All release notes
OSCAL Controls Engine
Platform
Published Dec 8, 2025
Mixed
Deep Fathom now has a purpose-built CMMC Level 2 controls engine using the OSCAL (Open Security Controls Assessment Language) standard.
What this means for you:
Full NIST SP 800-171 r2 control catalog with assessment objectives
Traceable mapping from your evidence to specific control requirements
Assessment-ready reporting that aligns with how C3PAOs evaluate compliance
Foundation for automated SPRS score calculation
OSCAL is the data standard that CMMC assessors, the DoD, and tools like eMASS use. Building on it means your Deep Fathom data is portable and interoperable.