Home

The 10x-funded ASAP project was produced in cooperation with FedRAMP, National Institute of Standards and Technology (NIST), Centers for Medicare & Medicaid Services (CMS), and various industry partners.

The project goal was to improve the efficiency of FedRAMP audit reviews and accelerate Open Security Controls Assessment Language (OSCAL) adoption, by producing automated validation rules for the FedRAMP System Security Plan (SSP), Security Assessment Plan (SAP), Security Assessment Results (SARs), and Plan of Action and Milestones (POA&M) document types.

This material summarizes the work performed through the project's four phases, recommendations for future work, and a summary of maintenance requirements.