Open Security Controls Assessment Language (OSCAL)

NIST SP 800-53 content and other OSCAL content examples

FedRAMP Automation

An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.

A library of React components and an example user interface application that provides a direct UI into NIST's Open Security Controls Assessment Language (OSCAL) data in JSON format.

Various deployments of the OSCAL editor

A simple open source command line tool to support common operations over OSCAL content.

An initial OpenAPI definition of an OSCAL REST API.

Open source tool for processing OSCAL based FedRAMP SSPs

Open Security Controls Assessment Language (OSCAL) Deep Differencing Tool

A Java library to support processing OSCAL content

OSCAL Policy Administration Library (OPAL) provides a simple web application for managing System Security Plans. The data modle is based on the OSCAL standard.

A case study for ACSAC 2022 utilizing OSCAL with a custom GitHub action to automate assessments.

Implementation of the OSCAL REST API

NIST OSCAL SDK and CLI

Automatically generated diagrams for OSCAL models

Develop Enhancements, Future Implementations and New Education

A mirror of ISM OSCAL documents. The authoritative source can be found at https://www.cyber.gov.au/ism/oscal.

Sample OSCAL files

Australian ISM in OSCAL format