Baselines
There are several draft efforts to produce appropriate OSCAL catalogs and profiles representing the FedRAMP Rules (FRR) and certification classes.
These include (in no particular order):
- https://github.com/C1Secure-Development/OSCAL_20x
- https://github.com/Palladium-Innovations/fedramp-cr26-oscal
- https://github.com/brian-ruf/frr2oscal
There has been some discussion around this mapping document, but it remains a draft work-in-progress:
https://github.com/brian-ruf/frr2oscal/blob/develop/docs/MAPPING.mdprogress.
This page will continue to evolve as the TFG reaches consensus on the best content.representation.