diff --git a/src/metaschema/oscal_assessment-common_metaschema.xml b/src/metaschema/oscal_assessment-common_metaschema.xml index b2d2543690..aee7f2341d 100644 --- a/src/metaschema/oscal_assessment-common_metaschema.xml +++ b/src/metaschema/oscal_assessment-common_metaschema.xml @@ -898,10 +898,12 @@ - A difference between the SSP implementation statement, and actual implementation. + **(deprecated)** Use 'documentation-finding' instead. An observation about the status of a the associated control objective. A mitigating factor was identified. - An assessment finding. Used for observations made by tools, penetration testing, and other means. + **(deprecated)** Use 'implementation-finding' instead. + An observation of possible risk from a difference between the documentation for a system and its implementation. + An observation of possible risk from the system's implementation from security scanning tools, penetration testing, and other means. An observation from a past assessment, which was converted to OSCAL at a later date.