audit what pieces of the System Security Plan aren't reflected in the schema

[afeld]

I suspect that there are many areas/fields/nuances of the FedRAMP SSP that aren't fields in the OpenControl schema that we need to capture. Someone should work with @brittag to identify them, think through which are the most important for us to capture (presumably which are going to require the most change the in for the SSP), then figure out how to incorporate them.

[brittag]

I'd be excited to work with somebody on this - I figure the best way to go about it would be for a person familiar with the schema to put a meeting on my calendar and talk through it together. For example, right now when I look at that schema description, I don't understand how the component info gets transmogrified into the right parts of the SSP.

I've unassigned this from myself since I figure this should be assigned to that person I talk to. :D

[afeld]

@jcscottiii just found the "Additional FedRAMP Requirements and Guidance" tables in #29 (comment).