Alternatives and similar repositories for grc

Users that are interested in grc are comparing it to the libraries listed below

• GovReady / hyperGRC
  hyperGRC is a lightweight, in-browser tool for managing compliance-as-code repositories in OpenControl format.
  ☆25Updated 3 years ago
• brian-ruf / OSCAL-GUI
  Joint NIST/FedRAMP tool to interact with OSCAL files via a browser-based GUI
  ☆43Updated 5 years ago
• usnistgov / CloudSecurityArchitectureTool-CSAT-v0.1
  ☆21Updated 11 months ago
• GovReady / compliancelib-python
  Machine readable cybersecurity compliance standards library for Python, starting with FISMA and NIST Risk Management Framework
  ☆61Updated 5 years ago
• digitorus / eramba
  Dockerized Eramba, Open Source Governance, Risk & Compliance (GRC) system https://hub.docker.com/r/digitorus/er…
  ☆30Updated 5 years ago
• GovReady / nist-sp-800-53-r5-data
  NIST SP 800-53 Rev 5 as Data
  ☆23Updated 5 years ago
• usnistgov / oscal-tools
  Tools for the OSCAL project
  ☆36Updated 2 years ago
• risk-redux / control_freak
  NIST SP 800-53, Security and Privacy Controls for Federal Information Systems and Organizations
  ☆39Updated last month
• ComplianceAsCode / oscal
  OSCAL SSP content for technologies shipped by Red Hat
  ☆15Updated 2 years ago
• GSA / oscal-ssp-to-word
  ☆18Updated 3 years ago
• SecurityBagel / NIST_800-53r5_Baseline_Config_PowerBI_
  NIST 800-53 Baseline Configuration Tool
  ☆13Updated 9 months ago
• counteractive / security-controls
  ☆46Updated 2 years ago
• usnistgov / sctools
  Tools for security content automation, baseline tailoring, and overlay development.
  ☆44Updated 9 months ago
• stevespringett / owasp-risk-rating-calculator
  A Java library for programmatically calculating OWASP Risk Rating scores
  ☆18Updated 2 years ago
• boydjd / openfisma
  The OpenFISMA project is an open source application designed to reduce the complexity and automate the regulatory requirements of the Fed…
  ☆10Updated 10 years ago
• CISecurity / ControlsAssessmentSpecification
  Controls Assessment Specification
  ☆70Updated 2 months ago
• cheerscyber / materials
  Materials used by Product Management and Product Marketing
  ☆12Updated 6 years ago
• GovReady / govready-q
  An open source, self-service GRC tool to automate security assessments and compliance.
  ☆192Updated 6 months ago
• JupiterOne / secops-automation-examples
  Examples on how to maintain security/compliance as code and to automate SecOps using the JupiterOne platform.
  ☆53Updated last year
• GovReady / govready-deployments
  Docker build of GovReady
  ☆14Updated last year
• MISP / misp-compliance
  Legal, procedural and policies document templates for operating MISP and information sharing communities
  ☆38Updated 2 years ago
• mitre / mitre-saf
  Landing Page Content/Builder for MITRE Security Automation Framework
  ☆29Updated last week
• ThreatResponse / aws_ir_plugins
  Core incident handling plugins for aws_ir cli, incident pony, and more.
  ☆21Updated 6 years ago
• scooper505 / ISO27001_NIST800_53_controlMapping
  Pulled the H-1 Table from the NIST SP 800-53 Rev. 4. Table maps applicable NIST controls to the ISO/IEC 27001 Controls
  ☆19Updated 5 years ago
• Agh42 / oscal4neo4j
  Scripts to import OSCAL example content into the Neo4J graph database
  ☆28Updated 2 years ago
• kindlyops / havengrc
  ☁️Haven GRC - easier governance, risk, and compliance 👨‍⚕️👮‍♀️🦸‍♀️🕵️‍♀️👩‍🔬
  ☆101Updated 4 years ago
• GSA / threat-analysis
  ☆15Updated 3 years ago
• deepanshusood / SANS-Security-Policy-Templates
  SANS has developed a set of information security policy templates. These are free to use and fully customizable to your company's IT secu…
  ☆41Updated 3 years ago
• cyberperspectives / sagacity
  Security Assessment Data Management and Analysis Tool
  ☆39Updated 4 years ago
• opencontrol / standards
  OpenControl-formatted industry standards and requirement documents
  ☆46Updated last year