Answers to frequently asked questions.
What is gOCIL.org?
gOCIL.org is a website designed to showcase the capabilities of the gOCIL Player, a software component designed to be embedded into enterprise compliance software solutions.
What is the gOCIL Player?
The gOCIL Player is a software component that is designed to make it easy for ISVs to embed OCIL capabilities into SCAP compliance and GRC software solutions. It is implemented as a stand-alone, zero-configuration WAR file.
Is gOCIL really free?
The OCIL services hosted at gOCIL.org are free, but offered without any service level agreement (SLA) on availability, without data protection, and without extensive security features. The gOCIL Player component is commercially available as a secure hosted service, for purchase by end-user organizations, and for license by ISVs who wish to embed a player in their product. Please contact us for pricing information if you are interested in licensing.
Getting Started FAQs
Where do I find OCIL content?
To our knowledge, there is not much publicly available OCIL content. Please feel free to download the following:
- DISA Access Control STIG (partial conversion by gOCIL.org)
- DISA Firewall STIG (partial conversion by gOCIL.org)
- Mitre Sample Content (modified by gOCIL.org to add instruction and make OCIL 2.0 compliant)
- My Favorite Things Questionnaire (created by gOCIL.org to demonstrate variable chaining)
- USGCB Internet Explorer 7 User Settings Checklist (extracted from USGCB Windows 7 datastream)
- USGCB Windows 7 User Settings Checklist (extracted from USGCB Windows 7 datastream)
- USGCB Windows XP User Settings Checklist (extracted from USGCB Windows XP datastream)
Is my data on gOCIL.org secure?
gOCIL.org is just a free service, intended primarily for researchers and content authors. It’s not intended to host your production survey result data. If you require a secure solution, we hope you’ll contact us about renting a secure hosted gOCIL Player, or licensing a gOCIL Player for on-premise use.
How do I make a variables file?
The simplest way to make an OCIL variables file is to use jOVAL™ XPERT. Given an SCAP 1.2 datastream file and the desired profile ID, XPERT will extract any necessary OCIL XML files and create an external variables XML file containing any values that are exported to the OCIL checks. These files can be uploaded directly into your checklists at gOCIL.org.