intuitem/ciso-assistant-community

CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.

What it solves

CISO Assistant is a central hub for Cybersecurity Management and Governance, Risk, and Compliance (GRC) practices. It addresses the problem of tool fragmentation and data duplication by providing a unified platform to manage compliance, risk assessments, and security controls without redundant work.

How it works

The platform uses a "decoupling principle" that separates compliance tracking from the actual implementation of security controls. This allows users to evaluate a single scope against multiple frameworks simultaneously and reuse past assessments across different scopes. It is built with an API-first approach, supporting both a user interface and external automation via a REST API and CLI.

Who it’s for

It is designed for CISOs, cybersecurity teams, and IT professionals who need to manage complex security frameworks, track remediation, and handle risk management across an organization.

Highlights

  • Extensive Framework Library: Includes over 200 built-in standards and security controls (e.g., ISO 27001, NIST CSF, GDPR, EU AI Act).
  • Integrated Risk Management: Features built-in risk assessment, remediation tracking, and Business Impact Analysis.
  • Automation Ready: Provides a comprehensive REST API, CLI, and Kafka integration for automation.
  • Flexible Customization: Supports custom frameworks via a simple syntax and the ability to load libraries directly from Excel files.
  • CISO-specific Tooling: Includes Kanban boards, evidence management, and reporting dashboards.

Related

  • Project
    GRCEngClub/claude-grc-engineering

    An open-source GRC engineering toolkit for Claude that automates evidence collection, gap assessment, and remediation across multiple compliance frameworks.

  • Project
    Sec-Link/Argus-Agentic-SOC-Platform

    An open-source AI-native SOC platform that consolidates alert management, automated workflows, and AI-powered investigation tools for security operations.

  • Project
    cyrusagents/cyrus

    An AI agent orchestrator that monitors issues in Linear, GitHub, GitLab, or Slack and uses AI coding agents to resolve them in isolated Git worktrees.

  • Project
    runkids/skillshare

    A centralized management tool that synchronizes AI CLI skills, agents, and rules across multiple AI tools from a single source of truth.

  • Project
    Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

    A collection of installable knowledge packages for Claude that provide expert-level guidance and audit-ready documentation for over 30 global Governance, Risk, and Compliance (GRC) frameworks.