U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Projects Open Security Controls Assessment Language

Open Security Controls Assessment Language OSCAL

News and Updates

New Online Tool to Improve Stakeholder Engagement with SP 800-53
September 28, 2021
A new SP 800-53 controls Public Comment Site is now available for interacting with, downloading, and submitting security and privacy controls, baselines, and assessments.
Draft SP 800-53A Rev. 5: Assessing Security and Privacy Controls
August 3, 2021
Draft NIST Special Publication 800-53A Revision 5, "Assessing Security and Privacy Controls in Information Systems and Organizations," is available for comment through October 1, 2021.
NIST Releases OSCAL 1.0.0
June 10, 2021
NIST's OSCAL 1.0.0 provides a stable release for wide-scale implementation.
Control Baselines: NIST Publishes SP 800-53B
October 29, 2020
NIST Special Publication (SP) 800-53B, "Control Baselines for Information Systems and Organizations," has been published.
SP 800-53 Revision 5 Published
September 23, 2020
NIST Special Publication (SP) 800-53 Revision 5, "Security and Privacy Controls for Information Systems and Organizations," represents a multi-year effort to develop the next generation of controls needed to strengthen and...

Contacts

Michaela Iorga
michaela.iorga@nist.gov

Created April 24, 2018, Updated March 29, 2023