Gov Publish

Push OSCAL artifacts (SSP, SAP, SAR, POA&M) to eMASS, RegScale, or an agency portal.

Compliance & risk

Gov Publish delivers OSCAL artifacts to government GRC systems. You configure subscriptions — eMASS, RegScale, or a CSAM/agency portal — each with its own credentials, then publish artifacts to them. A runs table records each publish with its artifact kind, status, OSCAL hash, and (for portal/email targets) a downloadable bundle.

How to use it

  1. Open Gov Publish from the sidebar and click New subscription.

  2. Choose a target (eMASS, RegScale, or CSAM/agency portal) and enter its system ID, label, and credentials.

  3. Optionally enable auto-publish on finalize so artifacts go out automatically.

  4. Save the subscription, then enable, disable, or delete it as needed.

  5. Watch the publish-runs table for status, and download the bundle zip for portal/email runs.

Tips

  • Credentials are envelope-encrypted and never returned — to rotate, re-enter all fields.
  • CSAM bundles include the SSP PDF, OSCAL JSON per artifact, the POA&M spreadsheet, and a manifest.

Open Gov Publish in the app

Jump straight to the feature, or browse the rest of the guides.