🚨ATTENTION🚨 The NIST 800-53 mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as an archive.
Six security outcomes an enterprise must achieve to run AI agents, and the controls that evidence them. A draft for public comment.
Overview of existing mappings from and to cyber security controls
Universal check identifier system for cross-framework security control mapping
Automated security control prioritization using sector-based threat profiles
NIST SP 800-171 controls matrix with all 110 requirements mapped to NIST 800-53, CMMC 2.0, CIS Controls, and ISO 27001.
A feature-level security controls framework for AI capabilities. 7 checks, 30 minutes, one AI feature at a time. Includes review template, AIBOM trigger model, and PoC scanner.
Practitioner-led AI security control framework: 57 controls across 12 NIST AI 600-1 GenAI risk domains, mapped to MITRE ATLAS, in three tiers. Vendor-agnostic, CC BY 4.0.
Legacy Control Lab — local Docker training range for IBM i-style GRC evidence (Community Edition). Not IBM i; not a cloud platform.
An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Security Assessments in Cybersecurity.
Free MIT-licensed scaffold for cloud controls evidence — markdown templates for SOC 2 and customer security reviews
Catalogue of AI security controls across all three AISECA maturity tiers
Portfolio artifacts from the Google Cybersecurity Certificate (Coursera), showcasing hands-on cybersecurity projects and assessments.
30 hands-on labs implementing CIS-aligned security controls across hardening, logging, SIEM, encryption, backup validation, and incident response.
Cyber risk governance framework covering control assessment, risk evaluation, remediation tracking, and compliance alignment.
FORTRESS is an interactive security control simulation platform designed for security architects, analysts, and students to understand the full spectrum of security controls. Featuring a comprehensive NIST SP 800-53 aligned control matrix, interactive attack simulations, scenario-based training, a 50+ control encyclopedia, defense builder👨🏿💻🔒.
Hands-on cybersecurity projects focused on network security monitoring, threat analysis, and implementing defensive security controls.
Countermeasures or safeguards for detecting, preventing, and mitigating cyber threats and attacks (Protect assets)
Security+ Reference Dossier is an interactive, browser-based study guide for the CompTIA Security+ SY0-701 certification exam. This comprehensive reference tool covers all five domains with detailed definitions, contextual examples, and expandable explanations for over 140 security terms. Designed with a classified dossier aesthetic.🔐🌐🧑🏿💻
Enterprise e-commerce security assessment focused on DMZ architecture, security controls, threat mitigation, and risk management.
To associate your repository with the security-controls topic, visit your repo's landing page and select "manage topics."