules: accounts_password_pam_unix_enabled, accounts_root_gid_zero, accounts_umask_etc_bashrc, accounts_umask_etc_login_defs, accounts_umask_etc_profile, accounts_umask_root, ensure_pam_wheel_group_empty, ensure_root_access_controlled, file_groupowner_sshd_config, file_owner_sshd_config, file_permissions_sshd_config, file_permissions_sshd_private_key, file_permissions_sshd_pub_key, groups_no_zero_gid_except_root, no_invalid_shell_accounts_unlocked, no_shelllogin_for_systemaccounts, sshd_limit_user_access, use_pam_wheel_group_for_su"}],"subjects":[{"subject-uuid":"0bf82faf-25d9-4376-a8b7-a89549eaea69","type":"component"},{"subject-uuid":"285b88bb-48ff-47ac-ab00-8dfb0068e0ec","type":"component"},{"subject-uuid":"31b486c9-9c3e-456c-aa13-0c704cbe9e91","type":"component"},{"subject-uuid":"57ceca5c-87e1-46f2-80e7-505b63d77990","type":"component"},{"subject-uuid":"81eeb04b-174a-4dd6-9341-83d0dbb68e48","type":"component"},{"subject-uuid":"a3a56487-ab2f-4bea-9c1e-09c3212ec516","type":"component"}],"title":"Control mp-2 assessment outcome","types":["finding"],"uuid":"d930ac59-babf-4bc7-8bcc-a31187ce2f0c"},{"collected":"Sat, 09 May 2026 08:16:56 GMT","description":"Control sa-3 is partially-satisfied based on 5 passing and 1 failing mapped XCCDF rule evaluations across 6 assessed subjects.","methods":["TEST"],"props":[{"name":"control-id","value":"sa-3"},{"name":"status","value":"partially-satisfied"},{"name":"pass-count","value":"5"},{"name":"fail-count","value":"1"},{"name":"rule-count","value":"1"},{"name":"coverage","value":"1.0"}],"relevant-evidence":[{"description":"Mapped rules: accounts_password_warn_age_login_defs"}],"subjects":[{"subject-uuid":"0bf82faf-25d9-4376-a8b7-a89549eaea69","type":"component"},{"subject-uuid":"285b88bb-48ff-47ac-ab00-8dfb0068e0ec","type":"component"},{"subject-uuid":"31b486c9-9c3e-456c-aa13-0c704cbe9e91","type":"component"},{"subject-uuid":"57ceca5c-87e1-46f2-80e7-505b63d77990","type":"component"},{"subject-uuid":"81eeb04b-174a-4dd6-9341-83d0dbb68e48","type":"component"},{"subject-uuid":"a3a56487-ab2f-4bea-9c1e-09c3212ec516","type":"component"}],"title":"Control sa-3 assessment outcome","types":["finding"],"uuid":"08de8aa9-eaec-4b81-922b-d0efd0c11918"},{"collected":"Sat, 09 May 2026 08:16:56 GMT","description":"Control sa-8 is partially-satisfied based on 5 passing and 1 failing mapped XCCDF rule evaluations across 6 assessed subjects.","methods":["TEST"],"props":[{"name":"control-id","value":"sa-8"},{"name":"status","value":"partially-satisfied"},{"name":"pass-count","value":"5"},{"name":"fail-count","value":"1"},{"name":"rule-count","value":"1"},{"name":"coverage","value":"1.0"}],"relevant-evidence":[{"description":"Mapped rules: accounts_password_warn_age_login_defs"}],"subjects":[{"subject-uuid":"0bf82faf-25d9-4376-a8b7-a89549eaea69","type":"component"},{"subject-uuid":"285b88bb-48ff-47ac-ab00-8dfb0068e0ec","type":"component"},{"subject-uuid":"31b486c9-9c3e-456c-aa13-0c704cbe9e91","type":"component"},{"subject-uuid":"57ceca5c-87e1-46f2-80e7-505b63d77990","type":"component"},{"subject-uuid":"81eeb04b-174a-4dd6-9341-83d0dbb68e48","type":"component"},{"subject-uuid":"a3a56487-ab2f-4bea-9c1e-09c3212ec516","type":"component"}],"title":"Control sa-8 assessment outcome","types":["finding"],"uuid":"e92118c3-c9c3-4b3b-aae8-095406d62d55"},{"collected":"Sat, 09 May 2026 08:16:56 GMT","description":"Control sc-28 is partially-satisfied based on 21 passing and 3 failing mapped XCCDF rule evaluations across 6 assessed