security-policies

CloudCustodian Rules engine for cloud security and governance, DSL in yaml for policies to query, filter, and take actions on resources

The ImageMagick Security Policy Evaluator allows developers and security experts to check if an XML Security Policy is hardened against a wide set of malicious attacks. It assists with the process of reviewing such policies, which is usually a manual task, and helps identify the best practices for ImageMagick deployments.

Provision VPC in AWS with Terraform & deploy a Kubernetes Cluster with Kubespray

Syracuse University, Masters of Applied Data Science - IST 623 Introduction to Information Security

Free cybersecurity policy templates: Acceptable Use, Password, Remote Access, BYOD, Incident Response, and Data Classification policies. Ready for enterprise use and compliance audits.

kommit's OSPO policies for adherence to security best practices

Give your coding assistant security super powers with Salt Code. Secure code with every prompt and a much quieter security team.

A complete security program you can adopt in a week: 22 plain-English policies plus honest mappings for ISO 27001, NIST CSF 2.0, CIS, SOC 2, PCI, HIPAA, GDPR, CMMC and more.

information-security governance and policy suite demonstrating enforceable controls, framework traceability, audit evidence, and ongoing governance for a fictional fintech.

15 open-source security policy templates for SOC 2 and ISO 27001 audits. Ready-to-use with framework control mappings. Includes AI acceptable use and privacy policies

A structured collection of enterprise, cloud, and AI governance policies aligned with modern security best practices.

CI/CD compliance gate for Australian ISM and Essential Eight — checks K8s, Docker, and IaC via OPA/Rego policies

Academic portfolio demonstrating ISO/IEC 27001:2022 ISMS documentation, risk assessment, security policies, procedures, and governance & compliance documentation.

Comprehensive documentation of cyber security best practices and recommendations for enterprise environments. This project provides guidance on implementing effective security controls and establishing a strong security posture across organizations.

Complete security policy framework organized by Traffic Light Protocol (TLP) classifications with implementation procedures and incident response playbooks.

Defense-in-depth cybersecurity framework for small businesses — built on free / open-source tools, aligned to CIS Controls v8 (IG1), validated with live lab evidence (iptables, Fail2Ban, Suricata, ClamAV, nmap, Lynis).

Free, open-source SOC 2 policy generator: 22 policy templates rendered from a 23-question intake. CLI + templates. Apache-2.0.

Local Cloud Infrastructure Practice | Skills:

Sample security policies and checklists, including access control, vulnerability management, vendor security, and IAM access reviews.

Mobile companion app for nirikshan