intuitem/ciso-assistant-community

CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 150+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.

What it solves

Cybersecurity professionals often struggle with tool fragmentation, redundant data entry, and the complexity of managing multiple compliance frameworks. CISO Assistant centralizes these processes into a single hub to reduce manual effort and improve interoperability.

How it works

The platform uses a decoupling principle to separate compliance requirements from technical security controls, allowing users to map a single security implementation to multiple regulatory frameworks simultaneously. It is built with an API-first approach, supporting automation via CLI, webhooks, and integrations with tools like Jira and ServiceNow. Users can import frameworks and libraries directly from Excel files or via a custom Domain Specific Language (DSL).

Who it’s for

It is designed for cybersecurity practitioners, IT professionals, and compliance officers who need to manage risk assessments, audit campaigns, and regulatory compliance (such as ISO 27001, NIST, or GDPR) within a unified system.

Highlights

  • Supports over 160 built-in frameworks including NIST, ISO, and GDPR
  • Includes risk assessment, remediation tracking, and vulnerability management
  • Features an API-first architecture with Kafka and CLI support
  • Offers automated reporting, analytics, and custom metric tracking
  • Supports custom framework creation via Excel imports or YAML