Compliance · security identity
Open Security Controls Assessment Language (OSCAL)
OSCAL is NIST’s machine-readable format for compliance documentation — control catalogs, control baselines, system security plans, assessment plans and assessment results, expressed in XML, JSON and YAML rather than in prose. It is the most developed attempt anywhere to make compliance evidence exchangeable between systems instead of re-keyed.
Also known as Open Security Controls Assessment Language, NIST OSCAL.
Providers that carry OSCAL 0
No provider in the catalog carries this standard as a tag yet. That is a statement about the catalog's tagging, not about adoption: a provider that implements OSCAL and says so in its APIs.json profile appears here on the next build. Add or correct a listing.
Read from the API Evangelist standards directory. Provider links come from the catalog's own identity tags and are rebuilt nightly. If this page is wrong about a standard or a provider, say so.