OSCAL-COMPASS

The OSCAL COMPASS project is set of tools that enable the creation, validation, and governance of documentation artifacts for compliance needs. It leverages NIST's OSCAL (Open Security Controls Assessment Language) as a standard data format for interchange between tools and people, and provides an opinionated approach to OSCAL SDK and adoption by policy engines.

OSCAL-COMPASS was accepted to CNCF on June 21, 2024 at the Sandbox maturity level.