What OSCAL is
OSCAL is NIST's Open Security Controls Assessment Language: a standardized, machine-readable way to express catalogs, profiles, system security plans, and assessment results.
Educational resource only. scm.cc is not a FedRAMP Recognized Independent Assessor (3PAO) and is not FedRAMP-authorized; it grants no authorization, certification, or assessment outcome. FedRAMP.gov is the authoritative source. This is not legal advice.
This is scm.cc skills training. Completing a course or receiving an scm.cc training certificate does not make you a FedRAMP Recognized Independent Assessor, is not a FedRAMP credential, and is not government recognition. Official recognition requires A2LA accreditation (REC-IAS-ACC) and FedRAMP Recognition. FedRAMP.gov is the authoritative source. This is not legal advice.
Full lesson
The rest of this lesson is part of the paid course. The preview above is the same text search engines see — we do not cloak. Enroll to read the full body, run labs, and take the exam.
Sources
- NIST OSCAL project (retrieved 2026-10-11)
- NIST SP 800-53 Rev 5 (retrieved 2026-09-27)
Last verified 2026-10-11. FedRAMP.gov is authoritative.