{
  "component-definition": {
    "uuid": "15ff8e91-7e1b-548e-9400-c1fbf08faead",
    "metadata": {
      "title": "OSCAL Ops Library",
      "last-modified": "2026-09-16T02:00:55Z",
      "version": "0.1.0",
      "oscal-version": "1.1.2",
      "document-ids": [
        {
          "scheme": "https://oscalops.net/ns/library",
          "identifier": "library.oscalops.net"
        }
      ],
      "props": [
        {
          "name": "record-sha256",
          "ns": "https://oscalops.net/ns/library",
          "value": "5d7e8830cf16f62413a96dd5162017a4ebbc82485b7a49a78b3b4bce114e8ad0"
        }
      ],
      "links": [
        {
          "href": "https://library.oscalops.net/library.json",
          "rel": "canonical"
        }
      ],
      "remarks": "Nothing in this library is accredited, endorsed or approved by the ACSC, NIST or any assessment authority. Components are contributed assertions: read the assurance state before relying on one.\n\nBack-matter resources list every pinned catalogue release, the coverage profile for each, and every component definition version, typed by the library-item property in the https://oscalops.net/ns/library vocabulary. The imports are the newest version of each component definition. Every file in the site is listed with its SHA-256 in SHA256SUMS."
    },
    "import-component-definitions": [
      {
        "href": "#d96586ff-46d4-5ae2-b1a3-4088f1703fdf"
      },
      {
        "href": "#541b0537-e6cd-5336-9e82-35e85459eebf"
      },
      {
        "href": "#e233b74e-8c37-54e5-a257-e03e7b65b40f"
      },
      {
        "href": "#f7d50635-1903-51f9-8ea6-dbbe6dcbf218"
      },
      {
        "href": "#9f9b89f2-ee5f-5ef6-b260-d3d5e2cb3177"
      },
      {
        "href": "#37344a3e-6bdb-5f3e-8a98-c2c94793cc31"
      },
      {
        "href": "#1fa7ae57-db8f-5ec4-a19f-f29bf42144e3"
      },
      {
        "href": "#fde3df45-e6aa-57fc-9d36-348e54844f5e"
      }
    ],
    "back-matter": {
      "resources": [
        {
          "uuid": "6f037e85-d69c-5606-874e-1d986ef561a9",
          "title": "Information Security Manual",
          "props": [
            {
              "name": "version",
              "value": "v2026.09.4"
            },
            {
              "name": "library-item",
              "ns": "https://oscalops.net/ns/library",
              "value": "catalog-release"
            },
            {
              "name": "catalog-key",
              "ns": "https://oscalops.net/ns/library",
              "value": "acsc-ism"
            },
            {
              "name": "authority",
              "ns": "https://oscalops.net/ns/library",
              "value": "Australian Cyber Security Centre"
            },
            {
              "name": "licence",
              "ns": "https://oscalops.net/ns/library",
              "value": "CC-BY-4.0"
            },
            {
              "name": "controls",
              "ns": "https://oscalops.net/ns/library",
              "value": "1192"
            }
          ],
          "citation": {
            "text": "ISM OSCAL content from the Australian Signals Directorate's Australian Cyber Security Centre, provided under a Creative Commons Attribution 4.0 International licence, excluding the Coat of Arms and the ASD logo."
          },
          "rlinks": [
            {
              "href": "catalogs/acsc-ism/v2026.09.4/ISM_catalog.json",
              "media-type": "application/oscal+json",
              "hashes": [
                {
                  "algorithm": "sha-256",
                  "value": "237ea09362b8449ed5c5ee85de4725a0468ee73d13af7cf61c26d4e6ac47f12d"
                }
              ]
            },
            {
              "href": "https://raw.githubusercontent.com/AustralianCyberSecurityCentre/ism-oscal/v2026.09.4/ISM_catalog.json",
              "media-type": "application/oscal+json",
              "hashes": [
                {
                  "algorithm": "sha-256",
                  "value": "237ea09362b8449ed5c5ee85de4725a0468ee73d13af7cf61c26d4e6ac47f12d"
                }
              ]
            }
          ]
        },
        {
          "uuid": "abc3329a-ebc9-547f-9ace-29146be7da9c",
          "title": "SP 800-53 Revision 5",
          "props": [
            {
              "name": "version",
              "value": "v1.4.0"
            },
            {
              "name": "library-item",
              "ns": "https://oscalops.net/ns/library",
              "value": "catalog-release"
            },
            {
              "name": "catalog-key",
              "ns": "https://oscalops.net/ns/library",
              "value": "nist-sp800-53-rev5"
            },
            {
              "name": "authority",
              "ns": "https://oscalops.net/ns/library",
              "value": "NIST"
            },
            {
              "name": "licence",
              "ns": "https://oscalops.net/ns/library",
              "value": "CC0-1.0"
            },
            {
              "name": "controls",
              "ns": "https://oscalops.net/ns/library",
              "value": "1196"
            }
          ],
          "citation": {
            "text": "NIST OSCAL content, a work of the United States Government in the public domain within the United States, with copyright waived worldwide under CC0 1.0."
