Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST Releases the Open Security Controls Assessment Language (OSCAL) 1.0.0

NIST's OSCAL 1.0.0 provides a stable release for wide-scale implementation.

NIST is pleased to announce the release of Open Security Controls Assessment Language (OSCAL) 1.0.0. This is the first, officialmajor release of OSCAL and provides a stable version for wide-scale implementation. This release marks an important milestone for the OSCAL project and for the earlier adopters and implementers of security automation with OSCAL.

This release incorporates changes based on feedback from the OSCAL community. The NIST OSCAL team is very thankful for all the great ideas and feedback received to date.

For additional information on the OSCAL project, please see:

For questions, please contact us at oscal [at] (oscal[at]nist[dot]gov) or in our Gitter chat room. If interested in collaborating with us and with other community members, please join our oscal-dev [at] mailing list.

Looking forward, we are excited to work with the OSCAL community to continue enhancing OSCAL through additional minor releases.


Released June 10, 2021