Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Presentation

OSCAL Monthly Workshop Series - Event #35: Automated OSCAL-based evidence gathering with The Continuous Compliance Framework

May 21, 2025

Chris Vermeulen - Principal Engineer - Container Solutions

Ian Miell - Partner - Container Solutions

In this presentation, Chris Vermeulen of Container Solutions, shows how the open-source Continuous Compliance Framework utilizes small agents deployed across the enterprise to gather security and control implementation, mapping back to an OSCAL API and UI to seamlessly integrate automated evidence and human risk management. Chris will speak about how subjects and components are mapped to OSCAL, avoiding the need for copying intricate UUIDs across the business.

Automated OSCAL-based evidence gathering with The Continuous Compliance Framework (PDF)

Parent Project

See: Open Security Controls Assessment Language

OSCAL Monthly Workshop Series - Event #35: Automated OSCAL-based evidence gathering with The Continuous Compliance Framework

Presenters

Description

Downloads

Parent Project

Related Topics