riski-io / grc
An open source Governance Risk Compliance (GRC) solution for corporates and government
☆27Updated 7 years ago
Alternatives and similar repositories for grc:
Users that are interested in grc are comparing it to the libraries listed below
- hyperGRC is a lightweight, in-browser tool for managing compliance-as-code repositories in OpenControl format.☆24Updated 3 years ago
- ☆44Updated last year
- Joint NIST/FedRAMP tool to interact with OSCAL files via a browser-based GUI☆43Updated 5 years ago
- ☆19Updated 7 months ago
- Tools for security content automation, baseline tailoring, and overlay development.☆43Updated 5 months ago
- NIST SP 800-53, Security and Privacy Controls for Federal Information Systems and Organizations☆37Updated last month
- ☆16Updated 3 years ago
- Machine readable cybersecurity compliance standards library for Python, starting with FISMA and NIST Risk Management Framework☆59Updated 4 years ago
- Dockerized Eramba, Open Source Governance, Risk & Compliance (GRC) system https://hub.docker.com/r/digitorus/er…☆29Updated 5 years ago
- OSCAL SSP content for technologies shipped by Red Hat☆15Updated last year
- Tools for the OSCAL project☆35Updated last year
- A Java library for programmatically calculating OWASP Risk Rating scores☆18Updated last year
- ☆14Updated 3 years ago
- SANS has developed a set of information security policy templates. These are free to use and fully customizable to your company's IT secu…☆36Updated 3 years ago
- NIST 800-53 Baseline Configuration Tool☆9Updated 5 months ago
- Kestrel Jupyter Notebook Kernel☆9Updated last year
- Materials used by Product Management and Product Marketing☆12Updated 6 years ago
- NIST SP 800-53 Rev 5 as Data☆23Updated 4 years ago
- A curated threat modeling library collection☆22Updated last year
- A repository containing OSCAL serializations of the CIS Critical Security Controls☆48Updated last year
- Documentation on the OpenRMF application, including scripts to run the whole stack as well as just infrastructure with documentation on u…☆132Updated 3 weeks ago
- Posture Attribute Collection and Evaluation☆24Updated last year
- MITRE ATT&CK Based App in Power BI☆14Updated 11 months ago
- Controls Assessment Specification☆69Updated 8 months ago
- A Crowdsourcing Exchange for mapping various sources of security vulnerabilities, exposures, threats, and controls data☆26Updated 5 years ago
- ☁️Haven GRC - easier governance, risk, and compliance 👨⚕️👮♀️🦸♀️🕵️♀️👩🔬☆98Updated 3 years ago
- Examples on how to maintain security/compliance as code and to automate SecOps using the JupiterOne platform.☆53Updated last year
- Landing Page Content/Builder for MITRE Security Automation Framework☆28Updated this week
- The OpenFISMA project is an open source application designed to reduce the complexity and automate the regulatory requirements of the Fed…☆10Updated 9 years ago
- A collection of security related user stories compatible with NIST Special Publication 800-53☆35Updated 7 years ago