Alternatives and similar repositories for risk-measurement

Users that are interested in risk-measurement are comparing it to the libraries listed below

• counteractive / security-controls
  ☆48Updated 2 years ago
• JupiterOne / secops-automation-examples
  Examples on how to maintain security/compliance as code and to automate SecOps using the JupiterOne platform.
  ☆54Updated last year
• dropbox / vsmc
  Vendor Security Model Contract
  ☆98Updated 3 years ago
• magoo / minimalist-risk-management
  A minimalist risk management program!
  ☆143Updated 3 years ago
• oracuk / oisru
  Repository for the Open Information Security Risk Universe
  ☆64Updated 3 years ago
• brian-ruf / OSCAL-GUI
  Joint NIST/FedRAMP tool to interact with OSCAL files via a browser-based GUI
  ☆44Updated 5 years ago
• mllamazares / STRIDE-vs-ASVS
  🖇️ STRIDE vs. ASVS equivalence table
  ☆77Updated last year
• duo-labs / appsec-education
  Presentations, training modules, and other education materials from Duo Security's Application Security team.
  ☆77Updated 4 years ago
• kindlyops / havengrc
  ☁️Haven GRC - easier governance, risk, and compliance 👨‍⚕️👮‍♀️🦸‍♀️🕵️‍♀️👩‍🔬
  ☆103Updated 4 years ago
• keithmccammon / cybersecurity-models
  A collection of models for organizing, prioritizing, and understanding cybersecurity and information risk management concepts.
  ☆24Updated 11 months ago
• kbroughton / azure_cis_scanner
  Security Scanner based on CIS benchmark 1.1 inspired by Scout2
  ☆53Updated 2 years ago
• risk-redux / control_freak
  NIST SP 800-53, Security and Privacy Controls for Federal Information Systems and Organizations
  ☆40Updated last month
• ComplianceAsCode / oscal
  OSCAL SSP content for technologies shipped by Red Hat
  ☆15Updated 2 years ago
• disruptops / IncidentResponseGenerator
  Updated incident response generator for training classes
  ☆44Updated 4 years ago
• twilio-labs / socless
  The SOCless automation framework
  ☆140Updated 7 months ago
• carta / krang
  Knowledge Report Alert & Normalization Generator
  ☆27Updated last year
• gyrospectre / squyre
  Security Alert Decoration
  ☆27Updated 2 months ago
• somethingnew2-0 / SimpleCSPM
  GCP CSPM using Google Sheets
  ☆36Updated 5 months ago
• zmallen / cloudtrail2sightings
  Convert cloudtrail data to MITRE ATT&CK Sightings
  ☆80Updated 3 years ago
• jbudacki / TTX-Template
  Table Top Exercise (TTX) for Computer Security Incident Response (CSIRT) teams. The templatized artifacts provided will hopefully help te…
  ☆41Updated 5 years ago
• ansorren / GDPatrol
  A Lambda-powered Security Orchestration framework for AWS GuardDuty
  ☆53Updated 5 years ago
• kpolley / slackurity
  Slack bot which promotes Defense in Depth/Zero Trust security practices
  ☆24Updated 2 years ago
• Algbra-Labs-OSS / Chronicle
  ☆65Updated last year
• OpenSecuritySummit / project-ASVS-User-Stories
  ☆19Updated 3 years ago
• 3CORESec / Trapdoor
  Serverless honeytoken 🕵🏻‍♂️
  ☆80Updated 2 years ago
• devsecops / raindance
  Project intended to make Attack Maps part of software development by reducing the time it takes to complete them.
  ☆48Updated 8 years ago
• darkarnium / perimeterator
  'Continuous' AWS perimeter monitoring: Periodically scan internet facing AWS resources to detect misconfigured services.
  ☆64Updated 6 years ago
• jdyke / gcp-iam-analyzer
  Compares and analyzes GCP IAM roles.
  ☆77Updated 6 months ago
• secmerc / materialize-threats
  ☆67Updated 2 months ago
• security4startups / blueprint_2019
  Security Blueprint for Startups
  ☆39Updated 5 years ago