🚨ATTENTION🚨 The NIST 800-53 mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as an archive.

Overview of existing mappings from and to cyber security controls

Automated security control prioritization using sector-based threat profiles

Universal check identifier system for cross-framework security control mapping

Catalogue of AI security controls across all three AISECA maturity tiers

Risk-based vulnerability management framework covering identification, prioritization, remediation tracking, and reporting workflows.

FORTRESS is an interactive security control simulation platform designed for security architects, analysts, and students to understand the full spectrum of security controls. Featuring a comprehensive NIST SP 800-53 aligned control matrix, interactive attack simulations, scenario-based training, a 50+ control encyclopedia, defense builder👨🏿‍💻🔒.

Countermeasures or safeguards for detecting, preventing, and mitigating cyber threats and attacks (Protect assets)

Portfolio artifacts from the Google Cybersecurity Certificate (Coursera), showcasing hands-on cybersecurity projects and assessments.

Cyber risk governance framework covering control assessment, risk evaluation, remediation tracking, and compliance alignment.

Security+ Reference Dossier is an interactive, browser-based study guide for the CompTIA Security+ SY0-701 certification exam. This comprehensive reference tool covers all five domains with detailed definitions, contextual examples, and expandable explanations for over 140 security terms. Designed with a classified dossier aesthetic.🔐🌐🧑🏿‍💻

An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Security Assessments in Cybersecurity.

Repository for Cybrary Security Engineering & Cyber Risk – includes notes, docs, scenarios, extras, and certificate of completion.

NIST SP 800-171 controls matrix with all 110 requirements mapped to NIST 800-53, CMMC 2.0, CIS Controls, and ISO 27001.

Information and Training Projects for the role as a Cyber Defender/Information Security Analyst

Map ransomware-relevant MITRE ATT&CK techniques to MITRE D3FEND defensive patterns and Platform0-style control tests, with a small data model, resolver CLI, and example kill chain.

A concise, technically focused implementation of the NIST Cybersecurity Framework (CSF) 2.0, mapping core NIST SP publications into a practical governance, risk, control, incident response, and recovery model, written from a Finnish-language perspective.

GRC + technical cybersecurity lab repo (CMMC L2/CCP, NIST 800-171, Security+ + hands-on labs).

Validate and test security controls to ensure they are working effectively