{
  "assessment-plan": {
    "uuid": "d1ea2ac5-b8a8-5cc9-8eca-fd49cebdba10",
    "metadata": {
      "title": "Aegix Tiaki Continuous-Monitoring Assessment Plan",
      "last-modified": "2026-07-25T00:00:00Z",
      "version": "1.0.0",
      "oscal-version": "1.1.2",
      "remarks": "Minimal continuous-monitoring assessment plan auto-generated by tools/oscal/generate-assessment-results.py (AP-570). Reviews the FedRAMP 20X Moderate control set against the Aegix Tiaki SSP. A formal 3PAO assessment plan (with independent assessor + sampling) is a future artifact tracked by AP-285; this AP supports the in-house continuous-authorization posture only."
    },
    "import-ssp": {
      "href": "../ssps/tiaki-ssp.json"
    },
    "reviewed-controls": {
      "control-selections": [
        {
          "description": "FedRAMP 20X Moderate tailored control set per the imported profile.",
          "include-controls": [
            {
              "control-id": "ac-2"
            },
            {
              "control-id": "ac-3"
            },
            {
              "control-id": "ac-4"
            },
            {
              "control-id": "ac-6"
            },
            {
              "control-id": "ac-17"
            },
            {
              "control-id": "ac-20"
            },
            {
              "control-id": "au-2"
            },
            {
              "control-id": "au-3"
            },
            {
              "control-id": "au-6"
            },
            {
              "control-id": "au-9"
            },
            {
              "control-id": "au-11"
            },
            {
              "control-id": "au-12"
            },
            {
              "control-id": "ca-2"
            },
            {
              "control-id": "ca-7"
            },
            {
              "control-id": "ca-9"
            },
            {
              "control-id": "cm-2"
            },
            {
              "control-id": "cm-3"
            },
            {
              "control-id": "cm-8"
            },
            {
              "control-id": "cp-2"
            },
            {
              "control-id": "cp-9"
            },
            {
              "control-id": "cp-10"
            },
            {
              "control-id": "ia-2"
            },
            {
              "control-id": "ia-5"
            },
            {
              "control-id": "ia-8"
            },
            {
              "control-id": "ir-4"
            },
            {
              "control-id": "ir-6"
            },
            {
              "control-id": "ir-8"
            },
            {
              "control-id": "mp-4"
            },
            {
              "control-id": "mp-6"
            },
            {
              "control-id": "pl-2"
            },
            {
              "control-id": "pl-8"
            },
            {
              "control-id": "pm-14"
            },
            {
              "control-id": "ps-3"
            },
            {
              "control-id": "ra-3"
            },
            {
              "control-id": "ra-5"
            },
            {
              "control-id": "sa-8"
            },
            {
              "control-id": "sa-10"
            },
            {
              "control-id": "sa-11"
            },
            {
              "control-id": "sa-22"
            },
            {
              "control-id": "sc-7"
            },
            {
              "control-id": "sc-8"
            },
            {
              "control-id": "sc-12"
            },
            {
              "control-id": "sc-13"
            },
            {
              "control-id": "sc-28"
            },
            {
              "control-id": "sc-32"
            },
            {
              "control-id": "si-2"
            },
            {
              "control-id": "si-4"
            },
            {
              "control-id": "si-7"
            },
            {
              "control-id": "sr-3"
            },
            {
              "control-id": "sr-4"
            },
            {
              "control-id": "sr-10"
            },
            {
              "control-id": "sr-11"
            }
          ]
        }
      ]
    },
    "assessment-subjects": [
      {
        "type": "component",
        "description": "All components enumerated in the SSP system-implementation.",
        "include-all": {}
      }
    ],
    "tasks": [
      {
        "uuid": "6ea988c9-3075-5356-91b1-96d8f14a8fd5",
        "type": "milestone",
        "title": "Monthly continuous-monitoring assessment",
        "description": "Recurring monthly assessment driven by ci-oscal-assessment-results.yml; enriched with runtime evidence from the nightly evidence-collector when the compliance-artifacts bucket is provisioned."
      }
    ]
  }
}
