Curated list of resources for security Governance, Risk Management, Compliance and Audit professionals and enthusiasts (if they exist).
☆1,066Sep 7, 2025Updated 10 months ago
Alternatives and similar repositories for awesome-security-GRC
Users that are interested in awesome-security-GRC are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A minimalist risk management program!☆155Aug 10, 2022Updated 3 years ago
- A hands-on, real-world GRC lab series built for beginners and curious pros alike. No PDFs. No gatekeeping. Just practical labs for unders…☆140Nov 6, 2025Updated 8 months ago
- OWASP Foundation Web Respository☆85Jun 13, 2026Updated last month
- CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It sup…☆4,294Updated this week
- Security compliance platform - SOC2, CMMC, ASVS, ISO27001, HIPAA, NIST CSF, NIST 800-53, CSC CIS 18, PCI DSS, SSF tracking☆687May 20, 2026Updated 2 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- An open source Governance Risk Compliance (GRC) solution for corporates and government☆39Jul 10, 2017Updated 9 years ago
- This GRC Portfolio Hub is my initiative to empower GRC professionals in showcasing their practical AWS GRC engineering implementation ski…☆52Aug 6, 2025Updated 11 months ago
- SANS has developed a set of information security policy templates. These are free to use and fully customizable to your company's IT secu…☆60Oct 22, 2021Updated 4 years ago
- An open source, self-service GRC tool to automate security assessments and compliance.☆219Dec 10, 2024Updated last year
- ☆71Jul 20, 2026Updated last week
- Compliance automation framework, focused on SOC2☆1,564Jul 21, 2022Updated 4 years ago
- ☁️Haven GRC - easier governance, risk, and compliance 👨⚕️👮♀️🦸♀️🕵️♀️👩🔬☆108Jun 14, 2021Updated 5 years ago
- Config files for my GitHub profile.☆531Jul 8, 2026Updated 3 weeks ago
- The GitHub repo for the GRC Engineering For AWS Book. Everything You Need to Become a GRC Engineer in the Cloud GRC engineering bridges t…☆42Jul 25, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- collection of materials and resources I use to teach computer security classes☆12Jun 25, 2021Updated 5 years ago
- Useful templates and working document for implementing ISO 27001 - ISMS☆235Mar 30, 2026Updated 3 months ago
- ☆14Jan 2, 2024Updated 2 years ago
- A set of policies, standards and control procedures with mapping to HIPAA, NIST CSF, PCI DSS, SOC2, FedRAMP, CIS Controls, and more.☆352Feb 19, 2026Updated 5 months ago
- Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap r…☆354Updated this week
- This repository documents my hands on experience and assignments during the Columbia University Cybersecurity Program. It includes home l…☆16Aug 10, 2023Updated 2 years ago
- A platform to automate and orchestrate security rules for governance, risk and compliance, and continuous assurance.☆45Jul 22, 2026Updated last week
- A Claude Code plugin that turns Claude into a senior GRC (Governance, Risk, and Compliance) analyst. 72+ reference files covering 15 fram…☆175Updated this week
- compliance assessment and POA&M management for CMMC/NIST 800-171A☆118Jan 2, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Open-source GRC platform for modern security teams. Manage compliance (SOC 2, ISO 27001, HIPAA), risk registers, vendor assessments, and …☆150Updated this week
- ☆647Mar 11, 2025Updated last year
- This GitHub page shows the CISO Tradecraft Podcast broken down by Topic☆145Jan 2, 2026Updated 6 months ago
- Maturity models help integrate traditionally separate organizational functions, set process improvement goals and priorities, provide gui…☆268Jul 5, 2025Updated last year
- hyperGRC is a lightweight, in-browser tool for managing compliance-as-code repositories in OpenControl format.☆29Jan 19, 2022Updated 4 years ago
- These are files that a new CISO or someone introducing security to an organization can leverage to bridge the gap between security and th…☆77Oct 7, 2025Updated 9 months ago
- GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]☆1,585Jul 28, 2024Updated 2 years ago
- The GRC Companion turns vendor reviews, audit walkthroughs, questionnaires, policy work, control discussions, and terminal output into le…☆30May 12, 2026Updated 2 months ago
- ☆1,087Jul 22, 2026Updated last week
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- NIST CSF Maturity Toolkit☆122Jun 6, 2025Updated last year
- 🚨ATTENTION🚨 The NIST 800-53 mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept…☆499Apr 3, 2024Updated 2 years ago
- Curated list of links, references, books videos, tutorials (Free or Paid), Exploit, CTFs, Hacking Practices etc. which are related to AWS…☆1,578Apr 3, 2026Updated 3 months ago
- GRC (Governance, Risk and Compliance) Software, to manage risks and controls. It is based in best practices and helps organizations to ma…☆31Mar 8, 2023Updated 3 years ago
- Machine readable cybersecurity compliance standards library for Python, starting with FISMA and NIST Risk Management Framework☆64Apr 15, 2020Updated 6 years ago
- Management tool for the information security management system / Outil de gestion du système de management de la sécurité de l'informatio…☆387Updated this week
- A curated knowledge base to build, run and mature a SOC (including CSIRT).☆1,783Updated this week