Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Open Security Controls Assessment Language OSCAL

Publications

The following NIST-authored publications are directly related to this project.

Series & Number Title Status Released
CSWP 53 Charting the Course for NIST OSCAL Draft 12/02/2025
Created April 24, 2018, Updated August 12, 2026