CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec and Audit Management and supporting +70 frameworks worldwide with auto-mapping: NIST CSF, ISO 27001, SOC2, CIS, PCI DSS, NIS2, CMMC, PSPF, GDPR, HIPAA, Essential Eight, NYDFS-500, DORA, NIST AI RMF, 800-53, 800-171, CyFun, CJIS, AirCyber, NCSC, ECC, SCF and so much more

Compliance automation framework, focused on SOC2

Security compliance platform - SOC2, CMMC, ASVS, ISO27001, HIPAA, NIST CSF, NIST 800-53, CSC CIS 18, PCI DSS, SSF tracking. https://gapps.darkbanner.com

Open Source Data Protection/Privacy Regulatory Mapping Project

Useful templates and working document for implementing ISO 27001 - ISMS

Secure SDLC process template

Python toolkit for automating system maintenance and generating patch reports along with Foreman/Katello and Red Hat Satellite 6.x

SOC 2 should be easy to get done and it should be inexpensive. Here's everything you wanted to know.

PowerShell script to generate daily audit report, like Logwatch for Windows

The open source compliance platform - Drata & Vanta Alternative

Un repositorio con plantillas y documentacion importante de ISO 27001.

ISO 27001 Toolkit by QZ

Open source cyber-serenity platform that help the security teams designing and managing companies' ISMS, and which allow them to create resilient digital systems with efficient responses against to cyber-threats.

Python toolkit for automating system maintenance and generating CSV/PDF patch reports along with Spacewalk, Red Hat Satellite 5.x or SUSE Manager

Oxomium is a cybersecurity gouvernance and conformity (GRC) tool for CISCO and SECOPS. By linking framework control, audit findings and more, Oxomium helps to reduce administrative work.

Point of Concept: To help to automate the collection of evidence for SOC 2 Audits and etc.

This repository is dedicated to providing resources, information, and tools related to the NIS2 Directive, a European Union regulation aimed at improving the security of network and information systems across the EU.

ARTEMIS,est un outil d'analyse de risques de l'information basé sur un modèle de maturité. L’approche générale de l'outil d'analyse de risques consiste à pouvoir donner rapidement un avis sur la situation de sécurité de l'information sur un périmètre donné. Par rapport à d'autres approches d'analyse de sécurité, ARTEMIS préfère se baser sur une …

The Vanta Control Set maps common compliance standards from their requirements to controls and provides them in an easy to consume machine-readable format.

Chainlink security and orchestration tools for Ubuntu server