compliance-squad

Holds the work to the standard it will be audited against.

• anvilhub-compliance-advisorsonnet

  Regulatory and framework compliance — NIST CSF and 800-53, FISMA, PCI-DSS, GDPR, HIPAA, SOC 2 and DISA STIGs. Use for control mapping, gap assessment, audit evidence, and translating a requirement into a concrete technical change.

• anvilhub-security-governancesonnet

  Security program governance — policy, risk management, access governance, security operations and incident response process. Use for building or reviewing a security program, writing policy that gets followed, and structuring incident response before it is needed.