houseofichigo/hoi-security-compliance
v0.1.0MIT
Threat modelling, control evidence and incident triage preparation.
hoi-control-evidence
Use when asked to map selected evidence to the agreed controls. Not an audit opinion, certification or permission to alter systems.
hoi-incident-triage
Use when asked to prepare an incident triage brief from selected observations. Not for autonomous incident response, public notification or attribution of an attacker.
hoi-threat-model
Use when asked to prepare a threat model for the selected system boundary. Not authorization for scanning, exploitation or production changes.