I can't tell who is creating/sponsoring this...
Without some institutional sponsors I have a hard time seeing this getting adopted--presumably you need cybersecurity companies to adopt the standard.
Edit: it looks like maybe AWS, based on the contributors!
Edit 2: Here we go: https://github.com/ocsf/governance/blob/main/Maintainers.md
* AWS
* Sumo Logic
* Rapid7
* Splunk
* Trend Micro
* IBM
* Tanium
* IronNet