# intuitem/ciso-assistant-community

CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 150+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.

Repository: https://github.com/intuitem/ciso-assistant-community
Canonical: https://ross.abutalabs.com/products/ciso-assistant-community
Homepage: https://intuitem.com
Language: Python
License: NOASSERTION
License Family: other
Topics: compliance, grc, soc2, gdpr, audit, iso27001, cis, dora, risk-management, nist, bsi, cybersecurity, isms, ebios-rm, nis2, security, mcp, quantification, automation, llm
Last push: 2026-08-26T20:45:26+00:00

## Health v2 (maintenance only)
Score: 90/100 (v2, computed 2026-09-03T02:39:23.370411+00:00)
- activity 99, release rhythm 87, longevity 77
- inputs: {"age_days": 1078, "days_push": 7, "days_rel": 7, "gap_med": 2.0, "n_releases_24m": 249}
- flags: no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 4376, forks 823 (observed 2026-08-28T04:08:46.847795+00:00)

## What it is
CISO Assistant is an open-source, self-hostable GRC (Governance, Risk, and Compliance) platform covering risk management, compliance and audit, AppSec, third-party risk, privacy, and reporting. It ships with 150+ built-in regulatory and security frameworks (ISO 27001, NIST CSF, SOC 2, DORA, GDPR, etc.) with automatic control mapping, an API-first design, and an optional local AI engine.

## Use cases
- manage ISO 27001 compliance and ISMS documentation
- run risk assessments and track remediation plans
- map controls automatically across multiple frameworks like SOC 2 and NIST CSF
- manage audits with centralized evidence collection
- perform third-party risk management (TPRM)
- conduct GDPR privacy impact assessments
- generate compliance reports for auditors
- replace spreadsheet-based GRC tracking

## When to choose
- you need a unified GRC hub instead of scattered Excel sheets
- you must comply with multiple frameworks and want automatic cross-mapping
- you want a self-hosted or on-premises compliance tool for sensitive data
- you need API-first automation and import/export across formats
- you want built-in risk assessment and audit workflows out of the box

## When to avoid
- you need a lightweight CLI-only compliance checker
- you require a fully managed SaaS with vendor-held certifications rather than self-hosting
- your needs are limited to a single narrow framework with no risk or audit management
- you cannot accept the AGPLv3 license terms

## Facets
- artifact type: application
- maturity: active
- function: security, workflow-automation, analytics, api-framework, llm-inference, mcp
- domain: security, legal, self-hosted
- platform: self-hosted, cloud, cross-platform
- tags: grc, compliance, iso27001, soc2, nist-csf, gdpr, audit-management, risk-assessment, tprm, appsec, isms, framework-mapping, agpl, reporting, risk-management, automation, web-server, docker

## Member repositories
- intuitem/ciso-assistant-community (main) score 90

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:08:46.847795+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T18:21:19.810144+00:00, confidence not recorded.
  - readme: https://github.com/intuitem/ciso-assistant-community (fetched 2026-08-28T04:08:46.847795+00:00, sha c8eddaeb80bc)
  - homepage: https://intuitem.com (fetched 2026-08-29T09:09:42.087834+00:00, sha cac9cbc633e6)
  - site_page: https://intuitem.com/about (fetched 2026-08-29T09:09:42.101529+00:00, sha 654fd765d9b2)
  - site_page: https://intuitem.com/pricing (fetched 2026-08-29T09:09:42.097399+00:00, sha de1994af87eb)
  - site_page: https://intuitem.com/faq (fetched 2026-08-29T09:09:42.099318+00:00, sha 35020b13fc76)
- Data as of 2026-08-30T08:39:29.467469+00:00.