risk-management

CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec and Compliance/Audit Management and supporting +70 frameworks worldwide with auto-mapping: NIST CSF, ISO 27001, SOC2, CIS, PCI DSS, NIS2, CMMC, PSPF, GDPR, HIPAA, Essential Eight, NYDFS-500, DORA, NIST AI RMF, 800-53, 800-171, CyFun, CJIS, AirCyber, NCSC, ECC, SCF and so much more

security nist cis privacy audit owasp cybersecurity compliance grc hipaa dora isms fedramp gdpr risk-management iso27001 bsi soc2 ebios-rm nis2

UpdatedMar 23, 2025
Python

letianzj /QuantResearch

Star2.5k

Quantitative analysis, strategies and backtests

data-science machine-learning reinforcement-learning deep-learning algotrading trading-strategies trading-algorithms quantitative-finance financial-analysis algorithmic-trading backtesting-trading-strategies asset-allocation quantitative-trading pairs-trading risk-management asset-management statistical-arbitrage portfolio-management derivatives-pricing backtests

UpdatedAug 26, 2023
Jupyter Notebook

domokane /FinancePy

Star2.3k

A Python Finance Library that focuses on the pricing and risk-management of Financial Derivatives, including fixed-income, equity, FX and credit derivatives.

python students finance risk currency pricing valuation derivatives investment numba bonds asset-allocation credit fixed-income risk-management derivatives-pricing

UpdatedOct 7, 2024
Jupyter Notebook

ballerine-io /ballerine

Star2.2k

Open-source infrastructure and data orchestration platform for risk decisioning

flow ocr sdk dashboard rule-engine svelte orchestration back-office onboarding identity-verification compliance case-management kyc risk-management fraud idv know-your-customer id-card-camera kyb liveliness

UpdatedMar 23, 2025
TypeScript

cyb3rxp /awesome-soc

Star1.4k

A collection of sources of documentation, as well as field best practices, to build/run a SOC

architecture detection management incident-response soa cert csirt siem tip soc risk-management ttp soar sirp mitre-attack purpleteam

UpdatedFeb 17, 2025

tern-tools /tern

Star978

Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dockerfiles. The SBOM that Tern generates will give you a layer-by-layer view of what's inside your container in a variety of formats including human-readable, JSON, HTML, SPDX and more.

python docker open-source tool containers compliance dependencies spdx metadata-extraction risk-management software-composition-analysis oss-compliance sbom supply-chain-security

UpdatedMar 12, 2024
Python

risk-first /website

Star718

Risk-First Software Development

practice metrics risk scrum software-engineering software-development risk-management extreme-programming lean-software-management risk-modelling methodologies menagerie

UpdatedMar 13, 2025
JavaScript

Arudjreis /awesome-security-GRC

Star688

Curated list of resources for security Governance, Risk Management, Compliance and Audit professionals and enthusiasts (if they exist).

security audit compliance grc governance risk-management

UpdatedMar 5, 2025

Threagile /threagile

Star653

Agile Threat Modeling Toolkit

security agile risk-analysis architecture infosec cicd threat-modeling risk-management devsecops threagile

UpdatedMar 13, 2025
Go

skyhackvip /risk_engine

Star623

天网决策引擎系统

rule-engine risk rule anti-fraud risk-management decision-engine risk-engine rule-engines rule-engine-api

UpdatedFeb 22, 2024
Go

codez0mb1e /resistance

Star611

Pre-crisis Risk Management for Personal Finance

finance risk-analysis blockchain resistance censorship-circumvention vpn awesome-list risk-management stablecoin

UpdatedAug 13, 2023
Jupyter Notebook

center-for-threat-informed-defense /attack-control-framework-mappings

Star490

🚨ATTENTION🚨 The NIST 800-53 mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as an archive.

cybersecurity cti risk-management nist800-53 ctid mitre-attack cyber-threat-intelligence security-controls threat-informed-defense