iso42001

Open source solutions for SOC2, GDPR, and ISO27001

Claude Skills for Governance, Risk, & Compliance (GRC): Expert-level compliance guidance for ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF, PCI DSS, EU AI Act, ISO 42001, ISO 27701, DORA, CSRD, India's DPDPA, CMMC 2.0, NIST AI Risk, SWIFT, CCPA/CPRA, and others. Benchmark 90% (with skills) vs 49% (without skills). Updated Monthly.

Complete AI governance and LLM Evals platform with support for EU AI Act, ISO 42001, NIST AI RMF and 20+ more AI frameworks and regulations. Join our Discord channel: https://discord.com/invite/d3k3E4uEpR

ISO 27001 (+ 42001 + NIS2 + EN 18286) ISMS framework designed to be operated by LLM Agents

Open GRC skills for AI agents. By ISMS Copilot.

Free TOGAF 10 professional enterprise architecture diagrams - ADM lifecycle, architecture governance, content framework, capability planning, stakeholder management, compliance, and risk. Visual, clear, and ready to use.

A practical implementation toolkit for ISO/IEC 42001:2023 AI Management Systems — gap assessment checklists, risk register templates, controls mapping, and implementation roadmap for GRC professionals and AI governance practitioners.

⚕️ the world's first unified, lifecycle-centric regulatory framework specifically designed for autonomous AI agents in medical environments (270+ requirements, 3 risk categories).

Scan a codebase for AI SDKs, MCP servers and agent tools; map risks to NIST AI RMF, ISO 42001, EU AI Act and the OWASP LLM and Agentic Top 10

ARCHIVED — moved to github.com/GenAI-Security-Project/crosswalk. This copy is frozen as of June 2026 and out of date.

Mapa multinorma en español: ENS, ISO/IEC 27001, NIS2, ISO/IEC 42001, DORA, RGPD, NIST CSF 2.0 y leyes LATAM. 594 requisitos sobre 152 controles, refuerzos del ENS, perfil regulatorio y 25 reglas de coherencia. En el navegador, sin servidor.

Voluntary behavioral baseline + conformance testing for transparent AI voice agents in healthcare. Open proposal with cryptographic authorization layer.

See the AI your organisation is actually using: browser, CLI, IDE, desktop, network, cloud and MCP. Self-hosted, with a governance portal and Grafana dashboards.

NIST AI RMF applied to a real research cluster. We govern our own AI tools, document decisions, and share templates. Practical governance for small teams.

Source of the GRC Practice Lab (grclab.purplecop.io): 400+ controls across 9 frameworks, guided scenarios and a free ISO 27001 Lead Implementer course.

Frictionless Governance for AI

Free ISO/IEC 42001 (AI Management System) infographics & cheat sheets: Clauses 4–10, all Annex A controls (A.2–A.10), audit readiness. MIT – use in training and slides.

Guide GRC teams with Claude Skills for ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF, PCI DSS, TSA, and ISO 42001

开源 AI Agent 治理技能库：116 个零依赖技能，让每个 AI 输出有籍·有证·有门禁。覆盖 AI 治理 / Agent 安全 / 合规自动化 / 记忆治理，适配 Claude Code · Codex · Cursor · WorkBuddy。

Active Cyber Program (ACP) is an open framework for assessing and certifying whether an organization operates an active and effective cybersecurity program.