cisagov / development-guideLinks
A set of guidelines and best practices for an awesome engineering team
☆250Updated 3 months ago
Alternatives and similar repositories for development-guide
Users that are interested in development-guide are comparing it to the libraries listed below
Sorting:
- CISA's catalog of bad practices that are exceptionally risky.☆209Updated 3 months ago
- NIST SP 800-53 content and other OSCAL content examples☆372Updated this week
- The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools…☆162Updated last week
- CISA's space for collaboration on the Cybersecurity Performance Goals.☆75Updated 5 months ago
- A site for CISA directives☆165Updated last year
- Documentation on the OpenRMF application, including scripts to run the whole stack as well as just infrastructure with documentation on u…☆144Updated last week
- Search a filesystem for indicators of compromise (IoC).☆80Updated 3 weeks ago
- CISA is hiring! We’re looking for candidates passionate about our mission to lead the national effort to understand and manage cyber and …☆74Updated 9 months ago
- Controls Assessment Specification☆70Updated 4 months ago
- These are files that a new CISO or someone introducing security to an organization can leverage to bridge the gap between security and th…☆72Updated 10 months ago
- NIST CyberSecurity Framework management tool☆166Updated 3 years ago
- FedRAMP Automation☆342Updated 4 months ago
- 🚨ATTENTION🚨 The NIST 800-53 mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept…☆494Updated last year
- OCSF Documentation☆137Updated 2 months ago
- Heimdall Enterprise Server 2 lets you view, store, and compare automated security control scan results.☆235Updated this week
- A collection of awesome security controls mapping for solutions across frameworks.☆56Updated 5 years ago
- 🚨ATTENTION🚨 The Security Stack Mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is k…☆387Updated last year
- SCuBA Secure Configuration Baselines and assessment tool for Google Workspace☆252Updated last week
- External monitoring for organization assets☆411Updated last year
- A web application to streamline the development of STIGs from SRGs☆78Updated last week
- An open source, self-service GRC tool to automate security assessments and compliance.☆193Updated 8 months ago
- An API and client for managing STIG assessments☆164Updated this week
- SANS has developed a set of information security policy templates. These are free to use and fully customizable to your company's IT secu…☆44Updated 3 years ago
- ☆48Updated 2 years ago
- A repository containing OSCAL serializations of the CIS Critical Security Controls☆54Updated 5 months ago
- Cyber Incident Response Team Playbook Battle Cards☆407Updated last year
- Public repo to sync with security-pr☆237Updated last week
- A list of tools, blog posts, and other resources that further the use and adoption of OSCAL standards.☆173Updated 2 months ago
- The Infosec Community Definitive Guide to Jupyter Notebooks☆125Updated 4 years ago
- Joint NIST/FedRAMP tool to interact with OSCAL files via a browser-based GUI☆44Updated 5 years ago