iso-27001

Agent Skills for traceable requirements, independent verification, human approval gates, and auditable AI-assisted engineering. Supports Claude Code, Cursor, VS Code, and GitHub Copilot; ISO 9001/27001 aligned (design phase), GxP-aware.

Security architecture patterns and NIST 800-53 controls from opensecurityarchitecture.org

Overview of existing mappings from and to cyber security controls

𝟰𝟱 𝗽𝗿𝗼𝗱𝘂𝗰𝘁𝗶𝗼𝗻-𝗴𝗿𝗮𝗱𝗲 𝗚𝗥𝗖 𝗽𝗿𝗼𝗺𝗽𝘁𝘀 𝗮𝗰𝗿𝗼𝘀𝘀 𝟭𝟯 𝗱𝗼𝗺𝗮𝗶𝗻𝘀. ISO 42001, ISO 27001, EU AI Act, NIST AI RMF, GDPR, DORA and more. Career and startup prompts no other GRC library has. Works with Claude, GPT-4o and Gemini. 𝗥𝗮𝘁𝗲𝗱 𝟵.𝟱/𝟭𝟬 𝗢𝗻 𝗨𝘀𝗮𝗯𝗶𝗹𝗶𝘁𝘆 𝗮𝗻𝗱 𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗮𝗹 𝗔𝗽𝗽𝗹𝗶𝗰𝗮𝘁𝗶𝗼𝗻

Biblioteca curada de referência canônica em cybersegurança (pt-BR): 213 arquivos cobrindo MITRE ATT&CK/ATLAS/D3FEND/CAPEC, OWASP, NIST CSF/SP800-53/SSDF, ISO 27001:2022, CIS Controls v8, PCI DSS v4.0, CVE/CWE/CVSS, STIX/TAXII, threat intel e mais.

Disciplined minimal code orchestrator with gated multi-model review before subagents ever start writing code.

Open-Source ISMS für Multi-Framework-Compliance: ISO 27001:2022, BSI IT-Grundschutz, NIS-2, DORA, DSGVO/GDPR, TISAX. Multi-Tenant, 93 Annex-A-Controls, Risk-Engine, tamper-evidenter Audit-Trail. Symfony 7.4 / PHP 8.4.

A comprehensive Model Context Protocol (MCP) server providing enterprise-grade Static Application Security Testing (SAST) with advanced compliance verification, multi-tenant management, AI-powered analysis, and automated remediation workflows.

Open-source, GitHub-native eQMS baseline for medical device and regulated software teams. Issues, PRs, Actions, and Releases form the quality system of record. Covers ISO 9001, ISO 13485, ISO 14971, IEC 62304, IEC 62366-1, ISO/IEC 27001, ISO/IEC 42001, GDPR/nFADP, plus an optional GAMP 5 / 21 CFR Part 11 overlay.

Local-only network vulnerability scanner that auto-maps findings to ISO/IEC 27001:2022 Annex A controls and generates white-label executive .docx reports. Air-gapped, zero-cloud, zero-telemetry. Built on Nmap, Nuclei, Tshark, OpenSSL, Ollama LLM + WebAuthn. Windows 10/11. MIT + Apache-2.0.

Build an enterprise-level AI agent operating system enabling cross-departmental and cross-system intelligent collaboration.

Open-source company OS with HR & people, asset management, finance operations, and security compliance engine (ISO 27001, SOC I, SOC II). Risk registers, controls, audits, objectives. API-first.

Web-based diagnostic and self-assessment tool for evaluating ISO/IEC 27001 compliance and ISMS readiness.

NIST SP 800-171 controls matrix with all 110 requirements mapped to NIST 800-53, CMMC 2.0, CIS Controls, and ISO 27001.

Audit-ready ISO/IEC 27001:2022 control assessment & evidence package for a fictional cloud SaaS — workbook, SSP, evidence tracker, readiness report, charts. NIST 800-53 crosswalk.

Security Roadmap to ISO-27k

Self-paced ISO/IEC 27001 Lead Auditor (Information Security Management Systems) training course by the Center for Professional Development at the International Cybersecurity and Digital Forensics Academy.

BGNexa AI — Evidence intelligence for cybersecurity, privacy and regulatory readiness.

Self-hosted open-source cybersecurity governance platform for ISO 27001, NIS2, DORA, CRA, product security and AI governance.

Self-paced ISO/IEC 27001 Lead Implementer (Information Security Management Systems) training course by the Center for Professional Development at the International Cybersecurity and Digital Forensics Academy.