          },
          "rlinks": [
            {
              "href": "catalogs/nist-sp800-53-rev5/v1.4.0/NIST_SP-800-53_rev5_catalog.json",
              "media-type": "application/oscal+json",
              "hashes": [
                {
                  "algorithm": "sha-256",
                  "value": "1645df6a370dcb931db2e2d5d70c2f77bc89c38499a416c23a70eb2c0e595bcc"
                }
              ]
            },
            {
              "href": "https://raw.githubusercontent.com/usnistgov/oscal-content/v1.4.0/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_catalog.json",
              "media-type": "application/oscal+json",
              "hashes": [
                {
                  "algorithm": "sha-256",
                  "value": "1645df6a370dcb931db2e2d5d70c2f77bc89c38499a416c23a70eb2c0e595bcc"
                }
              ]
            }
          ]
        },
        {
          "uuid": "3e70090b-016d-5650-a4da-84235cd9fd74",
          "title": "Controls addressed by the OSCAL Ops Library in Information Security Manual v2026.09.4",
          "props": [
            {
              "name": "library-item",
              "ns": "https://oscalops.net/ns/library",
              "value": "coverage-profile"
            },
            {
              "name": "catalog-release",
              "ns": "https://oscalops.net/ns/library",
              "value": "6f037e85-d69c-5606-874e-1d986ef561a9"
            },
            {
              "name": "controls-addressed",
              "ns": "https://oscalops.net/ns/library",
              "value": "8"
            }
          ],
          "rlinks": [
            {
              "href": "catalogs/acsc-ism/v2026.09.4/profile.json",
              "media-type": "application/oscal+json",
              "hashes": [
                {
                  "algorithm": "sha-256",
                  "value": "4764562005936012e5afe752cf4ffdc4d48a0e55312e9b0ca084242e8ed600f1"
                }
              ]
            }
          ]
        },
        {
          "uuid": "c5d7410d-2bf4-5e34-be32-001a56aae752",
          "title": "Controls addressed by the OSCAL Ops Library in SP 800-53 Revision 5 v1.4.0",
          "props": [
            {
              "name": "library-item",
              "ns": "https://oscalops.net/ns/library",
              "value": "coverage-profile"
            },
            {
              "name": "catalog-release",
              "ns": "https://oscalops.net/ns/library",
              "value": "abc3329a-ebc9-547f-9ace-29146be7da9c"
            },
            {
              "name": "controls-addressed",
              "ns": "https://oscalops.net/ns/library",
              "value": "1"
            }
          ],
          "rlinks": [
            {
              "href": "catalogs/nist-sp800-53-rev5/v1.4.0/profile.json",
              "media-type": "application/oscal+json",
              "hashes": [
                {
                  "algorithm": "sha-256",
                  "value": "06a03731dfbf85ab098ad03d64520d88aa033ebcbafba310edbdd3568780cc2d"
                }
              ]
            }
          ]
        },
        {
          "uuid": "d96586ff-46d4-5ae2-b1a3-4088f1703fdf",
          "title": "Debian 13 ISM Word-Count Enforcement Component Definition",
          "description": "Enforces the ism-1558 minimum word count for passwords that are a sequence of words: at least 4 words on non-classified, OFFICIAL: Sensitive and PROTECTED…",
          "props": [
            {
              "name": "version",
              "value": "1.0.0"
            },
            {
              "name": "library-item",
              "ns": "https://oscalops.net/ns/library",
              "value": "component-definition-version"
            },
            {
              "name": "artifact-slug",
              "ns": "https://oscalops.net/ns/library",
              "value": "debian-13-pam-wordcount"
            },
            {
              "name": "publication-status",
              "ns": "https://oscalops.net/ns/library",
              "value": "unpublished"
            },
            {
              "name": "assurance-state",
              "ns": "https://oscalops.net/ns/library",
              "value": "technically-tested"
            },
            {
              "name": "cites-catalog-release",
              "ns": "https://oscalops.net/ns/library",
              "value": "6f037e85-d69c-5606-874e-1d986ef561a9"
            },
            {
              "name": "source-kind",
              "ns": "https://oscalops.net/ns/library",
              "value": "local"
            }
          ],
          "rlinks": [
            {
              "href": "component-definitions/debian-13-pam-wordcount/1.0.0/component-definition.json",
              "media-type": "application/oscal+json",
              "hashes": [
                {
                  "algorithm": "sha-256",
                  "value": "ad9b64c03242c5fd9b2f74fe84c66dfaac8408471adcfa487bd002f4523e0515"
