Convert your OSCAL documents to Word or PDF and convert your Word documents back to OSCAL XML or JSON.
OSCAL: the Open Security Controls Assessment Language
OSCAL is a set of formats expressed in XML, JSON, and YAML. These formats provide machine-readable representations of control catalogs, control baselines, system security plans, and assessment plans and results.
After the authorization has been granted there are three other documents that are parts of the continuous monitoring process:
- System Assessment Plan:
The OSCAL assessment plan model represents the information contained within an assessment plan, and is typically used by anyone planning to perform an assessment or continuous monitoring activities on an information system to determine the degree to which that system complies with a given control baseline used by the system.
It was designed to use identical syntax to the assessment results model, for overlapping assemblies (Objectives, Assessment Subject, Assets, and Assessment Activities).
Assessment practitioners consume an assessment plan as they execute the assessment to ensure the intended scope, target, and activities are being honored.
Authorizing Officials consume an assessment plan in the adjudication of a system as part of approving an authorization to operate.
Continuous assessment implementers consume an assessment plan when establishing automated continuous assessment mechanisms.
This tool converts all your authorization and continuous monitoring documents SSP, SAP SAR and POAM from Word/PDF to the machine-readable OSCAL format.