OSCAL

OSCAL, Open Security Controls Assessment Language, is a NIST-led, machine-readable representation of various control models. Find out more about OSCAL here.

The sub-pages describe the interaction between Lula and OSCAL, for detail on the specific OSCAL models see the OSCAL documentation.


Section Index
Assessment Results

An Assessment Result is an OSCAL model to report on the specific assessment …

Component Definition

A Component Definition is an OSCAL model for capturing control information that …

Profile

A Profile is an OSCAL model for capturing a baseline of selected controls from …

System Security Plan

A System Security Plan is an OSCAL-specific model to represent a system as a …