OSCAL in Production: From Compliance Documents to Machine-Readable Security Evidence (F10c)
This talk will show what OSCAL-adjacent work looks like in practice: catalogs, profiles, SSP-like data structures, assessment results, and how teams move from documents to interoperable evidence.