Defensive Security

Compliance & Risk Readiness

Correlate a compliance self-assessment, a CIS benchmark, cloud posture, quantitative risk analysis, and a generated policy document into one GRC package.

compliance-risk-readiness6 stepsgrccomplianceriskchain

The largest questionnaire-style workflow in this app - every field maps to a distinct step (compliance framework, CIS category, cloud provider, 5 FAIR risk factors, policy type and organization name), so nothing is collected that isn't actually used.

Tool chain

  1. Compliance Checkercompliance-checker
  2. CIS Benchmark Checkercis-benchmark-checker
  3. Cloud Security Posture Checkercloud-posture-checker
  4. Risk Assessment Calculatorrisk-calculator
  5. Security Policy Generatorpolicy-generator
  6. Security Config Generatorsecurity-config-generator