subjects.","methods":["TEST"],"props":[{"name":"control-id","value":"sc-28"},{"name":"status","value":"partially-satisfied"},{"name":"pass-count","value":"21"},{"name":"fail-count","value":"3"},{"name":"rule-count","value":"4"},{"name":"coverage","value":"1.0"}],"relevant-evidence":[{"description":"Mapped rules: accounts_password_pam_pwhistory_use_authtok, accounts_password_pam_unix_authtok, set_password_hashing_algorithm_logindefs, set_password_hashing_algorithm_systemauth"}],"subjects":[{"subject-uuid":"0bf82faf-25d9-4376-a8b7-a89549eaea69","type":"component"},{"subject-uuid":"285b88bb-48ff-47ac-ab00-8dfb0068e0ec","type":"component"},{"subject-uuid":"31b486c9-9c3e-456c-aa13-0c704cbe9e91","type":"component"},{"subject-uuid":"57ceca5c-87e1-46f2-80e7-505b63d77990","type":"component"},{"subject-uuid":"81eeb04b-174a-4dd6-9341-83d0dbb68e48","type":"component"},{"subject-uuid":"a3a56487-ab2f-4bea-9c1e-09c3212ec516","type":"component"}],"title":"Control sc-28 assessment outcome","types":["finding"],"uuid":"11bd0c25-177e-4924-84dd-3023cc83bc4f"},{"collected":"Sat, 09 May 2026 08:16:56 GMT","description":"Control sc-28.1 is partially-satisfied based on 21 passing and 3 failing mapped XCCDF rule evaluations across 6 assessed subjects.","methods":["TEST"],"props":[{"name":"control-id","value":"sc-28.1"},{"name":"status","value":"partially-satisfied"},{"name":"pass-count","value":"21"},{"name":"fail-count","value":"3"},{"name":"rule-count","value":"4"},{"name":"coverage","value":"1.0"}],"relevant-evidence":[{"description":"Mapped rules: accounts_password_pam_pwhistory_use_authtok, accounts_password_pam_unix_authtok, set_password_hashing_algorithm_logindefs, set_password_hashing_algorithm_systemauth"}],"subjects":[{"subject-uuid":"0bf82faf-25d9-4376-a8b7-a89549eaea69","type":"component"},{"subject-uuid":"285b88bb-48ff-47ac-ab00-8dfb0068e0ec","type":"component"},{"subject-uuid":"31b486c9-9c3e-456c-aa13-0c704cbe9e91","type":"component"},{"subject-uuid":"57ceca5c-87e1-46f2-80e7-505b63d77990","type":"component"},{"subject-uuid":"81eeb04b-174a-4dd6-9341-83d0dbb68e48","type":"component"},{"subject-uuid":"a3a56487-ab2f-4bea-9c1e-09c3212ec516","type":"component"}],"title":"Control sc-28.1 assessment outcome","types":["finding"],"uuid":"0e7c93a1-6fd3-4069-9df7-2efa56d638a3"},{"collected":"Sat, 09 May 2026 08:16:56 GMT","description":"Control sc-8 is partially-satisfied based on 15 passing and 3 failing mapped XCCDF rule evaluations across 6 assessed subjects.","methods":["TEST"],"props":[{"name":"control-id","value":"sc-8"},{"name":"status","value":"partially-satisfied"},{"name":"pass-count","value":"15"},{"name":"fail-count","value":"3"},{"name":"rule-count","value":"3"},{"name":"coverage","value":"1.0"}],"relevant-evidence":[{"description":"Mapped rules: sshd_use_strong_ciphers, sshd_use_strong_kex, sshd_use_strong_macs"}],"subjects":[{"subject-uuid":"0bf82faf-25d9-4376-a8b7-a89549eaea69","type":"component"},{"subject-uuid":"285b88bb-48ff-47ac-ab00-8dfb0068e0ec","type":"component"},{"subject-uuid":"31b486c9-9c3e-456c-aa13-0c704cbe9e91","type":"component"},{"subject-uuid":"57ceca5c-87e1-46f2-80e7-505b63d77990","type":"component"},{"subject-uuid":"81eeb04b-174a-4dd6-9341-83d0dbb68e48","type":"component"},{"subject-uuid":"a3a56487-ab2f-4bea-9c1e-09c3212ec516","type":"component"}],"title":"Control sc-8 assessment outcome","types":["finding"],"uuid":"cbe4044f-113c-4317-bc21-af8f31fc059f"},{"collected":"Sat, 09 May 2026 08:16:56 GMT","description":"Control sc-8.1 is partially-satisfied based on 15 passing and 3 failing mapped XCCDF rule evaluations across 6 assessed