Foundation launches to encourage adoption of automated NIST framework for security assessments

The newly launched OSCAL Foundation will focus on bringing automation into the security assessment process using standards developed by the National Institute of Standards and Technology.

“The Open Security Controls Assessment Language (OSCAL) is a machine-readable language that simplifies and standardizes information system security assessments through the exchange of information via automation,” the foundation says in a Monday release.

The release says, “Originally developed by the National Institutes of Standards and Technology (NIST) in collaboration with FedRAMP and industry, OSCAL...