{"repo":"CPAtoCybersecurity/csf_profile","free":true,"listed":false,"github":"https://github.com/CPAtoCybersecurity/csf_profile","clone":"git clone https://github.com/CPAtoCybersecurity/csf_profile.git","description":"NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization","language":"JavaScript","stars":49,"topics":["compliance","csf","cybersecurity","grc","nist","risk-management","security-assessment","audit","cybersecurity-framework","governance-risk-compliance"],"license":null,"category":"security-tools","readme_excerpt":"CSF Profile — Free, Open-Source NIST CSF 2.0 Assessment Tool A free, open-source, self-hosted toolkit for running NIST Cybersecurity Framework (CSF) 2.0 profile assessments — a lightweight alternative to commercial GRC platforms. Track outcomes, assign ownership, document observations and findings, score current and target states, and export for visualization. All locally, with your data staying on your machine. 🚀 Try the Live Demo — no install required. Explore a populated assessment of the fictional company \"Alma Security\" in seconds. Your Capstone in 5 Steps Building your GRC portfolio artifact for a Simply Cyber Academy course? Here's the whole arc: 1. Open the app — csf-profile-app.pages.dev (no install), or pick another door below. 2. Explore the sample — a comprehensive CSF 2.0 assessment for fictional \"Alma Security\" is pre-loaded; check the Dashboard radar to see where you're headed. 3. Score your scope — pick your subcategories and score current vs. target state using the built-in 0-10 scoring legend. 4. Document observations and findings — record what you examined, who you interviewed, what you tested, and link evidence artifacts. 5. Export and report — export your CSV workpapers and write up results; use the example audit report as your template. That deliverable is your portfolio piece. 🏛️ As Seen On NIST.gov 👆 Click the image above to view a short explainer video. 🎬 As Seen On CISO Tradecraft! 👆 Watch the overview with G Mark Hardy. 👆 Click the image above","default_branch":null,"files":null,"tree":[],"storefront":"/r/CPAtoCybersecurity","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/CPAtoCybersecurity/csf_profile/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}