[Verse 1]
In the OSCAL kingdom, three models reign
Catalog holds the rulebook, each control explained
Like a library's master index, authoritative and true
NIST eight hundred fifty-three lives here too
Control statements, parameters, guidance shine
Objectives and assessments, all defined in line
[Chorus]
Catalog, Profile, Mapping - the trinity of control
Catalog sets the standards, Profile makes them whole
Import and tailor, baseline creation
Mapping bridges frameworks across the nation
Two controls layer, foundation and selection
OSCAL mastery through systematic direction
[Verse 2]
Profile takes the spotlight, picks what matters most
From catalogs it borrows, like a gracious host
FedRAMP High baseline, tailored just right
Modifying statements, parameters burning bright
Layered customization, profiles build on profiles
Creating perfect baselines across compliance miles
[Chorus]
Catalog, Profile, Mapping - the trinity of control
Catalog sets the standards, Profile makes them whole
Import and tailor, baseline creation
Mapping bridges frameworks across the nation
Two controls layer, foundation and selection
OSCAL mastery through systematic direction
[Bridge]
Mapping model emerges, the newest family member
Cross-framework harmony, compliance to remember
Reduces duplication when standards overlap
Automated analysis fills the coverage gap
SOC Two to ISO, frameworks intertwined
Streamlined compliance for the organized mind
[Verse 3]
Catalog families organize controls in groups
Profile resolution creates the final loops
Custom catalogs born from organizational needs
While mapping relationships plant the standard seeds
Foundation to selection, the layered approach
OSCAL architecture beyond reproach
[Chorus]
Catalog, Profile, Mapping - the trinity of control
Catalog sets the standards, Profile makes them whole
Import and tailor, baseline creation
Mapping bridges frameworks across the nation
Two controls layer, foundation and selection
OSCAL mastery through systematic direction
[Outro]
Rules of the game in catalog form
Profile answers which controls transform
Mapping connects the compliance dome
OSCAL layers guide you safely home