                }
              ]
            },
            {
              "href": "component-definitions/debian-13-pam-wordcount/1.0.0/index.html",
              "media-type": "text/html"
            }
          ]
        },
        {
          "uuid": "541b0537-e6cd-5336-9e82-35e85459eebf",
          "title": "Debian 13 Passphrase Hardening Capability Component Definition",
          "props": [
            {
              "name": "version",
              "value": "1.0.0"
            },
            {
              "name": "library-item",
              "ns": "https://oscalops.net/ns/library",
              "value": "component-definition-version"
            },
            {
              "name": "artifact-slug",
              "ns": "https://oscalops.net/ns/library",
              "value": "debian-13-passphrase-hardening"
            },
            {
              "name": "publication-status",
              "ns": "https://oscalops.net/ns/library",
              "value": "unpublished"
            },
            {
              "name": "assurance-state",
              "ns": "https://oscalops.net/ns/library",
              "value": "technically-tested"
            },
            {
              "name": "source-kind",
              "ns": "https://oscalops.net/ns/library",
              "value": "local"
            }
          ],
          "rlinks": [
            {
              "href": "component-definitions/debian-13-passphrase-hardening/1.0.0/component-definition.json",
              "media-type": "application/oscal+json",
              "hashes": [
                {
                  "algorithm": "sha-256",
                  "value": "0b1f239567ca4dc4a12ee82714a6b881391bd07ae043c1103794a3f010d20177"
                }
              ]
            },
            {
              "href": "component-definitions/debian-13-passphrase-hardening/1.0.0/index.html",
              "media-type": "text/html"
            }
          ]
        },
        {
          "uuid": "e233b74e-8c37-54e5-a257-e03e7b65b40f",
          "title": "Debian 13 Password Hashing Component Definition",
          "description": "Passwords on Debian 13 (trixie) are stored as yescrypt hashes: a salted, memory-hard key derivation function. pam_unix hashes password changes made through PAM…",
          "props": [
            {
              "name": "version",
              "value": "1.0.0"
            },
            {
              "name": "library-item",
              "ns": "https://oscalops.net/ns/library",
              "value": "component-definition-version"
            },
            {
              "name": "artifact-slug",
              "ns": "https://oscalops.net/ns/library",
              "value": "debian-13-password-hashing"
            },
            {
              "name": "publication-status",
              "ns": "https://oscalops.net/ns/library",
              "value": "unpublished"
            },
            {
              "name": "assurance-state",
              "ns": "https://oscalops.net/ns/library",
              "value": "technically-tested"
            },
            {
              "name": "cites-catalog-release",
              "ns": "https://oscalops.net/ns/library",
              "value": "abc3329a-ebc9-547f-9ace-29146be7da9c"
            },
            {
              "name": "source-kind",
              "ns": "https://oscalops.net/ns/library",
              "value": "local"
            }
          ],
          "rlinks": [
            {
              "href": "component-definitions/debian-13-password-hashing/1.0.0/component-definition.json",
              "media-type": "application/oscal+json",
              "hashes": [
                {
                  "algorithm": "sha-256",
                  "value": "feb1718077387927fd85f1e85ab2b67b4495d03cabffdd02ff87d3d8daba38f2"
                }
              ]
            },
            {
              "href": "component-definitions/debian-13-password-hashing/1.0.0/index.html",
              "media-type": "text/html"
            }
          ]
        },
        {
          "uuid": "f7d50635-1903-51f9-8ea6-dbbe6dcbf218",
          "title": "Debian 13 pam_pwquality Enforcement Base Component Definition",
          "description": "pam_pwquality installed on Debian 13 (trixie), stacked ahead of pam_unix, and set to reject rather than warn. It imposes no password rule of its own: each rule…",
          "props": [
            {
              "name": "version",
              "value": "1.0.0"
            },
            {
              "name": "library-item",
              "ns": "https://oscalops.net/ns/library",
              "value": "component-definition-version"
            },
            {
              "name": "artifact-slug",
              "ns": "https://oscalops.net/ns/library",
              "value": "debian-13-pwquality-base"
            },
            {
              "name": "publication-status",
              "ns": "https://oscalops.net/ns/library",
              "value": "unpublished"
