12 Essential Requirements for Policy Enforcement and Governance with OSCAL
summary
Twelve concrete governance requirements enumerate what must be collected, parameterized and enforced: 12 requirements spell out catalog curation, profiles, templating, distribution and continuous assessment. The demo shows Rego-generated OSCAL artifacts transforming control catalogs into component models, system security plans and assessment plans, and feeding Gatekeeper/Opa, Kyverno and OCM via OCI bundles for enforcement. A Sledgehammer pipeline outputs OSCAL assessment reports and remediation PRs, proving an end-to-end generate→assess→report workflow.
AI-written summary · about
chapters (6)
- 0:00Start
- 2:35Basic (P)olicy Questions
- 15:05Policy Library
- 18:19Policy Assembly
- 24:06Profiles and Parameters
- 27:34Policy Assessment and Reporting
related talks
22mOSCAL in Action: Real World Examples of Automating Policy & Comp...
37mPath To Production: Sustainable Compliance In Strict Environments
40mAutomating Security and Compliance via a new standard-of-standards
33mAutomating Industry Regulation (SoX, SoC 2) Enforcement...
35mOSCAR - Automate software analysis, compliance and security
40mOPA Introduction & Community Update
39mApplying Policy Throughout The Application Lifecycle with Open Policy Agent
40mCloud Native GRC