Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
NIST Releases the Open Security Controls Assessment Language (OSCAL) 1.0.0
NIST's OSCAL 1.0.0 provides a stable release for wide-scale implementation.
NIST is pleased to announce the release of Open Security Controls Assessment Language (OSCAL) 1.0.0. This is the first, official, major release of OSCAL and provides a stable version for wide-scale implementation. This release marks an important milestone for the OSCAL project and for the earlier adopters and implementers of security automation with OSCAL.
This release incorporates changes based on feedback from the OSCAL community. The NIST OSCAL team is very thankful for all the great ideas and feedback received to date.
For additional information on the OSCAL project, please see:
- The Foundation for Interoperable and Portable Security Automation is Revealed in NIST’s OSCAL Project (NIST Cybersecurity Insights blog)
- FedRAMP Announces NIST’s OSCAL 1.0.0 Release (GSA/FedRAMP blog) and
- the OSCAL website for introductory material, descriptions of all seven OSCAL models, outlines, references, and tutorials.
For questions, please contact us at oscal [at] nist.gov (oscal[at]nist[dot]gov) or in our Gitter chat room. If interested in collaborating with us and with other community members, please join our oscal-dev [at] nist.gov mailing list.
Looking forward, we are excited to work with the OSCAL community to continue enhancing OSCAL through additional minor releases.
The NIST OSCAL Team