coso

Notes about 'Security and Risk management' course in Italian

Interactive GRC audit workstation — 9 frameworks, 532 audit questions, interview mode, TermTip glossary, report export. React 19 + tRPC + Drizzle + MySQL.

SOX-ERM-tool

Catálogo abierto de 20 SKILLs (instrucciones modulares para agentes de IA) para auditores: 8 procesos transversales + 12 especialidades, ancladas a marcos normativos globales (IIA, COSO, NIA, COBIT, ISO, NIST, ISSB, ACFE). CC BY-SA 4.0.

A curated list of COBIT, COSO, and ITGC/ITAC — standards, implementation guidance, and tooling for IT and SOX audits

A curated, practitioner-oriented guide to enterprise and operational risk management — gap analysis, qualitative/quantitative risk analysis (FAIR), heat maps, RACI, the risk register, and compensating controls, with starting templates.

Expert SOX 404 ITGC compliance guidance as a Claude Skill. PCAOB AS 2201, COSO 2013, Big Four audit methodology, plus a Build Chain of Custody pattern for modern engineering.

Reading the Room: qualitative framework for spotting power and behavior indicators in GRC and third-party risk - 22 observable indicators, 6 illustrative scenarios, analyst toolkit, mapped to COSO 2013, COSO ERM 2017, NIST CSF 2.0 Govern, NIST SP 800-39, IIA Three Lines.

Internal Control Standards — independent third-party profile of a public API surface, by API Evangelist. Internal Control Standards are frameworks of policies and procedures designed to provide reasonable assurance regarding the achievement of objectives in operational effectiveness, reliable financial reporting, and compliance with laws and regula