Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

    Presentations 2026
Presentation

OSCAL Monthly Workshop Series - Event #46: German BSI Baseline Manual goes OSCAL: Tools and Learnings

August 19, 2026

Presenters

Christoph Puppe - Principal Enterprise Security Architect - NTT Data

Description

OSCAL mostly lives in NIST/FedRAMP territory. This talk takes it elsewhere - BSI IT-Grundschutz and its next-generation Grundschutz++ - and reports what actually happens when you map a large, prose-heavy national baseline into OSCAL and JSON for real Compliance-as-Code. Having co-authored Grundschutz modules and advised the BSI transformation from the start, I offer a view from inside the source standard. A core focus: semantic pruning to fit large catalogs into AI models (the open-source OSCAL Pruner), plus practical tooling - viewers, SSP builders, compliance checkers, conversion pipelines - and the path from annual audit panic to continuous compliance, including where AI helps and where human judgment stays essential.

Downloads

Created August 26, 2026