Website: https://www.isecom.org/research.html The Open Source Security Testing Methodology Manual is a complete methodology for the testing, analysis and measurement of operational security towards building the best possible security defenses. The…
Website: https://www.iso27001security.com/html/toolkit.html The free ISO27k toolkit is a comprehensive collection of resources designed to assist organizations in improving their information security management. It provides practical and cost-effective solutions for small…
Website: http://www.opensecurityarchitecture.org/cms/index.php Open Security Architecture (OSA) is a community-driven platform that provides free, open-source security architecture resources and tools. The platform was established to help security architects, solution designers, and…
Website: https://www.ism3.com/node/39 O-ISM3 2.0 is an Information Security Management System (ISMS) framework that provides a structured approach to managing information security. It is designed to be customizable to meet the…
MITRE ATT&CK® is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific…
Search, visualize, drill, and see relationships between frameworks such as NIST CSF, PF, NIST SP 800-53, CSA Cloud Controls, and CIS.
The gold standard of cybersecurity frameworks.