Secure Controls Framework
Download The SCF
FAQ

What is OSCAL and which frameworks support it?

Direct Answer

Open Security Controls Assessment Language (OSCAL). The Secure Controls Framework (SCF) supports OSCAL.

OSCAL is an acronym that stands for Open Security Controls Assessment Language. The US National Institute of Standards and Technology (NIST) developed OSCAL to be a standardized, data-centric and machine-readable structure to automate cybersecurity compliance efforts.

The Secure Controls Framework (SCF) supports OSCAL. When you download the SCF, the download folder contains both an Excel version and JSON versions. The JSON versions of the SCF are designed to support OSCAL.

Keep Exploring

Relevant Resources

References

Authoritative Sources

NIST OSCAL Page - https://pages.nist.gov/OSCAL/