Skip to content

opencontrol/fedramp-templater

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

FedRAMP Templater Build Status

This is a command-line tool to take the FedRAMP System Security Plan template and fill it with OpenControls data.

Installation

Requires Go 1.6+.

  1. Install gokogiri dependencies.

  2. Install the templater:

    For Ubuntu/Debian:

    sudo apt-get install libxml2-dev 
    go get github.com/opencontrol/fedramp-templater

    For OsX (assuming you have HomeBrew installed)

    brew install libxml2
    brew install pkg-config
    mkdir -p /usr/local/lib/pkgconfig
    sudo ln -s /usr/local/Cellar/libxml2/2.9.4_2/lib/pkgconfig/libxml-2.0.pc /usr/local/lib/pkgconfig/libxml-2.0.pc
    go get github.com/moovweb/gokogiri
    

    At the time of documenting these steps, the version of libxml2 installed is 2.9.4_2.

    It may different when you are performing these steps. If it is you will need to look inside of /usr/local/Cellar/libxml2 and see what version is installed and then modify the symbolic link command based on the version you have installed.

  • Also make sure that your go environment variables are configured to build the FedRAMP package.

    For OsX add the following to your .bash_profile (assuming you are using bash)

    export GOPATH="$HOME/go"
    export GOBIN=$GOPATH/bin
    export PATH=$PATH:$GOBIN
    

    Note that installation issues are usually caused by the install of Gokogiri, and if you run into issues you may find some help at this issue and with the update to the GokoGiri README

Usage

  1. Follow the Compliance Masonry instructions to:

    1. Install Compliance Masonry
    2. Create an OpenControl project
    3. Collect the OpenControl dependencies
  2. Please use the FedRAMP-System-Security-Plan-Template-v2.1.docx uploaded here in the repo, that has the bugs fixed, for fedramp-templater to work. (Original Document v2.1.)

  3. Run

    # To Fill the SSP.
    fedramp-templater fill <openControlsDir> <inputDoc> <outputDoc>
    # i.e.
    fedramp-templater fill opencontrols/ FedRAMP-System-Security-Plan-Template-v2.1.docx FedRAMP-Masonry-Template-v2.1.docx
    
    # To diff the SSP with the YAML
    fedramp-templater diff <openControlsDir> <inputDoc>
    fedramp-templater diff opencontrols/ FedRAMP-System-Security-Plan-Template-v2.1.docx

The output document will be the same as the input one, albeit filled in with the data from your OpenControls files.

**NOTE: Please use the FedRAMP-System-Security-Plan-Template-v2.1.docx uploaded here that has the bugs fixed for fedramp-templater to work.

About

EXPERIMENTAL: a template builder for FedRAMP System Security Plans

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published