Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Open Security Controls Assessment Language OSCAL

OSCAL Virtual Escape Room

 

Learn OSCAL Through an Immersive Online Escape Room Experience

OSCAL ISACA Future Tech DC Cover Banner


The NIST OSCAL Team is excited to share an immersive online escape room experience designed to help community members learn OSCAL in a hands-on, engaging way.

Rather than traditional presentations or documentation walkthroughs, this escape room invites participants to actively apply OSCAL concepts in realistic scenarios. By solving challenges and progressing through the experience, users will gain a deeper, more practical understanding of how OSCAL supports modern security assessment and authorization workflows.

The escape room was introduced on April 16, 2026, at the ISACA Future Tech DC 2026 Event at the George Mason University (Arlington, VA Campus). Hosted and presented by Dr. Michaela Iorga (NIST) and Selena Xiao (NIST), the OSCAL Escape Room Workshop involved hands-on training that allowed participants to codify regulations, implemented controls, and assessment results using OSCAL. Through guided interactive exercises, attendees learned how OSCAL enables repeatable, automatable, and scalable security assessments, transforming compliance into a continuous, data-driven process.


 

The Challenge: In the virtual escape room, participants have just 30 minutes to unravel corrupted OSCAL data, solve complex challenges, and restore critical artifacts after a devastating cyberattack. As the damage escalates and the workload spirals out of control, every second counts.

Take a shot at the OSCAL Escape Room by visiting: https://pages.nist.gov/OSCALER/

 


Learn more from the slide deck that was presented during OSCAL's workshop session at the ISACA Future Tech DC conference: Presentation

Created April 24, 2018, Updated August 12, 2026