From ad9638f69b018b433812e31c4ebdb8bb3b9d39f0 Mon Sep 17 00:00:00 2001 From: selenaxiao-nist Date: Mon, 3 Mar 2025 11:52:00 -0500 Subject: [PATCH 1/3] Move concepts from Resources to Learn --- src/content/learn/_index.md | 3 +++ src/content/{resources => learn}/concepts/_index.md | 0 .../{resources => learn}/concepts/examples.md | 0 .../concepts/identifier-use/_index.md | 0 .../identifier-use/oscal-model-relationships.svg | 0 .../concepts/layer/OSCAL-file.svg | 0 .../{resources => learn}/concepts/layer/_index.md | 0 .../concepts/layer/assessment/_index.md | 0 .../assessment-plan/OSCAL-stack-assessment_plan.svg | 0 .../layer/assessment/assessment-plan/_index.md | 0 .../assessment-plan/assessment-plan-model.svg | 0 .../OSCAL-stack-assessment_results.svg | 0 .../layer/assessment/assessment-results/_index.md | 0 .../assessment-results/assessment-results-model.svg | 0 .../layer/assessment/poam/OSCAL-stack-POAM.svg | 0 .../concepts/layer/assessment/poam/_index.md | 0 .../concepts/layer/assessment/poam/poam-model.svg | 0 .../concepts/layer/control/_index.md | 0 .../concepts/layer/control/catalog/_index.md | 0 .../layer/control/catalog/catalog-model.svg | 0 .../layer/control/catalog/sp800-53rev5-example.md | 0 .../layer/control/profile/OSCAL-stack-profile.svg | 0 .../concepts/layer/control/profile/_index.md | 0 .../layer/control/profile/profile-model.svg | 0 .../concepts/layer/implementation/_index.md | 0 .../component-definition/OSCAL-stack-component.svg | 0 .../implementation/component-definition/_index.md | 0 .../component-definition/component-model.svg | 0 .../layer/implementation/ssp/OSCAL-stack-SSP.svg | 0 .../concepts/layer/implementation/ssp/SSP-model.svg | 0 .../concepts/layer/implementation/ssp/_index.md | 0 .../concepts/layer/oscal-layers.svg | 0 .../{resources => learn}/concepts/layer/overview.md | 0 .../concepts/processing/_index.md | 0 .../concepts/processing/profile-resolution.html | 0 .../concepts/relations-to-other.md | 0 .../concepts/terminology/_index.md | 0 .../profile-catalog-mapping-trivial-example.png | Bin .../{resources => learn}/concepts/uri-use.md | 0 .../concepts/validation/_index.md | 0 .../concepts/validation/oscal-wellformed-valid.svg | 0 src/content/resources/_index.md | 4 ---- 42 files changed, 3 insertions(+), 4 deletions(-) rename src/content/{resources => learn}/concepts/_index.md (100%) rename src/content/{resources => learn}/concepts/examples.md (100%) rename src/content/{resources => learn}/concepts/identifier-use/_index.md (100%) rename src/content/{resources => learn}/concepts/identifier-use/oscal-model-relationships.svg (100%) rename src/content/{resources => learn}/concepts/layer/OSCAL-file.svg (100%) rename src/content/{resources => learn}/concepts/layer/_index.md (100%) rename src/content/{resources => learn}/concepts/layer/assessment/_index.md (100%) rename src/content/{resources => learn}/concepts/layer/assessment/assessment-plan/OSCAL-stack-assessment_plan.svg (100%) rename src/content/{resources => learn}/concepts/layer/assessment/assessment-plan/_index.md (100%) rename src/content/{resources => learn}/concepts/layer/assessment/assessment-plan/assessment-plan-model.svg (100%) rename src/content/{resources => learn}/concepts/layer/assessment/assessment-results/OSCAL-stack-assessment_results.svg (100%) rename src/content/{resources => learn}/concepts/layer/assessment/assessment-results/_index.md (100%) rename src/content/{resources => learn}/concepts/layer/assessment/assessment-results/assessment-results-model.svg (100%) rename src/content/{resources => learn}/concepts/layer/assessment/poam/OSCAL-stack-POAM.svg (100%) rename src/content/{resources => learn}/concepts/layer/assessment/poam/_index.md (100%) rename src/content/{resources => learn}/concepts/layer/assessment/poam/poam-model.svg (100%) rename src/content/{resources => learn}/concepts/layer/control/_index.md (100%) rename src/content/{resources => learn}/concepts/layer/control/catalog/_index.md (100%) rename src/content/{resources => learn}/concepts/layer/control/catalog/catalog-model.svg (100%) rename src/content/{resources => learn}/concepts/layer/control/catalog/sp800-53rev5-example.md (100%) rename src/content/{resources => learn}/concepts/layer/control/profile/OSCAL-stack-profile.svg (100%) rename src/content/{resources => learn}/concepts/layer/control/profile/_index.md (100%) rename src/content/{resources => learn}/concepts/layer/control/profile/profile-model.svg (100%) rename src/content/{resources => learn}/concepts/layer/implementation/_index.md (100%) rename src/content/{resources => learn}/concepts/layer/implementation/component-definition/OSCAL-stack-component.svg (100%) rename src/content/{resources => learn}/concepts/layer/implementation/component-definition/_index.md (100%) rename src/content/{resources => learn}/concepts/layer/implementation/component-definition/component-model.svg (100%) rename src/content/{resources => learn}/concepts/layer/implementation/ssp/OSCAL-stack-SSP.svg (100%) rename src/content/{resources => learn}/concepts/layer/implementation/ssp/SSP-model.svg (100%) rename src/content/{resources => learn}/concepts/layer/implementation/ssp/_index.md (100%) rename src/content/{resources => learn}/concepts/layer/oscal-layers.svg (100%) rename src/content/{resources => learn}/concepts/layer/overview.md (100%) rename src/content/{resources => learn}/concepts/processing/_index.md (100%) rename src/content/{resources => learn}/concepts/processing/profile-resolution.html (100%) rename src/content/{resources => learn}/concepts/relations-to-other.md (100%) rename src/content/{resources => learn}/concepts/terminology/_index.md (100%) rename src/content/{resources => learn}/concepts/terminology/profile-catalog-mapping-trivial-example.png (100%) rename src/content/{resources => learn}/concepts/uri-use.md (100%) rename src/content/{resources => learn}/concepts/validation/_index.md (100%) rename src/content/{resources => learn}/concepts/validation/oscal-wellformed-valid.svg (100%) diff --git a/src/content/learn/_index.md b/src/content/learn/_index.md index d752cb2c..4b70f935 100644 --- a/src/content/learn/_index.md +++ b/src/content/learn/_index.md @@ -10,3 +10,6 @@ suppresstopiclists: true The following Open Security Controls Assessment Language (OSCAL) learning resources are available to help you understand the concepts behind and use of the OSCAL [models](/concepts/layer/). +### Concepts + +The [concepts](./concepts/) section contains detailed information about the organization of OSCAL models, processing specifications, and explanations of important primitives (i.e. identifiers) underlying OSCAL data elements. \ No newline at end of file diff --git a/src/content/resources/concepts/_index.md b/src/content/learn/concepts/_index.md similarity index 100% rename from src/content/resources/concepts/_index.md rename to src/content/learn/concepts/_index.md diff --git a/src/content/resources/concepts/examples.md b/src/content/learn/concepts/examples.md similarity index 100% rename from src/content/resources/concepts/examples.md rename to src/content/learn/concepts/examples.md diff --git a/src/content/resources/concepts/identifier-use/_index.md b/src/content/learn/concepts/identifier-use/_index.md similarity index 100% rename from src/content/resources/concepts/identifier-use/_index.md rename to src/content/learn/concepts/identifier-use/_index.md diff --git a/src/content/resources/concepts/identifier-use/oscal-model-relationships.svg b/src/content/learn/concepts/identifier-use/oscal-model-relationships.svg similarity index 100% rename from src/content/resources/concepts/identifier-use/oscal-model-relationships.svg rename to src/content/learn/concepts/identifier-use/oscal-model-relationships.svg diff --git a/src/content/resources/concepts/layer/OSCAL-file.svg b/src/content/learn/concepts/layer/OSCAL-file.svg similarity index 100% rename from src/content/resources/concepts/layer/OSCAL-file.svg rename to src/content/learn/concepts/layer/OSCAL-file.svg diff --git a/src/content/resources/concepts/layer/_index.md b/src/content/learn/concepts/layer/_index.md similarity index 100% rename from src/content/resources/concepts/layer/_index.md rename to src/content/learn/concepts/layer/_index.md diff --git a/src/content/resources/concepts/layer/assessment/_index.md b/src/content/learn/concepts/layer/assessment/_index.md similarity index 100% rename from src/content/resources/concepts/layer/assessment/_index.md rename to src/content/learn/concepts/layer/assessment/_index.md diff --git a/src/content/resources/concepts/layer/assessment/assessment-plan/OSCAL-stack-assessment_plan.svg b/src/content/learn/concepts/layer/assessment/assessment-plan/OSCAL-stack-assessment_plan.svg similarity index 100% rename from src/content/resources/concepts/layer/assessment/assessment-plan/OSCAL-stack-assessment_plan.svg rename to src/content/learn/concepts/layer/assessment/assessment-plan/OSCAL-stack-assessment_plan.svg diff --git a/src/content/resources/concepts/layer/assessment/assessment-plan/_index.md b/src/content/learn/concepts/layer/assessment/assessment-plan/_index.md similarity index 100% rename from src/content/resources/concepts/layer/assessment/assessment-plan/_index.md rename to src/content/learn/concepts/layer/assessment/assessment-plan/_index.md diff --git a/src/content/resources/concepts/layer/assessment/assessment-plan/assessment-plan-model.svg b/src/content/learn/concepts/layer/assessment/assessment-plan/assessment-plan-model.svg similarity index 100% rename from src/content/resources/concepts/layer/assessment/assessment-plan/assessment-plan-model.svg rename to src/content/learn/concepts/layer/assessment/assessment-plan/assessment-plan-model.svg