Public-sector controls browser

Experimental schema. This vertical is a proposed extension of the CoSAI Shared Responsibility Framework. It is not part of SRF v1.0 and has not been endorsed by CoSAI, OMB, GSA, FedRAMP, NIST, or any federal agency. Section references to OMB M-25-21 and M-25-22 require verification against the primary PDFs at whitehouse.gov. FedRAMP 20x KSI names are still evolving through the pilot phases; verify at fedramp.gov before using in agency documentation.

Machine-readable (OSCAL). These controls are published as an OSCAL 1.2.2 profile that imports the SRF vertical controls catalog and binds every threshold to a parameter. Raw schema: public-sector-controls.json. Like this page, the OSCAL documents are proposed extensions, not part of the official CoSAI release.