            },
            {
              "name": "assurance-state",
              "ns": "https://oscalops.net/ns/library",
              "value": "technically-tested"
            },
            {
              "name": "cites-catalog-release",
              "ns": "https://oscalops.net/ns/library",
              "value": "6f037e85-d69c-5606-874e-1d986ef561a9"
            },
            {
              "name": "cites-catalog-release",
              "ns": "https://oscalops.net/ns/library",
              "value": "abc3329a-ebc9-547f-9ace-29146be7da9c"
            },
            {
              "name": "source-kind",
              "ns": "https://oscalops.net/ns/library",
              "value": "local"
            }
          ],
          "rlinks": [
            {
              "href": "component-definitions/debian-13-pwquality-base/1.0.0/component-definition.json",
              "media-type": "application/oscal+json",
              "hashes": [
                {
                  "algorithm": "sha-256",
                  "value": "ae4d53a9c860fc5db447dfba9e519a55d0972d48dfc9d27aeda0e256082692c8"
                }
              ]
            },
            {
              "href": "component-definitions/debian-13-pwquality-base/1.0.0/index.html",
              "media-type": "text/html"
            }
          ]
        },
        {
          "uuid": "9f9b89f2-ee5f-5ef6-b260-d3d5e2cb3177",
          "title": "Debian 13 ISM Dictionary Checking Component Definition",
          "description": "ism-2078 requires that commonly used or compromised passwords are not used. dictcheck evaluates every candidate against the cracklib dictionary from…",
          "props": [
            {
              "name": "version",
              "value": "1.0.0"
            },
            {
              "name": "library-item",
              "ns": "https://oscalops.net/ns/library",
              "value": "component-definition-version"
            },
            {
              "name": "artifact-slug",
              "ns": "https://oscalops.net/ns/library",
              "value": "debian-13-pwquality-dictionary"
            },
            {
              "name": "publication-status",
              "ns": "https://oscalops.net/ns/library",
              "value": "unpublished"
            },
            {
              "name": "assurance-state",
              "ns": "https://oscalops.net/ns/library",
              "value": "technically-tested"
            },
            {
              "name": "cites-catalog-release",
              "ns": "https://oscalops.net/ns/library",
              "value": "6f037e85-d69c-5606-874e-1d986ef561a9"
            },
            {
              "name": "cites-catalog-release",
              "ns": "https://oscalops.net/ns/library",
              "value": "abc3329a-ebc9-547f-9ace-29146be7da9c"
            },
            {
              "name": "source-kind",
              "ns": "https://oscalops.net/ns/library",
              "value": "local"
            }
          ],
          "rlinks": [
            {
              "href": "component-definitions/debian-13-pwquality-dictionary/1.0.0/component-definition.json",
              "media-type": "application/oscal+json",
              "hashes": [
                {
                  "algorithm": "sha-256",
                  "value": "7ed515bac345db836f2694bf636f164abbfcafca96f29d9f4a126188d6d12e1f"
                }
              ]
            },
            {
              "href": "component-definitions/debian-13-pwquality-dictionary/1.0.0/index.html",
              "media-type": "text/html"
            }
          ]
        },
        {
          "uuid": "37344a3e-6bdb-5f3e-8a98-c2c94793cc31",
          "title": "Debian 13 ISM Minimum Passphrase Length Component Definition",
          "description": "The ISM minimum password length for the system's applicability, enforced by pam_pwquality: 15 characters on non-classified, OFFICIAL: Sensitive and PROTECTED…",
          "props": [
            {
              "name": "version",
              "value": "1.0.0"
            },
            {
              "name": "library-item",
              "ns": "https://oscalops.net/ns/library",
              "value": "component-definition-version"
            },
            {
              "name": "artifact-slug",
              "ns": "https://oscalops.net/ns/library",
              "value": "debian-13-pwquality-minlen"
            },
            {
              "name": "publication-status",
              "ns": "https://oscalops.net/ns/library",
              "value": "unpublished"
            },
            {
              "name": "assurance-state",
              "ns": "https://oscalops.net/ns/library",
              "value": "technically-tested"
            },
            {
              "name": "cites-catalog-release",
              "ns": "https://oscalops.net/ns/library",
              "value": "6f037e85-d69c-5606-874e-1d986ef561a9"
            },
            {
              "name": "source-kind",
