OSCALFrameworkFinalpublication

Open Security Controls Assessment Language (OSCAL)

Defines a standardized, machine-readable format for representing security control catalogs, baselines, system security plans, and assessment results. Enables automation of security assessment and authorization processes.

View on NIST.gov

Publication Number

OSCAL

Series

Framework

Status

Final

Date

2023-06

References(3)

SP 800-53r5SP 800-53 Rev. 5 - Security and Privacy Controls for Information Systems and Organizations SP 800-53Ar5SP 800-53A Rev. 5 - Assessing Security and Privacy Controls in Information Systems and Organizations SP 800-53BSP 800-53B - Control Baselines for Information Systems and Organizations

Implementations(2)

SP 800-53r5SP 800-53 Rev. 5 - Security and Privacy Controls for Information Systems and Organizations SP 800-53Ar5SP 800-53A Rev. 5 - Assessing Security and Privacy Controls in Information Systems and Organizations