diff --git a/src/content/resources/concepts/layer/assessment/assessment-results/OSCAL-stack-assessment_results.svg b/src/content/learn/concepts/layer/assessment/assessment-results/OSCAL-stack-assessment_results.svg similarity index 100% rename from src/content/resources/concepts/layer/assessment/assessment-results/OSCAL-stack-assessment_results.svg rename to src/content/learn/concepts/layer/assessment/assessment-results/OSCAL-stack-assessment_results.svg diff --git a/src/content/resources/concepts/layer/assessment/assessment-results/_index.md b/src/content/learn/concepts/layer/assessment/assessment-results/_index.md similarity index 100% rename from src/content/resources/concepts/layer/assessment/assessment-results/_index.md rename to src/content/learn/concepts/layer/assessment/assessment-results/_index.md diff --git a/src/content/resources/concepts/layer/assessment/assessment-results/assessment-results-model.svg b/src/content/learn/concepts/layer/assessment/assessment-results/assessment-results-model.svg similarity index 100% rename from src/content/resources/concepts/layer/assessment/assessment-results/assessment-results-model.svg rename to src/content/learn/concepts/layer/assessment/assessment-results/assessment-results-model.svg diff --git a/src/content/resources/concepts/layer/assessment/poam/OSCAL-stack-POAM.svg b/src/content/learn/concepts/layer/assessment/poam/OSCAL-stack-POAM.svg similarity index 100% rename from src/content/resources/concepts/layer/assessment/poam/OSCAL-stack-POAM.svg rename to src/content/learn/concepts/layer/assessment/poam/OSCAL-stack-POAM.svg diff --git a/src/content/resources/concepts/layer/assessment/poam/_index.md b/src/content/learn/concepts/layer/assessment/poam/_index.md similarity index 100% rename from src/content/resources/concepts/layer/assessment/poam/_index.md rename to src/content/learn/concepts/layer/assessment/poam/_index.md diff --git a/src/content/resources/concepts/layer/assessment/poam/poam-model.svg b/src/content/learn/concepts/layer/assessment/poam/poam-model.svg similarity index 100% rename from src/content/resources/concepts/layer/assessment/poam/poam-model.svg rename to src/content/learn/concepts/layer/assessment/poam/poam-model.svg diff --git a/src/content/resources/concepts/layer/control/_index.md b/src/content/learn/concepts/layer/control/_index.md similarity index 100% rename from src/content/resources/concepts/layer/control/_index.md rename to src/content/learn/concepts/layer/control/_index.md diff --git a/src/content/resources/concepts/layer/control/catalog/_index.md b/src/content/learn/concepts/layer/control/catalog/_index.md similarity index 100% rename from src/content/resources/concepts/layer/control/catalog/_index.md rename to src/content/learn/concepts/layer/control/catalog/_index.md diff --git a/src/content/resources/concepts/layer/control/catalog/catalog-model.svg b/src/content/learn/concepts/layer/control/catalog/catalog-model.svg similarity index 100% rename from src/content/resources/concepts/layer/control/catalog/catalog-model.svg rename to src/content/learn/concepts/layer/control/catalog/catalog-model.svg diff --git a/src/content/resources/concepts/layer/control/catalog/sp800-53rev5-example.md b/src/content/learn/concepts/layer/control/catalog/sp800-53rev5-example.md similarity index 100% rename from src/content/resources/concepts/layer/control/catalog/sp800-53rev5-example.md rename to src/content/learn/concepts/layer/control/catalog/sp800-53rev5-example.md diff --git a/src/content/resources/concepts/layer/control/profile/OSCAL-stack-profile.svg b/src/content/learn/concepts/layer/control/profile/OSCAL-stack-profile.svg similarity index 100% rename from src/content/resources/concepts/layer/control/profile/OSCAL-stack-profile.svg rename to src/content/learn/concepts/layer/control/profile/OSCAL-stack-profile.svg diff --git a/src/content/resources/concepts/layer/control/profile/_index.md b/src/content/learn/concepts/layer/control/profile/_index.md similarity index 100% rename from src/content/resources/concepts/layer/control/profile/_index.md rename to src/content/learn/concepts/layer/control/profile/_index.md diff --git a/src/content/resources/concepts/layer/control/profile/profile-model.svg b/src/content/learn/concepts/layer/control/profile/profile-model.svg similarity index 100% rename from src/content/resources/concepts/layer/control/profile/profile-model.svg rename to src/content/learn/concepts/layer/control/profile/profile-model.svg diff --git a/src/content/resources/concepts/layer/implementation/_index.md b/src/content/learn/concepts/layer/implementation/_index.md similarity index 100% rename from src/content/resources/concepts/layer/implementation/_index.md rename to src/content/learn/concepts/layer/implementation/_index.md diff --git