1 The Three-Layer Architecture

OSCAL and Compliance Automation · 3:58

Listen on 93

Lyrics

[Verse 1]
Three layers standing in a row
Each one built on what's below
Controls define what we must do
Implementation follows through
Assessment checks if we stay true
OSCAL's chain we're walking through

[Chorus]
Controls to Implementation to Assessment
Left to right the data flows
Assessment back to Implementation to Controls
Right to left the traceability goes
Three layers strong, three layers deep
OSCAL's promise we will keep

[Verse 2]
Controls Layer sets the stage
Security rules upon the page
What must be done and how it's planned
Requirements that we understand
The foundation stone so grand
Where every compliance story's penned

[Chorus]
Controls to Implementation to Assessment
Left to right the data flows
Assessment back to Implementation to Controls
Right to left the traceability goes
Three layers strong, three layers deep
OSCAL's promise we will keep

[Verse 3]
Implementation takes the lead
Turns control words into deed
How systems meet each requirement
Making security adherent
Component by component
The bridge from plan to fulfillment

[Chorus]
Controls to Implementation to Assessment
Left to right the data flows
Assessment back to Implementation to Controls
Right to left the traceability goes
Three layers strong, three layers deep
OSCAL's promise we will keep

[Verse 4]
Assessment Layer checks the work
No detail can it shirk
Testing, measuring, reporting back
Finding every compliance crack
Results that keep us on the track
The proof that nothing do we lack

[Bridge]
Information flows forward like a stream
Traceability flows backward like a dream
Each layer linked to what came before
Opening up the compliance door
Three becomes one unified theme
OSCAL's architectural scheme

[Chorus]
Controls to Implementation to Assessment
Left to right the data flows
Assessment back to Implementation to Controls
Right to left the traceability goes
Three layers strong, three layers deep
OSCAL's promise we will keep

[Outro]
Three layers building trust each day
OSCAL shows us the way
From controls through to assessment's end
On these three layers we depend

1 Supported Formats →