WIP: Starting a single control trace.

[Compton-US]

Committer Notes

See #141

All Submissions:

• Have you followed the guidelines in our Contributing document?
• Have you checked to ensure there aren't other open Pull Requests for the same update/change?
• Have you squashed any non-relevant commits and commit messages? [instructions]
• Do all automated CI/CD checks pass?

Changes to Core Features:

• Have you added an explanation of what your changes do and why you'd like us to include them?
• Have you written new tests for your core changes, as applicable?
• Have you included examples of how to use your new feature(s)?

[aj-stein-nist]

I apologize, you had asked me to look at this long ago and had not followed up. I know it is still WIP, but one minor issue. Nice work so far!

[aj-stein-nist]

Minor thing I caught when leveraging your sample for a quick sanity check. :-)

[aj-stein-nist]

I actually had to double check 800-60 Revision 2 and lazily looked up this PR to see what the structure was and translate it back into XML for another PR. FYI/FYE, the actually recommended (base) for C.3.5.1 is Low-Moderate-Low.

Suggested change

	base: fips-199-low
	base: fips-199-moderate

If you wanted to override and say well the book says is moderate, but my AO, ISSO, organizational leadership, what have you, said it is different, you could do it.

          integrity-impact:
            base: fips-199-moderate
            selected: fips-199-low

[aj-stein-nist]

Given the conversation in #141 (comment) that was discussed a little while back, I am going to close this out for now. We can reopen as we see fit when the work comes back into focus in the next sprint or a subsequent one.