🚨ATTENTION🚨 The NIST 800-53 mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as an archive.

Overview of existing mappings from and to cyber security controls

Automated security control prioritization using sector-based threat profiles

Catalogue of AI security controls across all three AISECA maturity tiers

FORTRESS is an interactive security control simulation platform designed for security architects, analysts, and students to understand the full spectrum of security controls. Featuring a comprehensive NIST SP 800-53 aligned control matrix, interactive attack simulations, scenario-based training, a 50+ control encyclopedia, defense builder👨🏿‍💻🔒.

Countermeasures or safeguards for detecting, preventing, and mitigating cyber threats and attacks (Protect assets)

An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Security Assessments in Cybersecurity.

Portfolio artifacts from the Google Cybersecurity Certificate (Coursera), showcasing hands-on cybersecurity projects and assessments.

NIST SP 800-171 controls matrix with all 110 requirements mapped to NIST 800-53, CMMC 2.0, CIS Controls, and ISO 27001.

My notes from Proffessor Messor's CompTIA Security + SY0-701 Security Controls video.

GRC + technical cybersecurity lab repo (CMMC L2/CCP, NIST 800-171, Security+ + hands-on labs).

Information and Training Projects for the role as a Cyber Defender/Information Security Analyst

a low-cost security control system deployed on Arduino MKR WiFi 1010 and Arduino MKR ENV Shield

Validate and test security controls to ensure they are working effectively

Map ransomware-relevant MITRE ATT&CK techniques to MITRE D3FEND defensive patterns and Platform0-style control tests, with a small data model, resolver CLI, and example kill chain.

A concise, technically focused implementation of the NIST Cybersecurity Framework (CSF) 2.0, mapping core NIST SP publications into a practical governance, risk, control, incident response, and recovery model, written from a Finnish-language perspective.

Comprehensive documentation of cyber security best practices and recommendations for enterprise environments. This project provides guidance on implementing effective security controls and establishing a strong security posture across organizations.

Universal check identifier system for cross-framework security control mapping

This project consists of a security audit analysis for the fictional company Botium Toys.

Repository for Cybrary Security Engineering & Cyber Risk – includes notes, docs, scenarios, extras, and certificate of completion.