OSCAL in Action - Real World Examples of Automating Policy and Compliance

Explore how to automate policy and compliance in cloud native environments through this 22-minute conference talk from CNCF. Learn to bridge the gap between abstract cybersecurity regulations and concrete, enforceable policies using OSCAL (Open Security Controls Assessment Language) and CNCF projects. Discover how the newly released OSCAL Compass Compliance-to-Policy (C2P) v2 works together with Open Policy Agent (OPA) to transform regulatory requirements into actionable policy-as-code artifacts that generate verifiable, audit-ready evidence. Gain practical insights into the tools and practices involved in end-to-end compliance automation, with real-world examples demonstrating how to manage the rapid evolution of cloud native system deployment, security, and governance while maintaining compliance with cybersecurity regulations.