[Verse 1]
Start with catalogs, those treasure chests of controls
Import them wholesale or pick specific goals
By ID numbers, by groups that make sense
Or match with patterns, your filtering lens
Eight hundred controls become your foundation
Ready for custom configuration
[Chorus]
Profile power, import and select
Tailor each control, make it perfect
Parameters, statements, objectives too
Resolution flattens what you construct
OSCAL profiles - they're your construct
[Verse 2]
Parameters need values, constraints that bind
Set the numbers, leave no gaps behind
Add new statements or strip the old away
Alter objectives for your governance way
Assessment actions, define how you'll test
Each modification serves your interest best
[Chorus]
Profile power, import and select
Tailor each control, make it perfect
Parameters, statements, objectives too
Resolution flattens what you construct
OSCAL profiles - they're your construct
[Bridge]
When tailoring's done, resolution begins
Takes your profile and all that it brings
Flattens the layers, imports and mods
Into one catalog, clean against odds
NIST specification shows the precise route
From scattered pieces to absolute
[Verse 3]
Multiple sources can feed one profile
Mix and merge controls, compile your file
Group selections grab families whole
Pattern matching gives granular control
Every operation transforms the base
Creating standards for your workplace
[Chorus]
Profile power, import and select
Tailor each control, make it perfect
Parameters, statements, objectives too
Resolution flattens what you construct
OSCAL profiles - they're your construct
[Outro]
From catalog chaos to ordered design
OSCAL profiles make compliance align
Import, select, tailor, resolve
Your security framework, problems dissolved