NIST is developing the Open Security Controls Assessment Language (OSCAL), a set of hierarchical,...