iso-27001

Agent Skills for traceable requirements, independent verification, human approval gates, and auditable AI-assisted engineering. Supports Claude Code, Cursor, VS Code, and GitHub Copilot; ISO 9001/27001 aligned (design phase), GxP-aware.

Security architecture patterns and NIST 800-53 controls from opensecurityarchitecture.org

Overview of existing mappings from and to cyber security controls

𝟰𝟱 𝗽𝗿𝗼𝗱𝘂𝗰𝘁𝗶𝗼𝗻-𝗴𝗿𝗮𝗱𝗲 𝗚𝗥𝗖 𝗽𝗿𝗼𝗺𝗽𝘁𝘀 𝗮𝗰𝗿𝗼𝘀𝘀 𝟭𝟯 𝗱𝗼𝗺𝗮𝗶𝗻𝘀. ISO 42001, ISO 27001, EU AI Act, NIST AI RMF, GDPR, DORA and more. Career and startup prompts no other GRC library has. Works with Claude, GPT-4o and Gemini. 𝗥𝗮𝘁𝗲𝗱 𝟵.𝟱/𝟭𝟬 𝗢𝗻 𝗨𝘀𝗮𝗯𝗶𝗹𝗶𝘁𝘆 𝗮𝗻𝗱 𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗮𝗹 𝗔𝗽𝗽𝗹𝗶𝗰𝗮𝘁𝗶𝗼𝗻

Biblioteca curada de referência canônica em cybersegurança (pt-BR): 213 arquivos cobrindo MITRE ATT&CK/ATLAS/D3FEND/CAPEC, OWASP, NIST CSF/SP800-53/SSDF, ISO 27001:2022, CIS Controls v8, PCI DSS v4.0, CVE/CWE/CVSS, STIX/TAXII, threat intel e mais.

Disciplined minimal code orchestrator with gated multi-model review before subagents ever start writing code.

Open-Source ISMS für Multi-Framework-Compliance: ISO 27001:2022, BSI IT-Grundschutz, NIS-2, DORA, DSGVO/GDPR, TISAX. Multi-Tenant, 93 Annex-A-Controls, Risk-Engine, tamper-evidenter Audit-Trail. Symfony 7.4 / PHP 8.4.

A comprehensive Model Context Protocol (MCP) server providing enterprise-grade Static Application Security Testing (SAST) with advanced compliance verification, multi-tenant management, AI-powered analysis, and automated remediation workflows.

Local-only network vulnerability scanner that auto-maps findings to ISO/IEC 27001:2022 Annex A controls and generates white-label executive .docx reports. Air-gapped, zero-cloud, zero-telemetry. Built on Nmap, Nuclei, Tshark, OpenSSL, Ollama LLM + WebAuthn. Windows 10/11. MIT + Apache-2.0.

Build an enterprise-level AI agent operating system enabling cross-departmental and cross-system intelligent collaboration.

Open-source company OS with HR & people, asset management, finance operations, and security compliance engine (ISO 27001, SOC I, SOC II). Risk registers, controls, audits, objectives. API-first.

NIST SP 800-171 controls matrix with all 110 requirements mapped to NIST 800-53, CMMC 2.0, CIS Controls, and ISO 27001.

Security Roadmap to ISO-27k

Web-based diagnostic and self-assessment tool for evaluating ISO/IEC 27001 compliance and ISMS readiness.

Self-paced ISO/IEC 27001 Lead Auditor (Information Security Management Systems) training course by the Center for Professional Development at the International Cybersecurity and Digital Forensics Academy.

Self-hosted open-source cybersecurity governance platform for ISO 27001, NIS2, DORA, CRA, product security and AI governance.

Self-paced ISO/IEC 27001 Lead Implementer (Information Security Management Systems) training course by the Center for Professional Development at the International Cybersecurity and Digital Forensics Academy.

Turn an AI coding agent into a disciplined, read-only compliance auditor. Evidence or silence; method public, results private.

MCP server for SCF Controls Platform — security compliance controls, frameworks, evidence, and risk management for AI agents

Cybersecurity Standards captures the public, machine-readable, and reference frameworks that establish best practices for protecting information systems, networks, software, and data from cyber threats. The landscape is anchored by U.S.