Cybersecurity Core Ontology

nimble.cyber.core@1.1.0

Shared security vocabulary: controls, assets, threats, vulnerabilities, risks and evidence.

publishedApache-2.0 Verified publisher 3,110 installs

Content is not redistributed by the Marketplace

This package provides mappings, metadata and integration scaffolding only. Obtain the underlying content directly from Nimble under its own licence.

Go to source

Overview

A thin cybersecurity extension of Nimble Core providing Control, ControlFamily, Threat, Vulnerability, Risk, Evidence, Assessment and Finding, so framework packages and threat packages interoperate rather than each defining their own vocabulary.

What's inside

rules

shapes/control-shapes.ttl

ontology

cyber-core.ttl

documentation

README.md

Artifact types

Ontology· Ontologies Validation Rules· Rules & Reasoning

Dependencies

nimble.core>=1.0.0Nimble Core Ontology

Used by

NIST SP 800-53 Rev 5 Control Catalog (OSCAL)NIST SP 800-171 Rev 3 Requirement Set CMMC Level 2 to NIST SP 800-171 Crosswalk ISO/IEC 27001:2022 Annex A Control Structure SOC 2 Trust Services Criteria Structure PCI DSS v4.0.1 Requirement Structure MITRE ATT&CK Enterprise (STIX 2.1)MITRE D3FEND Countermeasure Ontology STIX 2.1 Threat Intelligence Alignment NVD CVE Reference Dataset (sample)CISA Zero Trust Maturity Model 2.0 Water Infrastructure Cybersecurity Pack UAV Cybersecurity Pack

Version history

v1.1.0latestNimble ≥ 1.0.08/29/2026
Current release.
v0.9.0Nimble ≥ 1.0.01/31/2026
Initial public preview.

Manifest

Nimble consumes this machine-readable manifest when resolving and installing the package.

{
  "package": {
    "id": "nimble.cyber.core",
    "name": "Cybersecurity Core Ontology",
    "version": "1.1.0",
    "status": "published"
  },
  "publisher": {
    "name": "Nimble",
    "type": "first-party"
  },
  "domains": [
    "nimble-core",
    "cybersecurity"
  ],
  "solution_areas": [
    "security-architecture",
    "grc",
    "core-semantics"
  ],
  "artifacts": [
    "ontology",
    "validation-rules"
  ],
  "dependencies": [
    {
      "id": "nimble.core",
      "version": ">=1.0.0",
      "optional": false
    }
  ],
  "compatibility": {
    "nimble": {
      "minimum": "1.0.0",
      "maximum": null
    }
  },
  "license": {
    "type": "Apache-2.0",
    "name": "Apache License 2.0",
    "url": "https://www.apache.org/licenses/LICENSE-2.0",
    "redistribution": "bundled",
    "attribution_required": true,
    "attribution": "Cybersecurity Core Ontology, Nimble.",
    "source_authority": "Nimble",
    "source_url": "https://nimblexdt-website.lovable.app"
  },
  "validation": {
    "security": "scanned",
    "validation": "validated"
  },
  "contents": {
    "rules": [
      "shapes/control-shapes.ttl"
    ],
    "ontology": [
      "cyber-core.ttl"
    ],
    "documentation": [
      "README.md"
    ]
  },
  "distribution": {
    "available": false,
    "reason": "bundled"
  }
}