a/src/content/resources/concepts/layer/implementation/component-definition/OSCAL-stack-component.svg b/src/content/learn/concepts/layer/implementation/component-definition/OSCAL-stack-component.svg similarity index 100% rename from src/content/resources/concepts/layer/implementation/component-definition/OSCAL-stack-component.svg rename to src/content/learn/concepts/layer/implementation/component-definition/OSCAL-stack-component.svg diff --git a/src/content/resources/concepts/layer/implementation/component-definition/_index.md b/src/content/learn/concepts/layer/implementation/component-definition/_index.md similarity index 100% rename from src/content/resources/concepts/layer/implementation/component-definition/_index.md rename to src/content/learn/concepts/layer/implementation/component-definition/_index.md diff --git a/src/content/resources/concepts/layer/implementation/component-definition/component-model.svg b/src/content/learn/concepts/layer/implementation/component-definition/component-model.svg similarity index 100% rename from src/content/resources/concepts/layer/implementation/component-definition/component-model.svg rename to src/content/learn/concepts/layer/implementation/component-definition/component-model.svg diff --git a/src/content/resources/concepts/layer/implementation/ssp/OSCAL-stack-SSP.svg b/src/content/learn/concepts/layer/implementation/ssp/OSCAL-stack-SSP.svg similarity index 100% rename from src/content/resources/concepts/layer/implementation/ssp/OSCAL-stack-SSP.svg rename to src/content/learn/concepts/layer/implementation/ssp/OSCAL-stack-SSP.svg diff --git a/src/content/resources/concepts/layer/implementation/ssp/SSP-model.svg b/src/content/learn/concepts/layer/implementation/ssp/SSP-model.svg similarity index 100% rename from src/content/resources/concepts/layer/implementation/ssp/SSP-model.svg rename to src/content/learn/concepts/layer/implementation/ssp/SSP-model.svg diff --git a/src/content/resources/concepts/layer/implementation/ssp/_index.md b/src/content/learn/concepts/layer/implementation/ssp/_index.md similarity index 100% rename from src/content/resources/concepts/layer/implementation/ssp/_index.md rename to src/content/learn/concepts/layer/implementation/ssp/_index.md diff --git a/src/content/resources/concepts/layer/oscal-layers.svg b/src/content/learn/concepts/layer/oscal-layers.svg similarity index 100% rename from src/content/resources/concepts/layer/oscal-layers.svg rename to src/content/learn/concepts/layer/oscal-layers.svg diff --git a/src/content/resources/concepts/layer/overview.md b/src/content/learn/concepts/layer/overview.md similarity index 100% rename from src/content/resources/concepts/layer/overview.md rename to src/content/learn/concepts/layer/overview.md diff --git a/src/content/resources/concepts/processing/_index.md b/src/content/learn/concepts/processing/_index.md similarity index 100% rename from src/content/resources/concepts/processing/_index.md rename to src/content/learn/concepts/processing/_index.md diff --git a/src/content/resources/concepts/processing/profile-resolution.html b/src/content/learn/concepts/processing/profile-resolution.html similarity index 100% rename from src/content/resources/concepts/processing/profile-resolution.html rename to src/content/learn/concepts/processing/profile-resolution.html diff --git a/src/content/resources/concepts/relations-to-other.md b/src/content/learn/concepts/relations-to-other.md similarity index 100% rename from src/content/resources/concepts/relations-to-other.md rename to src/content/learn/concepts/relations-to-other.md diff --git a/src/content/resources/concepts/terminology/_index.md b/src/content/learn/concepts/terminology/_index.md similarity index 100% rename from src/content/resources/concepts/terminology/_index.md rename to src/content/learn/concepts/terminology/_index.md diff --git a/src/content/resources/concepts/terminology/profile-catalog-mapping-trivial-example.png b/src/content/learn/concepts/terminology/profile-catalog-mapping-trivial-example.png similarity index 100% rename from src/content/resources/concepts/terminology/profile-catalog-mapping-trivial-example.png rename to src/content/learn/concepts/terminology/profile-catalog-mapping-trivial-example.png diff --git a/src/content/resources/concepts/uri-use.md b/src/content/learn/concepts/uri-use.md similarity index 100% rename from src/content/resources/concepts/uri-use.md rename to src/content/learn/concepts/uri-use.md diff --git a/src/content/resources/concepts/validation/_index.md b/src/content/learn/concepts/validation/_index.md similarity index 100% rename from src/content/resources/concepts/validation/_index.md rename to src/content/learn/concepts/validation/_index.md diff --git a/src/content/resources/concepts/validation/oscal-wellformed-valid.svg b/src/content/learn/concepts/validation/oscal-wellformed-valid.svg