CISO Assistant 4.1.0
CISO Assistant is a one-stop-shop GRC platform covering all cybersecurity management activities
Open source badge
Awarded when the project uses an approved open source license.
- 🥇 Gold
- Licensed under an approved open source license
Maintained badge
Awarded when the project meets maintenance health criteria.
- 🥇 Gold
- Multiple active maintainers
- 🥈 Silver
- At least one release in the last 6 months
- 🥉 Bronze
- 5+ commits in 6 months, issues responded to within 7 days
Reused badge
Awarded when the project is packaged and adopted by others.
- 🥇 Gold
- Actively used by 10+ organizations
- 🥈 Silver
- Actively used by at least one organization
- 🥉 Bronze
- Published packages and passing CI in the last 6 months
Security badge
Awarded when the project follows security best practices.
- 🥇 Gold
- No known vulnerabilities at release, critical CVEs fixed within a day
- 🥈 Silver
- 75%+ merge requests reviewed, 80%+ tags signed
- 🥉 Bronze
- Protected branches, security policy, fast issue response
Supply chain badge
Awarded when the supply chain is transparent following SLSA standards.
- 🥇 Gold
- Full build and source provenance traceability
- 🥈 Silver
- VEX attestations for vulnerability assessment
- 🥉 Bronze
- Changelog, contribution guidelines, SBOM attestations
Features
- risk-management
- compliance-management
- GDPR-management
- risk-quantification
- frameworks-mapping
- third-party-risk-management
- business-impact-analysis
- incident-management
- dora
- vulnerabilities
- workflow-automation
- ai-assistant
- mcp
- api
Description
CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, Privacy, and Reporting. It supports 220+ global frameworks and 45+ mapping sets with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more. It also covers EBIOS RM, business impact analysis, cyber risk quantification, incident and vulnerability management, workflow automation, a REST API, MCP support and an AI assistant.