NIST OSCAL

NIST OSCAL provides machine-readable formats for security control catalogues, system plans and assessment information.

OSCAL uses machine-readable data formats such as XML and JSON for security-control and compliance information.

Use the U.S. standards agency’s project site to find OSCAL models and examples for exchanging control information between compliance tools.