Official NIST Resources
Official resources from NIST for OSCAL implementation and development
NIST OSCAL Repository
Repository
Official NIST repository containing OSCAL schemas, models, and build tools
Official
Schemas
Tools
OSCAL Extensions Tutorial
Tutorial
Learn how to customize OSCAL for specific use cases and extend the framework
Tutorial
Extensions
Customization
OSCAL Documentation
Documentation
Comprehensive documentation for OSCAL concepts, models, and implementation
Documentation
Concepts
Models
OSCAL Build Tools
Tools
Scripts and tools for generating and validating OSCAL documents
Build
Validation
Generation
Community Resources
Community-developed tools and resources for OSCAL implementation
GSA OSCAL Generator
Tool
Web application for generating OSCAL XML SSPs, SAPs, and SARs
Generator
GSA
Web App
FedRAMP OSCAL Resources
Templates
FedRAMP-specific OSCAL templates and guidance for cloud service providers
FedRAMP
Cloud
Templates
OSCAL Community
Community
Community support for OSCAL-enabled applications and frameworks
Community
Support
Frameworks
OSCAL Video Tutorial
Video
Video introduction to OSCAL concepts and implementation
Video
Introduction
Concepts
Templates and Examples
Ready-to-use OSCAL templates and example documents
NIST SP 800-53 Baseline Profiles
Profiles
Pre-configured control baselines for Low, Moderate, and High impact systems
Format: XML/JSON
Sample System Security Plans
SSP
Example SSPs demonstrating OSCAL structure and best practices
Format: XML/JSON
Component Definitions
Components
Reusable component definitions for common system elements
Format: XML/JSON
Assessment Plans & Results
Assessment
Templates for security assessment planning and results documentation
Format: XML/JSON
Getting Started with OSCAL
New to OSCAL? Follow these steps to get started with automated compliance documentation
- Review the OSCAL documentation to understand core concepts
- Explore the NIST OSCAL repository for schemas and examples
- Download relevant control baselines for your system's impact level
- Use this SSP Builder to create your first System Security Plan
- Validate your OSCAL documents using the built-in validation tools
- Export your SSP in OSCAL format for compliance submissions