We are excited that you want to contribute to the OSCAL project. We are striving to provide a collaborative environment for professionals to contribute to the project's goals and objectives. A primary focus of this project is to improve security assessment efficiency, accuracy, and consistency on the basis of real-world experience with the technology used in this space. The language we develop must be well-defined, with easy to use formats.
We use GitHub as a collaboration platform for the development of the OSCAL models. Within the OSCAL GitHub repository you will find:
- A set of issues for which we need your help. Feel free to pick from this list, or reach out to us about any other ideas you might have.
- Guidelines on contributing to this project.
- A project board that shows the issues the team is currently working on.
The NIST OSCAL team hosts meetings with the OSCAL community on different topics.
- Lunch with the OSCAL Developers: A bi-weekly meeting hosted by the NIST OSCAL development team to share information about current development efforts, discuss issues, collect feedback on priorities, and to answer development-related questions.
- OSCAL Model Review: A bi-weekly meeting hosted by the NIST OSCAL development team to update adopters on the latest improvements to the OSCAL models, and for community members to provide high-bandwidth feedback on concerns, gaps, and other issues with the OSCAL models.
We encourage you to attend these meetings as a way to keep up-to-date on and contribute to the development of OSCAL.