🚨ATTENTION🚨 The NIST 800-53 mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as an archive.
Six security outcomes an enterprise must achieve to run AI agents, and the controls that evidence them. A draft for public comment.
Overview of existing mappings from and to cyber security controls
Universal check identifier system for cross-framework security control mapping
A feature-level security controls framework for AI capabilities. 7 checks, 30 minutes, one AI feature at a time. Includes review template, AIBOM trigger model, and PoC scanner.
Automated security control prioritization using sector-based threat profiles
Practitioner-led AI security control framework: 57 controls across 12 NIST AI 600-1 GenAI risk domains, mapped to MITRE ATLAS, in three tiers. Vendor-agnostic, CC BY 4.0.
NIST SP 800-171 controls matrix with all 110 requirements mapped to NIST 800-53, CMMC 2.0, CIS Controls, and ISO 27001.
Legacy Control Lab — local Docker training range for IBM i-style GRC evidence (Community Edition). Not IBM i; not a cloud platform.
An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Security Assessments in Cybersecurity.
Free MIT-licensed scaffold for cloud controls evidence — markdown templates for SOC 2 and customer security reviews
Catalogue of AI security controls across all three AISECA maturity tiers
Readable, searchable rendering of BSI's Grundschutz++ OSCAL catalog (unofficial)
Cyber risk governance framework covering control assessment, risk evaluation, remediation tracking, and compliance alignment.
Portfolio artifacts from the Google Cybersecurity Certificate (Coursera), showcasing hands-on cybersecurity projects and assessments.
30 hands-on labs implementing CIS-aligned security controls across hardening, logging, SIEM, encryption, backup validation, and incident response.
Enterprise e-commerce security assessment focused on DMZ architecture, security controls, threat mitigation, and risk management.
Multi-tenant credential-management prototype with API, web and Android clients, tested security controls and documented pre-production gaps.
Repository for Cybrary Security Engineering & Cyber Risk – includes notes, docs, scenarios, extras, and certificate of completion.
Countermeasures or safeguards for detecting, preventing, and mitigating cyber threats and attacks (Protect assets)
To associate your repository with the security-controls topic, visit your repo's landing page and select "manage topics."