OSCAL Compass - Security Policy The OSCAL Compass project has a common security policy defined in the community repository.