☁️Haven GRC - easier governance, risk, and compliance 👨⚕️👮♀️🦸♀️🕵️♀️👩🔬
A comprehensive Model Context Protocol (MCP) server providing enterprise-grade Static Application Security Testing (SAST) with advanced compliance verification, multi-tenant management, AI-powered analysis, and automated remediation workflows.
dockerized-cloudsplot, CloudSploit is a security and configuration scanner that can detect hundreds of threats in your AWS account. Don't let a single misstep compromise your entire infrastructure.
NIST SP 800-53 Rev 5 security control mapping, gap analysis, risk scoring, and POA&M development
Cybersecurity coursework portfolio with network scans, WLAN/BYOD security plans, incident response, and legal compliance projects.
CaC Utility Belt. Collection and extension of parsers from GovReady for parsing SSPs and control implementation statements.
Simulated vulnerability management lab demonstrating POA&M creation, NIST 800-53 control mapping, and compliance-aligned remediation tracking for real-world vulnerabilities and cloud misconfigurations.
Engineering-first guide to geospatial data lineage & provenance: origin tracking, transformation audit trails, compliance mapping (GDPR, FISMA, INSPIRE, ISO 19115), and Python pipeline integration for production GIS.
Superseded early prototype. CompliNIST is now distributed as a free Docker app at complinist.com (docker pull ghcr.io/stihelc/complinist-lite:lite).
Enterprise security risk assessment and remediation plan aligned with NIST SP 800-53, FISMA, and PCI DSS frameworks.
SecureInfo Corporation — independent third-party profile of a public API surface, by API Evangelist. SecureInfo Corporation was a cybersecurity and information-assurance company focused on FISMA and federal compliance, surfaced as a portfolio company of insight-partners and added to the API Evangelist network as a stub for enrichment.
This project is a security assessment report. It evaluates the security framework of a Field Medical Center (FMC), identifies key compliance gaps, assigns risk ratings, proposes remediation strategies, and drafts a PCI DSS policy to address specific vulnerabilities.
To associate your repository with the fisma topic, visit your repo's landing page and select "manage topics."