[Verse 1] They say OSCAL's just for FedRAMP alone A government tool that can't leave home But that's a myth we need to break today OSCAL's designed to work every which way Framework agnostic from the very start Built to represent any control's part Any catalog, baseline, system wide OSCAL's foundations run deep and wide [Chorus] Not just FedRAMP, not just one way OSCAL's built for global display Any framework, any standard's call OSCAL represents them all Framework freedom, that's the key OSCAL's flexibility sets us free [Verse 2] FedRAMP was the early adopter's name The most visible player in OSCAL's game But being first doesn't mean being only NIST designed it broad, never lonely International adoption's on the rise Organizations worldwide opening their eyes To OSCAL's power across the globe Every compliance need it can probe [Chorus] Not just FedRAMP, not just one way OSCAL's built for global display Any framework, any standard's call OSCAL represents them all Framework freedom, that's the key OSCAL's flexibility sets us free [Bridge] From ISO twenty-seven thousand one To any control framework under the sun OSCAL speaks the language they all share Structured data flowing everywhere Custom catalogs, bespoke controls OSCAL adapts to all your goals Don't box it in, don't limit scope OSCAL's the universal hope [Chorus] Not just FedRAMP, not just one way OSCAL's built for global display Any framework, any standard's call OSCAL represents them all Framework freedom, that's the key OSCAL's flexibility sets us free [Outro] So remember when you hear that myth again OSCAL's not locked to government's pen It's framework agnostic, built to grow Universal standards, that's what we know
← 2 "STIGs are only for DoD" | 4 "SCAP scans cover all STIG requirements" →