OSCAL Concepts

This section of the OSCAL website presents:

Key terminology used in OSCAL;
An overview of the OSCAL layers and models, to include who and what processes they apply to;
An oververview of identifier use in OSCAL models;
A Profile Resolution Specification for handling the transformation of OSCAL Profiles into OSCAL Catalogs;
Illustrative examples of how to represent control implementation and risk management data in OSCAL XML, JSON, and YAML formats; and
A discussion of how OSCAL relates to and draws inspiration from other documentary standards.