Compliance automation framework, focused on SOC2

CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec and Audit Management and supporting +70 frameworks worldwide with auto-mapping: NIST CSF, ISO 27001, SOC2, CIS, PCI DSS, NIS2, CMMC, PSPF, GDPR, HIPAA, Essential Eight, NYDFS-500, DORA, NIST AI RMF, 800-53, 800-171, CyFun, CJIS, AirCyber, NCSC, ECC, SCF and so much more

Security compliance platform - SOC2, CMMC, ASVS, ISO27001, HIPAA, NIST CSF, NIST 800-53, CSC CIS 18, PCI DSS, SSF tracking. https://gapps.darkbanner.com

Open Source Data Protection/Privacy Regulatory Mapping Project

Useful templates and working document for implementing ISO 27001 - ISMS

Secure SDLC process template

Python toolkit for automating system maintenance and generating patch reports along with Foreman/Katello and Red Hat Satellite 6.x

SOC 2 should be easy to get done and it should be inexpensive. Here's everything you wanted to know.

PowerShell script to generate daily audit report, like Logwatch for Windows

ISO 27001 Toolkit by QZ

Open source cyber-serenity platform that help the security teams designing and managing companies' ISMS, and which allow them to create resilient digital systems with efficient responses against to cyber-threats.

Un repositorio con plantillas y documentacion importante de ISO 27001.

Python toolkit for automating system maintenance and generating CSV/PDF patch reports along with Spacewalk, Red Hat Satellite 5.x or SUSE Manager

Simple cybersecurity conformity tool for SECOPS and CISCO

Point of Concept: To help to automate the collection of evidence for SOC 2 Audits and etc.

The Vanta Control Set maps common compliance standards from their requirements to controls and provides them in an easy to consume machine-readable format.

ARTEMIS,est un outil d'analyse de risques de l'information basé sur un modèle de maturité. L’approche générale de l'outil d'analyse de risques consiste à pouvoir donner rapidement un avis sur la situation de sécurité de l'information sur un périmètre donné. Par rapport à d'autres approches d'analyse de sécurité, ARTEMIS préfère se baser sur une …

Chainlink security and orchestration tools for Ubuntu server

This repository is dedicated to providing resources, information, and tools related to the NIS2 Directive, a European Union regulation aimed at improving the security of network and information systems across the EU.

Automated security control prioritization using sector-based threat profiles