Standardization plays a pivotal role in ensuring the consistency, interoperability, and long-term sustainability of the project’s outcomes. Through active engagement with relevant standardization bodies, collaborative initiatives, and the development of shared frameworks, our efforts aim to align project results with established industry and research standards. This section highlights our contributions to standardization processes, ongoing alignment activities, and the tools and methodologies we promote to support widespread adoption and impact.
To support meaningful and practical standardization, the EMERALD focuses on three core initiatives:
- OSCAL Integration
The adoption of the Open Security Controls Assessment Language (OSCAL) enables a standardized approach to expressing security controls and compliance data. This common language supports automation, enhances interoperability, and ensures compatibility across different assurance and certification schemes. - Common Metric Repository
A shared repository of well-defined security metrics is being developed to support consistent assessment and monitoring across various certification frameworks. This initiative is governed through the European Cluster for Cybersecurity Certification, ensuring that the metrics remain relevant, interoperable, and adaptable across contexts. - ETSI Engagement
The project actively participates in key technical committees within the European Telecommunications Standards Institute (ETSI) to contribute to and align with European cybersecurity standards. This engagement helps incorporate regulatory priorities into the EMERALDS development and ensures long-term compatibility with European policy frameworks.