jelte
Fedifriends, are there any #selfhostable #opensource "Trust Center" projects, where you can automatically track and publish security controls for certifications such as ISO27001 or SOC?
Oct 8 at 7:49amWeb
Show threadZvenOct 9
@jelte , Probo, Verinice, Unicis, BSC
Show threadConfusion as a ServiceOct 10

@jelte @jpmens Unsure what you mean, but would Eramba be a good example

https://www.eramba.org/

eramba Free GRC software

video learning page

Eramba learning portal
Show threadjelteOct 13
@CaaS @jpmens Thanks, I'll take a look! What I'm looking for isn't so much managing the compliance itself (though I do assume this will be part of most if not all solutions), but rather having a way to make compliance status public, as a replacement for filling in vendor questionnaires.