similarity index 100% rename from src/content/resources/concepts/validation/oscal-wellformed-valid.svg rename to src/content/learn/concepts/validation/oscal-wellformed-valid.svg diff --git a/src/content/resources/_index.md b/src/content/resources/_index.md index 5630dc16..88a7adca 100644 --- a/src/content/resources/_index.md +++ b/src/content/resources/_index.md @@ -16,10 +16,6 @@ The OSCAL project maintains a variety of resources to learn and use OSCAL. ## Learn -### Concepts - -The [concepts](./concepts/) section contains detailed information about the organization of OSCAL models, processing specifications, and explanations of important primitives (i.e. identifiers) underlying OSCAL data elements. - ### Reference The [reference](https://pages.nist.gov/OSCAL-Reference) section contains the full details of all OSCAL models for development snapshots and all published releases, with visualizations of models in outline form, reference documentation for individual elements, and indices for the location of all elements across all models. From f9ee54eb4c60c1abd95eae569c95b973a7e4c5d1 Mon Sep 17 00:00:00 2001 From: selenaxiao-nist Date: Tue, 4 Mar 2025 17:42:41 -0500 Subject: [PATCH 2/3] Reorganize and add content to learn pages --- src/content/about/blog/archive.md | 5 +++ src/content/learn/_index.md | 35 ++++++++++++++++++- src/content/learn/concepts/_index.md | 1 + src/content/learn/presentations/_index.md | 14 ++++---- .../presentations/mini-workshop/_index.md | 12 +++---- .../presentations/oscal-workshop-2021-02.md | 2 +- .../presentations/oscal-workshop-2023-04.md | 6 ++-- src/content/learn/tutorials/_index.md | 8 +++-- 8 files changed, 61 insertions(+), 22 deletions(-) diff --git a/src/content/about/blog/archive.md b/src/content/about/blog/archive.md index 1d808984..e0ada14e 100644 --- a/src/content/about/blog/archive.md +++ b/src/content/about/blog/archive.md @@ -31,3 +31,8 @@ For an up-to-date description of all projects and their relationship to one anot Moving forward, the NIST team will author future blog posts as needed. If you have an OSCAL topic you would like to read about or you want to guest-author a blog post, you can email the [NIST OSCAL team](mailto:oscal@nist.gov?subject=NIST%20Blog) your proposal and the team will work with you to approve and publish the blog post. +### July 7, 2021 +[Innovating Security Compliance Through Open Standards](https://www.easydynamics.com/blog/innovating-security-compliance-through-open-standards/) + +### May 19, 2021 +[The Foundation for Interoperable and Portable Security Automation is Revealed in NIST’s OSCAL Project](https://www.nist.gov/blogs/cybersecurity-insights/foundation-interoperable-and-portable-security-automation-revealed) diff --git a/src/content/learn/_index.md b/src/content/learn/_index.md index 4b70f935..bf903aae 100644 --- a/src/content/learn/_index.md +++ b/src/content/learn/_index.md @@ -12,4 +12,37 @@ The following Open Security Controls Assessment Language (OSCAL) learning resour ### Concepts -The [concepts](./concepts/) section contains detailed information about the organization of OSCAL models, processing specifications, and explanations of important primitives (i.e. identifiers) underlying OSCAL data elements. \ No newline at end of file +The [concepts](./concepts/) section contains detailed information about the organization of OSCAL models, processing specifications, and explanations of important primitives (i.e. identifiers) underlying OSCAL data elements. + +### Walkthrough Tutorials + +The [tutorials](./tutorials/) section provides step-by-step walk-throughs explaining how to create OSCAL content of various types, such as: + +- [general topic tutorials](./tutorials/general/) + - [Using the metadata section](./tutorials/general/metadata/): Explains use of the `metadata` section that is required to be provided in all OSCAL content. + - [Extending OSCAL models](./tutorials/general/extension/): Discusses how to use OSCAL properties and links to provided extended data in OSCAL content. + - [Testing new releases](./tutorials/general/releases/): Provides a few pointers for community members looking to test new OSCAL releases. + +- [control layer tutorials](./tutorials/control/) + - [Creating a Basic Control Catalog](./tutorials/control/basic-catalog/): Explains how to create a [catalog](/concepts/terminology/#catalog) of [controls](/concepts/terminology/#control) using the OSCAL [catalog model](/concepts/layer/control/catalog/). + - [Creating a Basic Profile](/learn/tutorials/profile/): Explains how to create and modify a subset of controls from a catalog in OSCAL by using the OSCAL [profile model](/concepts/layer/control/profile/). + +- [implementation layer tutorials](./tutorials/implementation/) + - [Creating a Basic Component Definition](./tutorials/implementation/simple-component-definition/): Teaches