secure-controls-framework

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

Read-only, client-side viewer for the Secure Controls Framework (SCF) — browse 1,500+ controls, ~250 framework mappings, maturity levels, risks & threats. No backend; your workbook never leaves the browser.

Compliance policies in Git, audit-ready PDFs on every push — free for internal use.

SmartCompliance — AI-powered Policy to SCF Mapping System Intelligent compliance management tool that uses RAG and semantic similarity to map company policies to the Secure Controls Framework (SCF) with explainable confidence scoring, visual dashboards, and PDF reporting.

Prioritized 22-phase Kill Chain model for achieving NIST 800-171 R3 compliance and CMMC Level 2 certification.

Assessment Objective (AO)-level analysis and implementation tracker for transitioning from NIST 800-171 R2 to NIST 800-171 R3.