documents

Federal Risk and Authorization Management Program (FedRAMP) Automation Guides

Based on the Open Security Controls Assessment Language (OSCAL)

This includes the following content:

• Guide to OSCAL-based FedRAMP Content [START HERE]

• Guide to OSCAL-based FedRAMP System Security Plans (SSP)

• Guide to OSCAL-based FedRAMP Security Assessment Plans (SAP)

• Guide to OSCAL-based FedRAMP Security Assessment Reports (SAR)

• Guide to OSCAL-based FedRAMP Plan of Action and Milestones (POA&M)

NOTE: The FedRAMP OSCAL Registry is now a machine-readable file using the DRAFT NIST OSCAL Extensions Model

• xml

• json

• html

• pdf

• FedRAMP OSCAL Vendor Resource Summary