how to create a component-definition using the OSCAL [component definition](/concepts/layer/implementation/component-definition/) model. + - [Representing proof of compliance or test validation information](./tutorials/implementation/validation-modeling/): Describes how to represent test validation information (e.g., FIPS-140-2) using a component in an OSCAL [component definition](/concepts/layer/implementation/component-definition/) or [system security plan](/concepts/layer/implementation/ssp/). + +### Events and Presentations + +- Events + - [Monthly Workshops](./presentations/mini-workshop/) - 2022-present + - [4th NIST OSCAL Conference and Workshop](./presentations/oscal-workshop-2023-04) - May 23, 2023 + - [3rd NIST OSCAL Workshop](./presentations/oscal-workshop-2022-03/) - March 1-2, 2022 + - [2nd NIST OSCAL Workshop](./presentations/oscal-workshop-2021-02/) - February 2-3, 2021 + - [1st NIST OSCAL Workshop](./presentations/OSCAL-workshop-20191105.pdf) - November 5, 2019 + +- Presentations + - [OSCAL Deep Diff Introduction](/presentations/OSCAL-deep-diff-LWtD-20220505.pdf) presented during the [Lunch with the OSCAL Developers](/contribute/dev-lunch/) - May 5, 2022 + - [Using Leveraged Authorizations in OSCAL](/presentations/oscal-leveraged-authorizations-v6a.pdf) presented during the [OSCAL Model Review](/contribute/model-review/) - July 24, 2020 + - [OSCAL Assessment Models Overview](/presentations/oscal-ap-ar-poam-v3.pdf) presented during the [Lunch with the OSCAL Developers](/contribute/dev-lunch/) - July 2, 2020 + - [Security Automation Simplified via NIST OSCAL: We're Not in Kansas Anymore](https://www.youtube.com/watch?v=eP8K7piU5UQ) presented at RSA Conference 2018 - April 18, 2018 + - [Automating Security and Compliance via a New Standard of Standards](https://www.youtube.com/watch?v=mo3J0tFxixg) presented at Docker Government Summit 2018 - April 11, 2018 diff --git a/src/content/learn/concepts/_index.md b/src/content/learn/concepts/_index.md index 43c86a16..6c905e2b 100644 --- a/src/content/learn/concepts/_index.md +++ b/src/content/learn/concepts/_index.md @@ -10,6 +10,7 @@ aliases: - /docs/schemas/ - /documentation/ - /concepts/ +weight: 1 --- This section of the OSCAL website presents: diff --git a/src/content/learn/presentations/_index.md b/src/content/learn/presentations/_index.md index 1e73409a..9b087bc3 100644 --- a/src/content/learn/presentations/_index.md +++ b/src/content/learn/presentations/_index.md @@ -1,13 +1,15 @@ --- -title: Instructional Videos, Presentations, and Blogs +title: Events and Presentations date: 2021-04-22 09:52:36 -0400 suppresstopiclists: true +weight: 3 --- The following are presentations on OSCAL-related topics. Some of the older presentations were based on earlier versions of OSCAL, which may be slightly different from the current OSCAL releases. In such cases, the content will still apply conceptually and will give you a good overview of the core OSCAL concepts. -### Workshops -- [4th NIST OSCAL Workshop](oscal-workshop-2023-04) - May 23, 2023 +### Events +- [Monthly Workshops](./mini-workshop/) - 2022-present +- [4th NIST OSCAL Conference and Workshop](oscal-workshop-2023-04) - May 23, 2023 - [3rd NIST OSCAL Workshop](oscal-workshop-2022-03/) - March 1-2, 2022 - [2nd NIST OSCAL Workshop](oscal-workshop-2021-02/) - February 2-3, 2021 - [1st NIST OSCAL Workshop](OSCAL-workshop-20191105.pdf) - November 5, 2019 @@ -17,8 +19,4 @@ The following are presentations on OSCAL-related topics. Some of the older prese - [Using Leveraged Authorizations in OSCAL](/presentations/oscal-leveraged-authorizations-v6a.pdf) presented during the [OSCAL Model Review](/contribute/model-review/) - July 24, 2020 - [OSCAL Assessment Models Overview](/presentations/oscal-ap-ar-poam-v3.pdf) presented during the [Lunch with the OSCAL Developers](/contribute/dev-lunch/) - July 2, 2020 - [Security Automation Simplified via NIST OSCAL: We're Not in Kansas Anymore](https://www.youtube.com/watch?v=eP8K7piU5UQ) presented at RSA Conference 2018 - April 18, 2018 -- [Automating Security and Compliance via a New Standard of Standards](https://www.youtube.com/watch?v=mo3J0tFxixg) presented at Docker Government Summit 2018 - April 11, 2018 - -### Blogs -- [Blog: Innovating Security Compliance Through Open Standards](https://www.easydynamics.com/blog/innovating-security-compliance-through-open-standards/) - July 7, 2021 -- [Blog: The Foundation for Interoperable and Portable Security Automation is Revealed in NIST’s OSCAL Project](https://www.nist.gov/blogs/cybersecurity-insights/foundation-interoperable-and-portable-security-automation-revealed) - May 19, 2021 \ No newline at end of file +- [Automating Security and Compliance via a New Standard of Standards](https://www.youtube.com/watch?v=mo3J0tFxixg) presented at Docker Government Summit 2018 - April 11, 2018 \ No newline at end of file diff --git a/src/content/learn/presentations/mini-workshop/_index.md b/src/content/learn/presentations/mini-workshop/_index.md index 5e540f86..8992c27c 100644 --- a/src/content/learn/presentations/mini-workshop/_index.md +++ b/src/content/learn/presentations/mini-workshop/_index.md @@ -1,7 +1,7 @@ --- -title: OSCAL Mini Workshop Series +title: OSCAL Monthly Workshop Series date: 2022-05-26 13:18:18 -0400 -heading: Open Security Controls Assessment Language (OSCAL) Mini Workshop Series +heading: Open Security Controls Assessment Language (OSCAL) Monthly Workshop Series toc: enabled: true aliases: @@ -9,7 +9,7 @@ aliases: weight: 1 --- -# OSCAL Mini Workshop Series +# OSCAL Monthly Workshop Series The NIST [OSCAL](https://www.nist.gov/OSCAL) team is hosting a new series of mini workshops, that aims to address topics of interest for our community and to open this forum for its members to present their OSCAL-related work. Unless specifically stated, the workshops will not require a deep, technical understanding of OSCAL, and the dialog is informal, allowing the community to interact with the presenters and with the OSCAL team members. @@ -27,7 +27,7 @@ Who should attend: ## Call for Proposals -NIST OSCAL Mini Workshop program committee is seeking timely, topical, and thought-provoking **technical presentations or demonstrations** highlighting OSCAL editorial tools, OSCAL-based security assessment automation processes, and Governance Risk and Compliance (GRC) tools supporting OSCAL formats for integration into such processes. +NIST OSCAL Monthly Workshop program committee is seeking timely, topical, and thought-provoking **technical presentations or demonstrations** highlighting OSCAL editorial tools, OSCAL-based security assessment automation processes, and Governance Risk and Compliance (GRC) tools supporting OSCAL formats for integration into such processes. **NIST does not endorse any of the OSCAL tools or services presented. Presentations or demos promoting such tools or services, as opposed to focusing on the OSCAL-related technical aspects, will not be permitted.** @@ -38,8 +38,8 @@ Please find below the calendar of proposed dates. Before submitting a proposal, Submit your proposal via email to [oscal@nist.gov](mailto:oscal@nist.gov), with the subject line: “OSCAL Workshop - [Date: yyyy/mm/dd]”, where the “Date” is the selected date from the calendar below. Please include in your submission a pre-assessment of the OSCAL knowledge level the audience will need using a 4-levels scale with level one (L1/bronze) being equivalent to novice and level four (L4/platinum) being an OSCAL expert. # --- -## Attend the Next Mini Workshop Event -We'd love for you to be a part of our upcoming virtual OSCAL Mini Workshop! These engaging workshops are held monthly, typically around the middle of the month. **For up-to-date information about the workshops, please visit our [OSCAL CSRC](https://csrc.nist.gov/projects/open-security-controls-assessment-language/oscal-adopters-workshops) page.** +## Attend the Next Monthly Workshop Event +We'd love for you to be a part of our upcoming virtual OSCAL Workshop! These engaging workshops are held monthly, typically around the middle of the month. **For up-to-date information about the workshops, please visit our [OSCAL CSRC](https://csrc.nist.gov/projects/open-security-controls-assessment-language/oscal-adopters-workshops) page.** **Visit our [Events Page](../../../events/)** to explore an interactive web calendar and download our iCalendar for seamless access to both upcoming and past events. diff --git a/src/content/learn/presentations/oscal-workshop-2021-02.md b/src/content/learn/presentations/oscal-workshop-2021-02.md index f3973f93..21b10e0c 100644 --- a/src/content/learn/presentations/oscal-workshop-2021-02.md +++ b/src/content/learn/presentations/oscal-workshop-2021-02.md @@ -4,7 +4,7 @@ date: 2021-04-22 09:52:36 -0400 heading: 2nd Open Security Controls Assessment Language (OSCAL) Workshop toc: enabled: true -weight: 2 +weight: 4 --- {{% usa-tag %}}When{{% /usa-tag %}} February 2, 2021 thru February 3, 2021 diff --git a/src/content/learn/presentations/oscal-workshop-2023-04.md b/src/content/learn/presentations/oscal-workshop-2023-04.md index 343fe767..f931baea 100644 --- a/src/content/learn/presentations/oscal-workshop-2023-04.md +++ b/src/content/learn/presentations/oscal-workshop-2023-04.md @@ -1,10 +1,10 @@ --- -title: 4th OSCAL Workshop +title: 4th OSCAL Conference and Workshop date: 2024-09-3 -heading: 4th Open Security Controls Assessment Language (OSCAL) Workshop +heading: 4th Open Security Controls Assessment Language (OSCAL) Conference and Workshop toc: enabled: true -weight: 4 +weight: 2 --- {{% usa-tag %}}When{{% /usa-tag %}} May 23rd, 2023 diff --git a/src/content/learn/tutorials/_index.md