From Legacy Documentation to OSCAL: An MCP-Based Agent Pipeline for Threat-Informed Continuous Compliance in Critical Infrastructure

arXiv:2607.08288 · cs.CR, cs.AI · Submitted 2026-07-09 · Read on arXiv

Lea Roxanne Muth, Marian Margraf

cs.CR, cs.AI

Submitted: 2026-07-09

Comments: Accepted for publication at the 2026 IEEE International Conference on Cyber Security and Resilience (IEEE CSR), Lisbon, Portugal, August 3-5, 2026. 8 pages, 1 figure

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

• Hallucination — 15× in this paper · explained in 3 episodes
• RAG — 8× in this paper · explained in 3 episodes
• Knowledge Graph — 5× in this paper · explained in 7 episodes
• Security Assessment Report — 5× in this paper
• Industrial Control Systems — 4× in this paper
• Accuracy — 3× in this paper · explained in 1 episode
• Core — 3× in this paper · explained in 2 episodes
• Grounding — 3× in this paper · explained in 3 episodes
• Model Context Protocol (MCP) — 3× in this paper · explained in 8 episodes
• Multi-Agent System — 3× in this paper · explained in 6 episodes
• Robustness — 3× in this paper · explained in 5 episodes
• Actor — 2× in this paper · explained in 3 episodes
• Adaptation — 2× in this paper · explained in 1 episode
• Cyber Threat Intelligence — 2× in this paper
• Cybersecurity and Infrastructure Security Agency — 2× in this paper
• Exploit Prediction Scoring System — 2× in this paper
• Stakeholder-Specific Vulnerability Categorization — 2× in this paper
• Verification — 2× in this paper · explained in 2 episodes
• Adam — 1× in this paper · explained in 2 episodes
• Agent Architectures — 1× in this paper · explained in 1 episode
• Agentic AI — 1× in this paper · explained in 1 episode
• Aggregation — 1× in this paper · explained in 1 episode
• Calibration — 1× in this paper · explained in 7 episodes
• Claude Code and the Model Context Protocol — 1× in this paper
• Common Vulnerabilities and Exposures — 1× in this paper
• Consistency — 1× in this paper · explained in 3 episodes
• External Validation — 1× in this paper · explained in 2 episodes
• Provenance — 1× in this paper · explained in 3 episodes
• Reinforcement Learning — 1× in this paper · explained in 4 episodes
• Security Assessment Plan — 1× in this paper
• Semantic Similarity — 1× in this paper · explained in 2 episodes
• Supervisory Control and Data Acquisition — 1× in this paper
• Trace — 1× in this paper · explained in 2 episodes

Sources

• Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions
• Towards an open standard for assessing the severity of robot security vulnerabilities, the Robot Vulnerability Scoring System (RVSS)
• A Survey on Vulnerability Prioritization: Taxonomy, Metrics, and Research Challenges
• Model Context Protocol (MCP) at First Glance: Studying the Security and Maintainability of MCP Servers
• MCP Safety Audit: LLMs with the Model Context Protocol Allow Major Security Exploits
• Agentic AI for Autonomous Defense in Software Supply Chain Security: Beyond Provenance to Vulnerability Mitigation
• Enterprise-Grade Security for the Model Context Protocol (MCP): Frameworks and Mitigation Strategies
• ETDI: Mitigating Tool Squatting and Rug Pull Attacks in Model Context Protocol (MCP) by using OAuth-Enhanced Tool Definitions and Policy-Based Access Control

Related papers

• SoK: AI-Augmented Binary Reversing
• Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
• Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
• Efficient Fuzzy PSI under One-Sided Assumptions
• Sealing the Audit-Runtime Gap for LLM Skills
• Token Composition: A Graph Based on EVM Logs