Open Security Controls Assessment Language OSCAL

Open Security Controls Assessment Language (OSCAL) Educational Workshop 101 Series

The National Institute of Standards and Technology previously hosted a series of monthly educational workshops focused on the Open Security Controls Assessment Language (OSCAL).

NOTE: These workshops are no longer being held and remain available as an archive of education resources for the OSCAL community.

The purpose of these workshops is to improve OSCAL adoption by expanding the OSCAL community of interest (COI) through the onboarding of members who have no previous knowledge of OSCAL.

By helping establish the foundation for security automation, with a particular focus on the continuous authorization to operate (ATO) processes and continuous monitoring, OSCAL provides machine-readable representations of control catalogs, control baselines or profiles, system security plans, assessment plans, assessment results, and plan of actions and milestones, in XML, JSON, and YAML formats.