cis-controls

Hack23 Public Information Security Management System:Security Through Transparency and Open Documentation Demonstrating Security Excellence Through Public ISMS Disclosure

𝗖𝟯 provides compliant AWS CDK components to various security standards.

Overview of existing mappings from and to cyber security controls

Biblioteca curada de referência canônica em cybersegurança (pt-BR): 213 arquivos cobrindo MITRE ATT&CK/ATLAS/D3FEND/CAPEC, OWASP, NIST CSF/SP800-53/SSDF, ISO 27001:2022, CIS Controls v8, PCI DSS v4.0, CVE/CWE/CVSS, STIX/TAXII, threat intel e mais.

Automated security control prioritization using sector-based threat profiles

NIST SP 800-171 controls matrix with all 110 requirements mapped to NIST 800-53, CMMC 2.0, CIS Controls, and ISO 27001.

Ansible collection to audit and remediate systems against the CIS Benchmarks

EASML — laboratorio educativo de malware en Python: 14 módulos (simulación + defensa), GUI Flet, wiki y binarios portables. Solo uso académico.

SAMA CSF Assessment Tool — Saudi Central Bank Cybersecurity Framework | Bilingual AR/EN | 4 Domains · 114 Controls · 6 Maturity Levels | ISO 27001 · NIST · CIS · PCI-DSS · NCA Mappings | Offline-First

Compliance-as-Code lab using AWS Config, EventBridge, and Lambda auto-remediation with CloudFormation.

Enterprise PowerShell module for comprehensive Active Directory security auditing. Features 9 security modules, Microsoft compliance coverage, CI/CD integration, SQLite database, and comprehensive reporting. Perfect for security teams and M&A due diligence.

Local cyber assessment, triage, topology, and remediation reporting runtime for authorized security reviews.

Cybersecurity Standards — independent third-party profile of a public API surface, by API Evangelist. Cybersecurity Standards captures the public, machine-readable, and reference frameworks that establish best practices for protecting information systems, networks, software, and data from cyber threats. The landscape is anchored by U.S.

AI SDLC harness framework for predictable, secure, and reviewable AI-assisted software delivery with OpenCode, Claude Code, Cursor, and agentic coding tools.

Comprehensive security hardening toolkit for Fedora Linux systems with enterprise-grade UX and cross-platform compatibility

GRC control crosswalk engine (NIST 800-53 / CIS / SOC 2) + gap analysis

30 hands-on labs implementing CIS-aligned security controls across hardening, logging, SIEM, encryption, backup validation, and incident response.

Vulnerability assessment of a legacy smart city server managing traffic monitoring and smart streetlights. Conducted using Nessus and Kali Linux, mapped to CIS Controls v8.1.

Curated, machine-readable cybersecurity reference library — frameworks, standards, government advisories, threat reports, and breach analyses.

Read-only M365 security assessment instrument. Maps Exchange Online and Entra ID controls to NIST SP 800-53, CIS v8.1, HIPAA current rule, and HIPAA NPRM proposed rule. Produces structured markdown findings.