Skip to main content

Walkthrough Tutorials


This page serves as the central hub for all OSCAL tutorials. Learn how to build, extend, and apply OSCAL content across general topics, the control layer, and the implementation layer.

General Topics

Concepts and tutorials that apply to all OSCAL models.

Using the Metadata Section
Learn how to structure and populate the required metadata section in OSCAL content.
Extending OSCAL Models
Use props and links to add custom organizational details.
Testing New Releases
Guidance for testing OSCAL updates and contributing feedback to the community.

Control Layer Topics

Tutorials for working with control catalogs and profiles using the OSCAL control layer.

Creating a Basic Control Catalog
Build a catalog of controls using the OSCAL catalog model.
Creating a Basic Profile
Create and tailor control profiles using the OSCAL profile model.

Implementation Layer Topics

Modeling system components and validation data using implementation layer models.

Creating a Basic Component Definition
Learn to create a component definition document using OSCAL.
Representing Test Validation Information
Capture test validation results (e.g., FIPS 140-2) in a component definition or system security plan.

This page was last updated on July 15, 2025.