              "ns": "https://oscalops.net/ns/library",
              "value": "local"
            }
          ],
          "rlinks": [
            {
              "href": "component-definitions/debian-13-pwquality-minlen/1.0.0/component-definition.json",
              "media-type": "application/oscal+json",
              "hashes": [
                {
                  "algorithm": "sha-256",
                  "value": "df3f07cdf225d7c4b2e4d44e4c50c32e2ecc1a62392a8f3415cd16f814630931"
                }
              ]
            },
            {
              "href": "component-definitions/debian-13-pwquality-minlen/1.0.0/index.html",
              "media-type": "text/html"
            }
          ]
        },
        {
          "uuid": "1fa7ae57-db8f-5ec4-a19f-f29bf42144e3",
          "title": "Debian 13 ISM No Complexity Requirement Component Definition",
          "description": "ism-2080 requires that complexity requirements are NOT imposed. Every character-class credit and the class-count floor are set to zero, so no class is required…",
          "props": [
            {
              "name": "version",
              "value": "1.0.0"
            },
            {
              "name": "library-item",
              "ns": "https://oscalops.net/ns/library",
              "value": "component-definition-version"
            },
            {
              "name": "artifact-slug",
              "ns": "https://oscalops.net/ns/library",
              "value": "debian-13-pwquality-no-complexity"
            },
            {
              "name": "publication-status",
              "ns": "https://oscalops.net/ns/library",
              "value": "unpublished"
            },
            {
              "name": "assurance-state",
              "ns": "https://oscalops.net/ns/library",
              "value": "technically-tested"
            },
            {
              "name": "cites-catalog-release",
              "ns": "https://oscalops.net/ns/library",
              "value": "6f037e85-d69c-5606-874e-1d986ef561a9"
            },
            {
              "name": "source-kind",
              "ns": "https://oscalops.net/ns/library",
              "value": "local"
            }
          ],
          "rlinks": [
            {
              "href": "component-definitions/debian-13-pwquality-no-complexity/1.0.0/component-definition.json",
              "media-type": "application/oscal+json",
              "hashes": [
                {
                  "algorithm": "sha-256",
                  "value": "acda4a964dbaf7b738ee83b2407770cd3564c0edfc92966cdf2dddf38bff3da9"
                }
              ]
            },
            {
              "href": "component-definitions/debian-13-pwquality-no-complexity/1.0.0/index.html",
              "media-type": "text/html"
            }
          ]
        },
        {
          "uuid": "fde3df45-e6aa-57fc-9d36-348e54844f5e",
          "title": "Debian 13 ISM Predictable Construction Rules Component Definition",
          "description": "The limbs of ism-1558 that a character-level rule can enforce: monotonic runs (maxsequence), repeated characters (maxrepeat) and account-derived strings…",
          "props": [
            {
              "name": "version",
              "value": "1.0.0"
            },
            {
              "name": "library-item",
              "ns": "https://oscalops.net/ns/library",
              "value": "component-definition-version"
            },
            {
              "name": "artifact-slug",
              "ns": "https://oscalops.net/ns/library",
              "value": "debian-13-pwquality-predictability"
            },
            {
              "name": "publication-status",
              "ns": "https://oscalops.net/ns/library",
              "value": "unpublished"
            },
            {
              "name": "assurance-state",
              "ns": "https://oscalops.net/ns/library",
              "value": "technically-tested"
            },
            {
              "name": "cites-catalog-release",
              "ns": "https://oscalops.net/ns/library",
              "value": "6f037e85-d69c-5606-874e-1d986ef561a9"
            },
            {
              "name": "source-kind",
              "ns": "https://oscalops.net/ns/library",
              "value": "local"
            }
          ],
          "rlinks": [
            {
              "href": "component-definitions/debian-13-pwquality-predictability/1.0.0/component-definition.json",
              "media-type": "application/oscal+json",
              "hashes": [
                {
                  "algorithm": "sha-256",
                  "value": "f63812d41c809ad9764ea189f7e06e27fcc329d8c693131689ed3fc978ff8902"
                }
              ]
            },
            {
              "href": "component-definitions/debian-13-pwquality-predictability/1.0.0/index.html",
              "media-type": "text/html"
            }
          ]
        }
      ]
    }
  }
}