subjects.","methods":["TEST"],"props":[{"name":"control-id","value":"sc-8.1"},{"name":"status","value":"partially-satisfied"},{"name":"pass-count","value":"15"},{"name":"fail-count","value":"3"},{"name":"rule-count","value":"3"},{"name":"coverage","value":"1.0"}],"relevant-evidence":[{"description":"Mapped rules: sshd_use_strong_ciphers, sshd_use_strong_kex, sshd_use_strong_macs"}],"subjects":[{"subject-uuid":"0bf82faf-25d9-4376-a8b7-a89549eaea69","type":"component"},{"subject-uuid":"285b88bb-48ff-47ac-ab00-8dfb0068e0ec","type":"component"},{"subject-uuid":"31b486c9-9c3e-456c-aa13-0c704cbe9e91","type":"component"},{"subject-uuid":"57ceca5c-87e1-46f2-80e7-505b63d77990","type":"component"},{"subject-uuid":"81eeb04b-174a-4dd6-9341-83d0dbb68e48","type":"component"},{"subject-uuid":"a3a56487-ab2f-4bea-9c1e-09c3212ec516","type":"component"}],"title":"Control sc-8.1 assessment outcome","types":["finding"],"uuid":"73cc6a33-4e67-4531-9822-c73bf930e9cf"}],"remarks":"Assessment results generated from XCCDF scan data for 10 servers with 19 controls evaluated.","reviewed-controls":{"control-selections":[{"description":"ac-1: partially-satisfied (20 pass / 4 fail rule evaluations)","include-controls":[{"control-id":"ac-1"}]},{"description":"ac-2: partially-satisfied (20 pass / 4 fail rule evaluations)","include-controls":[{"control-id":"ac-2"}]},{"description":"ac-3: partially-satisfied (88 pass / 20 fail rule evaluations)","include-controls":[{"control-id":"ac-3"}]},{"description":"au-12: partially-satisfied (6 pass / 12 fail rule evaluations)","include-controls":[{"control-id":"au-12"}]},{"description":"au-2: not-satisfied (0 pass / 6 fail rule evaluations)","include-controls":[{"control-id":"au-2"}]},{"description":"au-3: partially-satisfied (6 pass / 6 fail rule evaluations)","include-controls":[{"control-id":"au-3"}]},{"description":"cm-1: partially-satisfied (5 pass / 1 fail rule evaluations)","include-controls":[{"control-id":"cm-1"}]},{"description":"cm-2: partially-satisfied (5 pass / 1 fail rule evaluations)","include-controls":[{"control-id":"cm-2"}]},{"description":"cm-6: partially-satisfied (10 pass / 2 fail rule evaluations)","include-controls":[{"control-id":"cm-6"}]},{"description":"cm-7: partially-satisfied (10 pass / 2 fail rule evaluations)","include-controls":[{"control-id":"cm-7"}]},{"description":"ia-5: partially-satisfied (15 pass / 3 fail rule evaluations)","include-controls":[{"control-id":"ia-5"}]},{"description":"ia-5.1: partially-satisfied (185 pass / 25 fail rule evaluations)","include-controls":[{"control-id":"ia-5.1"}]},{"description":"mp-2: partially-satisfied (88 pass / 20 fail rule evaluations)","include-controls":[{"control-id":"mp-2"}]},{"description":"sa-3: partially-satisfied (5 pass / 1 fail rule evaluations)","include-controls":[{"control-id":"sa-3"}]},{"description":"sa-8: partially-satisfied (5 pass / 1 fail rule evaluations)","include-controls":[{"control-id":"sa-8"}]},{"description":"sc-28: partially-satisfied (21 pass / 3 fail rule evaluations)","include-controls":[{"control-id":"sc-28"}]},{"description":"sc-28.1: partially-satisfied (21 pass / 3 fail rule evaluations)","include-controls":[{"control-id":"sc-28.1"}]},{"description":"sc-8: partially-satisfied (15 pass / 3 fail rule evaluations)","include-controls":[{"control-id":"sc-8"}]},{"description":"sc-8.1: partially-satisfied (15 pass / 3 fail rule evaluations)","include-controls":[{"control-id":"sc-8.1"}]}]},"risks":[],"start":"Thu, 09 Apr 2026 08:16:56 GMT","title":"FedRAMP Rev 5 Low assessment execution results","uuid":"cd7ebce3-1000-426b-8335-2a38ec40e970"}],"uuid":"353790b6-e19b-438f-bb16-2f0da62055c0"}}