GovSCH (Governance Schema) is an open‑source project that provides standardized, machine‑readable schemas for authoring and translating cybersecurity and AI governance documents.
It delivers three schemas:
- Executive Orders Schema (eoschema): for U.S. presidential directives
- Framework Schema (frameworkschema): for cybersecurity and risk management frameworks
- Regulations Schema (regschema): for international data protection and privacy regulations
These schemas bridge the gap between high‑level governance language and technical implementation, making policies easier to interpret, automate, and operationalize.
Validate any governance document against a GovSCH schema in minutes.
git clone https://github.com/newamericafoundation/GovSCH.git
cd GovSCHFor Python:
pip install jsonschema pyyamlFor Bash (optional):
npm install -g ajv-cliUsing Python:
python scripts/validate.py executiveorders/eoschema.json examples/eo.sample.jsonUsing Bash:
./scripts/validate.sh executiveorders/eoschema.json examples/eo.sample.jsonSwap in a different schema and sample:
python scripts/validate.py frameworks/frameworkschema.json examples/framework.sample.json
python scripts/validate.py regulations/regschema.json examples/regulation.sample.json- Fork this repository and add new schema fields or examples.
- Submit a pull request with your improvements.
GovSCH/
├── schemas/
│ ├── executiveorders/
│ │ ├── eoschema.json
│ │ ├── eoschema.yaml
│ ├── frameworks/
│ │ ├── frameworkschema.json
│ │ ├── frameworkschema.yaml
│ ├── regulations/
│ │ ├── regschema.json
│ │ ├── regschema.yaml
├── examples/
│ ├── eo.sample.json
│ ├── framework.sample.json
│ ├── regulation.sample.json
├── scripts/
│ ├── validate.py
│ ├── validate.sh
├── docs/
│ ├── documentation.md
│ ├── methodology.md
├── VERSION
└── LICENSE
We welcome community contributions!
- Open an issue to suggest enhancements or report bugs.
- Fork and submit a pull request with changes to schemas, examples, or documentation.
- Share feedback to improve the schema for real‑world use cases.
This project is open‑source and licensed under the MIT License. See the LICENSE file for more details.
Developed by Dr. Ibrahim Waziri Jr. as a New America #STMIC Fellow and explored in depth in his report GovSCH: An Open-Source Schema for Authoring Cybersecurity and AI Governance Documents.
Special thanks to Christina Morillo, Lauren Zabierek, Camille Stewart Gloster, Peter W. Singer, Bridget Chan, Olatunji Osunji, the 2025 #ShareTheMicInCyber cohort, and the New America teams whose guidance, feedback, and sponsorship made this work possible.