Essentials for enterprise IT OSCAL releases
List of current and previous Essentials for enterprise IT (E4EIT) releases in the OSCAL format.
The Australian Signals Directorate (ASD) provides the Essentials for Enterprise IT (E4EIT) in the Open Security Controls Assessment Language (OSCAL), a standardised machine-readable format developed by the United States’ National Institute of Standards and Technology (NIST). OSCAL enables enhanced machine-supported consumption possibilities that can be incorporated into organisations’ governance, risk and compliance (GRC) processes and tooling. For example, improved tooling could include programmatic ingestion of E4EIT OSCAL releases into internal systems for tracking in line with organisations’ GRC processes. NIST publishes several OSCAL learning resources to help organisations understand the concepts behind OSCAL and its use.
ASD welcomes feedback regarding E4EIT OSCAL. If you would like to provide any feedback or insights about your usage, or have enquiries regarding E4EIT OSCAL, please contact us. Feedback pertaining to the broader use of OSCAL (including the OSCAL specification) should be directed to the OSCAL community or NIST’s OSCAL team.
