Compliance Automated Standard Solution (COMPASS), Part 9: Taking OSCAL-Compass to Industry Complexity Level

(Note: A list of links for all articles in this series can be found at the conclusion of this article.)

In parts 2 and part 3 of this blog series, we introduced the open-source Trestle SDK, which implements the NIST Open Security Control Assessment Language (OSCAL) standard framework. We also covered Trestle’s agile authoring capabilities, allowing users to create and edit compliance artifacts as Markdown content and convert them to OSCAL format. Additionally, we explained how the Agile Authoring GitOps workflow automation tool supports the various personas involved throughout the compliance process.