Charting the Course for NIST OSCAL: NIST CSWP 53 is Available for Public Comment

[NIST Cybersecurity and Privacy Program]

View As Web Page NIST Cybersecurity and Privacy Program Charting the Course for NIST OSCAL: NIST CSWP 53 is Available for Public Comment The initial public draft of NIST Cybersecurity White Paper (CSWP) 53, Charting the Course for NIST OSCAL, is available for public comment. This paper introduces the Open Security Controls Assessment Language (OSCAL) — an open-source, machine-readable language that standardizes security documentation for better monitoring and risk management. OSCAL was developed to modernize manual, paper-based cybersecurity compliance through automated, scalable processes and continuous assessments. This draft describes OSCAL’s layered architecture, its growing global adoption, and its future integration with emerging technologies (e.g., digital twins, agentic AI) for autonomous risk reasoning and continuous assurance. The public comment period is open through January 13, 2026. See the publication details for a copy of the draft and instructions for submitting comments. Read More NIST Cybersecurity and Privacy Program Questions and comments can be directed to: os...@nist.gov CSRC Website questions: csrc-i...@nist.gov

Connect with us Received this email from a friend? Subscribe here. Subscriber services: Manage Preferences  |  Unsubscribe  |  Help

---

If you have questions or problems with the subscription service, please contact subscriberhelp.govdelivery.com. Technical questions? Contact inqu...@nist.gov. (301) 975-NIST (6478). This service is provided to you at no charge by National Institute of Standards and Technology (NIST). 100 Bureau Drive, Stop 1070 · Gaithersburg, MD 20899 · 301-975-6478