Governance, Risk & Regulatory Compliance Platform

Enterprise GRC & Audit Lab
100+ Real-World Compliance Audits

Connect administrative policy enforcement with technical SIEM telemetry. Conduct comprehensive audits across NIST CSF 2.0, ISO/IEC 27001:2022, SOC 2 Type II, HIPAA Security Rule, and FedRAMP controls.

GitHub Repository

Overall Compliance Score 78% COMPLIANT

78

Passed

14

Gaps / Partial

8

Failed

Mapped to 100 audited controls across active industry standards.

NIST CSF 2.0 106 Subcategories

Govern (GV), Identify (ID), Protect (PR), Detect (DE), Respond (RS), and Recover (RC).

Audit Status: 24/28 Passed

ISO 27001:2022 93 Annex A

Organizational (A.5), People (A.6), Physical (A.7), and Technological (A.8) controls.

Audit Status: 22/26 Passed

SOC 2 TYPE II CC1 - CC9

Trust Services Criteria: Security, Availability, Processing Integrity, Confidentiality, Privacy.

Audit Status: 18/22 Passed

HIPAA & FEDRAMP NIST 800-53

PHI safeguards, ePHI transmission security, AC/AU audit log retention, and contingency plans.

Audit Status: 14/24 Passed

GRC Audit Evidence Evaluation Engine

Submit Audit Findings & Corrective Action Plans (CAP)

Submit compliance determinations and SIEM evidence artifacts to grade student audits.

Auditor Mode: Active Session

Enterprise Risk Register & 5x5 Heat Map

Evaluate Inherent Risk vs. Residual Risk after applying security controls ($Risk = Likelihood \times Impact$).

Interactive 5x5 Risk Heat Matrix

Low (5)

Med (10)

High (15)

Crit (20)

Crit (25)
[RSK-01]

Low (4)

Med (8)

Med (12)
[RSK-03]

High (16)

Crit (20)

Low (3)

Low (6)

Med (9)

Med (12)

High (15)
[RSK-02]

Low (2)

Low (4)

Low (6)

Med (8)

Med (10)

Low (1)

Low (2)

Low (3)

Low (4)

Low (5)

← Likelihood (1: Rare to 5: Almost Certain) → Impact (1 to 5) ↑

Active Corporate Risks

[RSK-01] Kerberoasting & Weak Service Passwords Score: 25 (Critical)

SPN accounts without AES encryption allow offline brute force. Treatment: Mitigate via Group Managed Service Accounts (gMSA).

[RSK-02] Insufficient SIEM Log Retention (< 90 Days) Score: 15 (High)

Breaches exceeding 30-day dwell times cannot be forensically investigated. Treatment: Expand Splunk cold storage retention.

[RSK-03] Unpatched External VPN Gateway Score: 12 (Medium)

Firmware version vulnerable to CVE-2024-21887. Treatment: Apply security update during maintenance window.

SIEM Technical Evidence & Audit Automation

GRC isn't just paperwork. Modern enterprise compliance requires continuous technical proof. Learn how to write Splunk SPL and Sentinel KQL queries that generate automated evidence reports for auditors.

Splunk SPL: SOC 2 CC6.1 Access Audit

ISO A.8.2

Audit all privileged account creations and group modifications in Active Directory over the last 30 days:

index=wineventlog EventCode IN (4720, 4728, 4732)
| stats count earliest(_time) as first_seen latest(_time) as last_seen 
    by TargetUserName, SubjectUserName, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M")
| eval last_seen=strftime(last_seen, "%Y-%m-%d %H:%M")

Sentinel KQL: NIST DE.CM-1 Incident Response Proof

NIST CSF 2.0

Extract high and medium incidents to demonstrate incident response MTTR (Mean Time to Respond) to auditors:

SecurityIncident
| where TimeGenerated > ago(90d)
| where Severity in ("High", "Medium")
| extend ResolutionTimeMinutes = datetime_diff('minute', ClosedTime, CreatedTime)
| summarize AvgMTTR = avg(ResolutionTimeMinutes), TotalIncidents = count() by Severity

One Unified Cybersecurity Platform

The Cybertection Training Center Ecosystem

Every platform, laboratory environment, AI agent, and resource from our master directory — connected in one central portal for students and cybersecurity professionals.