b/src/content/learn/tutorials/_index.md index 7e173986..d128ad0e 100644 --- a/src/content/learn/tutorials/_index.md +++ b/src/content/learn/tutorials/_index.md @@ -2,21 +2,23 @@ title: Walkthrough Tutorials date: 2021-04-22 09:52:36 -0400 suppresstopiclist: true +weight: 2 --- The following tutorials provide step-by-step walk-throughs explaining how to create OSCAL content of various types. -## [General Topics](general/) +### [General Topics](general/) - [Using the metadata section](general/metadata/): Explains use of the `metadata` section that is required to be provided in all OSCAL content. - [Extending OSCAL models](general/extension/): Discusses how to use OSCAL properties and links to provided extended data in OSCAL content. - [Testing new releases](general/releases/): Provides a few pointers for community members looking to test new OSCAL releases. -## [Control Layer Topics](control/) +### [Control Layer Topics](control/) - [Creating a Basic Control Catalog](control/basic-catalog/): Explains how to create a [catalog](/concepts/terminology/#catalog) of [controls](/concepts/terminology/#control) using the OSCAL [catalog model](/concepts/layer/control/catalog/). - [Creating a Basic Profile](/learn/tutorials/profile/): Explains how to create and modify a subset of controls from a catalog in OSCAL by using the OSCAL [profile model](/concepts/layer/control/profile/). -## [Implementation Layer Topics](implementation/) + +### [Implementation Layer Topics](implementation/) - [Creating a Basic Component Definition](implementation/simple-component-definition/): Teaches how to create a component-definition using the OSCAL [component definition](/concepts/layer/implementation/component-definition/) model. - [Representing test validation information](implementation/validation-modeling/): Describes how to represent test validation information (e.g., FIPS-140-2) using a component in an OSCAL [component definition](/concepts/layer/implementation/component-definition/) or [system security plan](/concepts/layer/implementation/ssp/). From 8d0dcbe57a6520445aca5cffd558a8ed7012a835 Mon Sep 17 00:00:00 2001 From: selenaxiao-nist Date: Tue, 4 Mar 2025 17:44:04 -0500 Subject: [PATCH 3/3] Add content to resources page --- src/content/resources/_index.md | 15 +++++++-------- 1 file changed, 7 insertions(+), 8 deletions(-) diff --git a/src/content/resources/_index.md b/src/content/resources/_index.md index 88a7adca..9bbf9c1b 100644 --- a/src/content/resources/_index.md +++ b/src/content/resources/_index.md @@ -14,17 +14,12 @@ sidenav: The OSCAL project maintains a variety of resources to learn and use OSCAL. -## Learn +### OSCAL Reference -### Reference +The [reference](https://pages.nist.gov/OSCAL-Reference) section contains the full details of all OSCAL models for development snapshots and all published releases, with visualizations of models in [outline form](https://pages.nist.gov/OSCAL-Reference/models/#:~:text=.-,Outline%20Pages), [reference documentation](https://pages.nist.gov/OSCAL-Reference/models/#:~:text=.-,Reference%20Pages) for individual elements, and [indices](https://pages.nist.gov/OSCAL-Reference/models/#:~:text=.-,Index%20Pages) for the location of all elements across all models. -The [reference](https://pages.nist.gov/OSCAL-Reference) section contains the full details of all OSCAL models for development snapshots and all published releases, with visualizations of models in outline form, reference documentation for individual elements, and indices for the location of all elements across all models. +For each released model, outline entries are linked to their corresponding references. For example, the [Catalog](https://pages.nist.gov/OSCAL-Reference/models/develop/catalog/) outline for the latest [development snapshot](https://pages.nist.gov/OSCAL-Reference/models/develop/catalog/) is provided in [XML](https://pages.nist.gov/OSCAL-Reference/models/develop/catalog/xml-outline/) and in [JSON/YAML](https://pages.nist.gov/OSCAL-Reference/models/develop/catalog/json-outline/) formats. In each format, the outline entries are linked to their definitions and constraints. -## Use - -### Downloads - -The [downloads](./downloads/) page has links and instructions to download releases and development snapshots of the OSCAL data models. ### Examples @@ -33,3 +28,7 @@ The [examples](./examples/) page has links and information to examples of OSCAL ### Tools The [tools](./tools) page has information about NIST's reference implementations of software and reusable libraries. Additionally, there are links to community-maintained lists of software and information about OSCAL-enabled tools. + +### Downloads + +The [downloads](./downloads/) page has links and instructions to download releases and development snapshots of the OSCAL data models. \ No newline at end of file