OSCAL Website and Release Change Notice

[aj-stein-nist]

Hello OSCAL Community,

The NIST OSCAL Team is striving to improve agility when publishing models, schemas, and documentation. Therefore, we will make internal changes to the OSCAL website (pages.nist.gov/OSCAL) and release of artifacts. The team wishes to give OSCAL community members advance notice of those changes to our website and release of artifacts, scheduled for July 25, 2023. Details about both changes are below.

OSCAL Reference Documentation Relocation

The website address pages.nist.gov/OSCAL and its content will stay the same. Although we will endeavor to maintain as many pre-existing links as possible, certain links will change, specifically those listed below. If you have bookmarked these links for direct access and do not navigate to them through the OSCAL website menus and links, please update your bookmarks accordingly.

Reference Model Documentation Links

Reference model documentation will be relocated and the old URLs will cease to exist once the process is completed. For example, current reference URLs like the ones below will no longer work:

• pages.nist.gov/OSCAL/reference/latest/system-security-plan/json-outline/
• pages.nist.gov/OSCAL/reference/1.0.5/system-security-plan/xml-reference/#/system-security-plan/control-implementation/implemented-requirement/by-component/export

These URLs will change to point to the new location for references, as follows (note the path OSCAL/reference/ becomes OSCAL-Reference/models/):

• pages.nist.gov/OSCAL-Reference/models/v1.0.6/system-security-plan/json-outline/
• pages.nist.gov/OSCAL-Reference/models/v1.0.5/system-security-plan/xml-reference/#/system-security-plan/control-implementation/implemented-requirement/by-component/export

OSCAL Releases and Tooling

OSCAL releases, content converters, JSON schemas, XML schemas generated from the OSCAL models will no longer be automatically committed into our GitHub repository in the json and xml directories within the core OSCAL repository on GitHub. They will be released via GitHub as "release assets" that can be downloaded individually.

Staying Informed

The team will continue to send updates through our existing public communications channels. You can ask questions or provide feedback through those channels or this GitHub discussion thread. We will brief the community in our upcoming Model Engineering Meeting on July 13, 2023, at 10:00 AM for synchronous discussion. Upon completion of these changes, technical details will be recorded in an architectural decision record.

The NIST OSCAL Team thanks you in advance for your support and understanding.

Regards,
NIST OSCAL Team