News
Published! Multi-Cloud Architecture Challenges
August 25, 2026 We are excited to announce the DRAFT publication of NIST IR 8613, Multi-Cloud Architecture Challenges, which is out for public review and comment! Brian Ruf serves as a co-chair for the Multi-Cloud Security Public Working Group (MCSPWG), where he...
The Python OSCAL Library
August 15, 2026 Ruf Risk is excited to announce Version 3.1.0 of the Python OSCAL Library! Now with advanced import handling and profile processing!Brian first conceived of this library in 2020, and has been actively developing it over the past few years. Earlier...
First OSCAL-Based PCI Report
January 13, 2026 It was an honor to provide OSCAL advising and implementation support for AWS as they became the first organization to publish a compliance report in OSCAL format. The AWS Fall Payment Card Industry (PCI) Data Security Standard (DSS) Attestation of...
FedRAMP 20x: Stay the Course! Prepare to Move Faster!
March 26, 2025 I like sailboats. They are a time-honored method for crossing a large body of water. Tried and true! Elegant! I also like motorboats. While their engine adds complexity, they are more maneuverable and allow you to travel faster. Sometimes you need speed...
Supporting the OSCAL Foundation
Ruf Risk is proud to be an inaugural member of the Open Security Controls Assessment Language (OSCAL) Foundation! This critical global partnership between government, industry and academia was launched to advance the development and adoption of standards to automate...