CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec and Compliance/Audit Management and supporting +70 frameworks worldwide with auto-mapping: NIST CSF, ISO 27001, SOC2, CIS, PCI DSS, NIS2, CMMC, PSPF, GDPR, HIPAA, Essential Eight, NYDFS-500, DORA, NIST AI RMF, 800-53, 800-171, CyFun, CJIS, AirCyber, NCSC, ECC, SCF and so much more

• UpdatedMar 17, 2025
• Python

Compliance automation framework, focused on SOC2

• UpdatedJul 21, 2022
• Go

Security compliance platform - SOC2, CMMC, ASVS, ISO27001, HIPAA, NIST CSF, NIST 800-53, CSC CIS 18, PCI DSS, SSF tracking.https://gapps.darkbanner.com

• UpdatedJan 13, 2025
• HTML

The open source compliance platform - Drata & Vanta Alternative

• UpdatedMar 18, 2025
• TypeScript

Open source solutions for SOC2, GDPR, and ISO27001

• UpdatedMar 17, 2025
• TypeScript

Open Source Data Protection/Privacy Regulatory Mapping Project

• UpdatedJun 11, 2023
• TypeScript

Useful templates and working document for implementing ISO 27001 - ISMS

• UpdatedNov 8, 2024
• Rich Text Format

Secure SDLC process template

• UpdatedMar 12, 2025
• HTML

SOC 2 should be easy to get done and it should be inexpensive. Here's everything you wanted to know.

• UpdatedFeb 27, 2025
• Vue

Python toolkit for automating system maintenance and generating patch reports along with Foreman/Katello and Red Hat Satellite 6.x

• UpdatedApr 24, 2023
• Python

PowerShell script to generate daily audit report, like Logwatch for Windows

• UpdatedApr 1, 2024
• PowerShell

ISO 27001 Toolkit by QZ

• UpdatedDec 12, 2022

Un repositorio con plantillas y documentacion importante de ISO 27001.

• UpdatedJun 9, 2022

Open source cyber-serenity platform that help the security teams designing and managing companies' ISMS, and which allow them to create resilient digital systems with efficient responses against to cyber-threats.

• UpdatedFeb 28, 2025
• Java

Python toolkit for automating system maintenance and generating CSV/PDF patch reports along with Spacewalk, Red Hat Satellite 5.x or SUSE Manager

• UpdatedFeb 23, 2017
• Python

Oxomium is a cybersecurity gouvernance and conformity (GRC) tool for CISCO and SECOPS. By linking framework control, audit findings and more, Oxomium helps to reduce administrative work.

• UpdatedJan 15, 2025
• Python

This repository is dedicated to providing resources, information, and tools related to the NIS2 Directive, a European Union regulation aimed at improving the security of network and information systems across the EU.

• UpdatedOct 4, 2024

Point of Concept: To help to automate the collection of evidence for SOC 2 Audits and etc.

• UpdatedMay 13, 2024
• Shell

The Vanta Control Set maps common compliance standards from their requirements to controls and provides them in an easy to consume machine-readable format.

• UpdatedAug 26, 2021

ARTEMIS,est un outil d'analyse de risques de l'information basé sur un modèle de maturité. L’approche générale de l'outil d'analyse de risques consiste à pouvoir donner rapidement un avis sur la situation de sécurité de l'information sur un périmètre donné. Par rapport à d'autres approches d'analyse de sécurité, ARTEMIS préfère se baser sur une …

• UpdatedJul 27, 2018