---
sourceDocument: Yokohama Governance, Risk, and Compliance
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/yokohama/governance-risk-compliance

 Release :

    - yokohama

ft:locale :

    - en-US

ft:publication_title :

    - Yokohama Governance, Risk, and Compliance

ft:clusterId :

    - grc

bundleId :

    - grc

workflow :

    - Technology


---

# Exporting in OSCAL format

# Exporting in OSCAL format {#ariaid-title1}

* Release version: Yokohama
* 
* Updated January 30, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

CAM supports the Open Security Controls Assessment Language (OSCAL) used by the National Institute of Standards and Technology (NIST) that provides control-related information in standardized
machine-readable formats. CAM supports Catalog, Profile, and SSP models.

## Source tables to fetch data for the models {#oscal-support-cam__section_dqy_wts_xbc}

{#oscal-support-cam__table_xnm_q5s_xbc__entry__2}

| Source table | JSON property |
|-|-|
| Catalog ||
| Control objective | controls |
| Control Objective to Control objective requirement | statements parts |
| Test template to Assessment procedure | assessment objective parts |
| Control Objective | guidance |
| Test Template | Assessment-method (Examine) |
| Test Template | Assessment-method (Interview) |
| Profile ||
| Baseline Control | Include-controls |
| Baseline Control | Exclude-controls |
| SSP ||
| Authorization boundary | components |
| Authorization package | leveraged-authorization |
| Authorization boundary | security-impact-level |
| Control requirement | statements |
| Authorization boundary | by-components |
| Information type | Information-types |
[ ]

{#oscal-support-cam__table_xnm_q5s_xbc}
* **[Export OSCAL SSP](https://servicenow-prod.fluidtopics.net/bgQJelARbtNparU_vk2BDg)**   
  From the Authorization package overview record page in the CAM Workspace, generate ZIP files and export the mapped content details for the record in OSCAL format. To generate OSCAL System Security Plan Model (SSP), the selected authorization package must be in the implemented state or further.
* **[Export OSCAL catalog](https://servicenow-prod.fluidtopics.net/HErvFA18HFozYkUOxKkDbQ)**   
  From the Control objective list view page in the CAM Workspace, export the catalog in the OSCAL JSON format for the selected control objectives. This action enables you to export your control objectives from CAM.