[Verse 1]
Seven models in a stack of three
OSCAL's architecture runs so free
Controls layer at the foundation
Building blocks for every nation
Catalog holds the rules we need
Profile picks the ones that lead
Mapping bridges different frames
Connecting all the standard names
[Chorus]
Three layers high, seven models strong
Controls, Implementation, Assessment song
CCP in the first floor
CD and SSP explore
Then APA and POA-M more
OSCAL stack from floor to floor
[Verse 2]
Implementation layer number two
Component Definition shows us through
How products meet the control demand
System Security Plan in hand
Documents the complete design
Every control mapped in line
Real world meeting policy
Security implementation spree
[Chorus]
Three layers high, seven models strong
Controls, Implementation, Assessment song
CCP in the first floor
CD and SSP explore
Then APA and POA-M more
OSCAL stack from floor to floor
[Bridge]
Assessment layer tops them all
Plan and Results standing tall
POA-M tracks the risks we find
Remediation peace of mind
From Catalog to final test
OSCAL keeps your system blessed
[Verse 3]
Assessment Plan defines the scope
Methodology gives us hope
Assessment Results document
Every finding that was sent
Plan of Action tracks the way
Milestones mark each passing day
Seven models working true
OSCAL framework seeing through
[Final Chorus]
Three layers high, seven models strong
Controls, Implementation, Assessment song
Catalog Profile Mapping floor
Component Definition and SSP explore
Assessment Plan and Results more
POA-M completes the OSCAL store
[Outro]
Stack them up from base to peak
OSCAL gives you all you seek
Seven models, three layers wide
Compliance framework by your side