Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Projects Open Security Controls Assessment Language

Open Security Controls Assessment Language OSCAL

OSCAL Adopters' Monthly Workshops Series

The NIST OSCAL team hosts a series of mini workshops for the OSCAL community to learn, share, and connect. Each session explores topics of interest, highlights real-world OSCAL implementations, and gives community members an opportunity to present their work and exchange ideas. Most of the workshops are designed to be accessible to a broad audience and do not require deep technical knowledge of OSCAL. Discussions are interactive, with plenty of opportunities to ask questions and engage with presenters and the OSCAL team.

If you are interested in presenting your OSCAL-related work or proposing a topic for discussion, please see the Call for Proposals section below or email the OSCAL team at [email protected].

Who should attend?

These workshops are for anyone interested in using OSCAL to improve security automation, including: 

  • Government, industry, and academic leaders focused on digital transformation and security automation.
  • Developers and vendors building security and compliance tools with OSCAL support.
  • Organizations creating or using OSCAL content to streamline security documentation and assessment.
  • Standards organizations developing control catalogs and baselines.
  • Teams exploring or implementing continuous Authorization to Operate (cATO).

We encourage developers of control-oriented security tools, organizations that want to use or create OSCAL-based information to automate security assessment, and those planning to move towards continuous Authorization to Operate (cATO) to attend the workshops.

Attend the Next Monthly Workshop

We'd love for you to join us at an upcoming virtual OSCAL workshop!

These engaging sessions are held monthly, typically around the middle of each month. For the latest workshop details and schedules, please scroll down on this page. You can also explore our Events Page for an interactive calendar and download our iCalendar to easily keep track of upcoming and past events.

Join the next OSCAL Workshop event using this Zoom Link: ZoomGov

Meeting ID: 160 984 5104

Passcode: 10782510

Call for Proposals

The OSCAL Monthly Workshop Program Committee is seeking timely, relevant, and thought-provoking technical presentations or demonstrations that showcase practical applications of OSCAL.

Find important information about how to get involved with the workshops below:

Proposed topics may include:

  • OSCAL editorial tools and related workflows
  • OSCAL-based security assessment automation processes
  • Governance, Risk, and Compliance (GRC) tools that support OSCAL formats and integrate with OSCAL-based processes
  • NIST does not endorse any OSCAL tools, products, or services presented during the workshops.
  • Presentations should focus on the technical aspects of OSCAL, including implementation approaches, lessons learned, and interoperability considerations.
  • Proposals primarily intended to promote or market a specific tool or service will not be accepted.

We welcome submissions rom a wide range of organizations and individuals representing diverse perspectives, including:

  • Public and private sector organizations
  • International bodies
  • Assessment and authorization (A&A) communities
  • Certification and authorization (C&A) providers
Before submitting a proposal, please review the workshop calendar and identify your preferred presentation date. Each workshop session is 60 minutes long, including time for questions and discussion. The calendar will be updated as soon as possible after a submission is approved.
Submit your proposal by email to [email protected] using the subject line format: "OSCAL Workshop - [Date: 7777/mm/dd]"

2026 Presentations:

- 11/18/2026 [UPCOMING]:

  • From Agricultural Machine Data to Machine-Readable Assurance: An ADAPT, NIST IR 8536, and OSCAL Proof of Concept (Recording will be available once the workshop concludes)
    • ​​​​P. Isaac Riley, Chair, AgGateway DataBOM Stewardship Metadata Working Committee (WG35); Principal Consultant, Pinnacle Systems Group, LLC

- 09/16/2026:

  • Assessing Critical Infrastructure with OSCAL (video, transcript)
    • John Dziurlaj, Senior Solutions Architect, The Turnout

- 08/19/2026:

- 07/15/2026:

- 06/24/2026:

- 05/20/2026:

- 04/15/2026:

- 03/18/2026: 

- 02/18/2026:

- 02/04/2026:

RECORDINGS OF PREVIOUS WORKSHOPS:

- 08/20/2025:

- 07/16/2025:

- 06/18/2025:

- 05/21/2025:

- 04/16/2025:

- 03/19/2025:

- 02/19/2025:

- 01/15/2025:

- 11/20/2024: 

 

- 11/06/2024 [SPECIAL EDITION]:

- 09/18/2024:

- 07/17/2024:

- 06/20/2024:

- 06/05/2024:

- 05/15/2024: 

- 04/17/2024: 

- 04/03/2024 [SPECIAL EDITION]:

- 03/20/2024: 

- 03/20/2024: 

- 02/15/2024:

- 01/17/2024: 

- 11/15/2023: 

  • Cyber Compliance Management Platform (no recording, presentation)
    • Tom Nash, PwC, UK
    • Siva Mallampati, PwC, UK
    • Salma Bedair, PwC, UK
    • Joshua Kong, PwC, Middle East
    • Shereef Assem, PwC, Middle East

- 10/18/2023: 

- 09/20/2023: 

- 08/23/2023: 

- 07/19/2023: 

- 05/17/2023: 

- 03/15/2023:

- 03/01/2023 - [SPECIAL EDITION]: 

- 02/15/2023:

  • Google's Internal OSCAL Adoption (video, transcript)
    • Vikram Khare, Director – Continuous Assurance and Controls Engineering, Google
    • Valentin Mihai, Technical Lead, Cloud CISO - Continuous Assurance and Controls Engineering, Google

- 02/01/2023 - [SPECIAL EDITION]: 

- 11/30/2022:

- 11/02/2022:

- 10/05/2022:

- 09/07/2022:

- 08/10/2022:

- 07/13/2022:

- 06/15/2022:

- 05/18/2022: 

 

Contacts

OSCAL - NIST
[email protected]

Dr. Michaela Iorga - OSCAL Program Director - NIST
[email protected]

Created April 24, 2018, Updated September 22, 2026