CMS’ ISPG (Information Security and Privacy Group) decided to discontinue funding it’s own CMS customizations based on MITRE’s Security Automation Framework (SAF) for CMS after September 2023.
Existing CMS-tailored Security Validation (InSpec Profile) content will still be available on Github, as well as the other open-source tools provided on the MITRE SAF website:
For more information, please visit CMS SAF Program