OSPS Baseline release notes

2026-02-19

New controls

• Level 1
  • OSPS-BR-01.03
• Level 2
  • OSPS-DO-07.01
• Level 3
  • OSPS-BR-01.04

Modified controls

• OSPS-BR-03.02 updated to clarify intent
• OSPS-QA-04.01 updated to clarify intent

Removed controls

• OSPS-BR-01.02

New control mappings

• BSI-TR-03185-2
• Additional UKSSCOP

Other changes

• Control titles are more brief to improve clarity

2025-10-10

New controls

• Level 1
  • OSPS-BR-01.02
  • OSPS-BR-03.02
  • OSPS-BR-07.01
  • OSPS-QA-05.02
• Level 2
  • (none)
• Level 3
  • OSPS-BR-07.02
  • OSPS-DO-03.02

Modified controls

(none)

Removed controls

(none)

New control mappings

• 800-161
• PCIDSS
• PSSCRM
• SAMM
• UKSSCOP

Other changes

• Added definitions for several additional terms in order to improve clarity

---

2025-02-25

Initial release of the Open Source Project Security Baseline.