OSCAL is a standard for saving data about an organization's security, risk management, and compliance programs in a machine-readable way.

For OSCAL to succeed, information technology executives, security professionals, security baseline authors, security assessors, and software developers must find real-world use cases, discuss what works, and discuss what needs improvement.

If you have expertise or passion in these disciplines, this community needs you to discuss benefits, debate challenges, and prototype tools in the process.