Skip to content

Do responsible-party and responsible-role serve two different purposes? #1296

Answered by david-waltermire
telosBA asked this question in Q&A
Discussion options

You must be logged in to vote

While responsible-role and responsible-party have similar models, they differ in one significant way.

  • responsible-role requires that a role-id is referenced, but allows any party-uuid references to be omitted. This supports use scenarios where a role is known, but an associated party is not known or cannot be specified by the content author in the OSCAL use contexts.
  • responsible-party is similar, but requires that one or more parties are provided using party-uuid. This is used in OSCAL contexts where the parties must be known and provided.

Replies: 1 comment

Comment options

You must be logged in to vote
0 replies
Answer selected by david-waltermire
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Q&A
Labels
question Scope: Documentation This issue relates to OSCAL documentation.
2 participants
Converted from issue

This discussion was converted from issue #1243 on June 02, 2022 14:55.