DevSecComp(liance)Ops with OSCAL

NIST’s held their 3rd Open Security Controls Assessment Language (OSCAL) Workshop earlier this month, and it was abundantly clear from the content and participation that the OSCAL standard and community has gained momentum and has a real opportunity to revolutionize the entire security and privacy compliance assessment and authorization space.

Easy Dynamics has been supporting OSCAL for some time and we were fortunate enough to be able present at the conference where we focused on promoting the developer’s perspective of OSCAL. Our vision is that a DevSecComp(liance)Ops culture and mentality is needed for a shift-left of compliance documentation and consideration for the assessment process earlier in the development lifecycle, involving engineers and developers, enabled through OSCAL and related tools.

In addition to our current OSCAL open source projects, we also announced the addition of two more projects to our offerings:

The OSCAL Editor in particular enables team members to contribute incremental updates to artifacts like SSPs using familiar development tools and lifecycles.

Watch our presentation below to learn more!

Author

  • Ray Gauss

    As a technologist keen on Agile, cloud-native development leveraging standards and embracing open-source, Ray Gauss looks to cultivate opportunities for accelerators and product development at Easy Dynamics. Ray spends the rest of his time enjoying life with his family, cooking, and performing music.

    View all posts

1 thought on “DevSecComp(liance)Ops with OSCAL”

  1. Pingback: Innovating Security Compliance Through Open Standards – Easy Dynamics Blogs

Leave a Comment