cybnity Goto Github PK

Name: CYBNITY

Type: Organization

Bio: We’re developing a platform helping security teams to design and govern easily their cybersecurity program, and to create resilient digital systems.

Location: France

Blog: http://www.cybnity.org

Let's Make Safe Digital World!

CYBNITY open source cybersecurity platform help you to govern the cyber defense of your digital assets for operate them with complete serenity.

PURPOSE

Welcome on the CYBNITY open souce program which target to deliver a security platform efficient and flexible for each company with need to design its Information Security Management System (ISMS) and/or to operate digital systems in a secure way against the cyberthreats.

Our Mission

We develop an open source technological defense platform to help the security teams designing and managing companies’ security solutions, create sustainable digital systems with efficient responses against to cyber-threats.

How It Works?

The CYBNITY platform makes it possible to design the strategic governance of the digital assets cybersecurity, and to pilot tactical operational protection systems guaranteeing the neutralization of security incidents.

WHAT CYBERSECURITY PROBLEM THE PROJECT SOLVE?

For any organization with complex areas to defend:

Who want to design, implement, manage and keep control of any custom Information Security Management System (ISMS):

WHAT WE BUILD?

We develop a technology, deployable as a platform (in-house, on-cloud, in hybrid environment) based on a modular architecture, that support security activities performed by security teams (e.g CISO, ISSO, Risk Executive, RSSI...) with easy implementation of standard (e.g NIST, ISO/IEC 27001, IEC 62443...).

Modular architecture

Security activities supported

Our Design Approach

Several security domains are covered by our targeted architecture model, implementing a Domain-Driven-Development approach.

Operational Cockpits (User Interfaces)

We capitalize experiences and best defense practices (e.g military or police systems/methods) to build tactical tools integared suite allowing dynamic build according to the deployment context of companies and/or to a risk situation in progress.

Applications (domain contexts)

THE PROGRAM

The Program & Projects Governance

Our Methods

BUILD PROCESS

The idea creation process implemented by the project (for definition of more relevant features to develop for enhance the solution), is based on a mix of inspirations coming from proprietary solutions available on the market (maturity level to have), standards and frameworks relevant for the companies (e.g regulation to support), problems and need meet by customers (e.g companies with digital assets, electronic solutions manufacturers) and contextual drivers (e.g countries conflicts increasing cyber-attacks).

DELIVERY PROCESS

Support & Docs

Technical documentations for solution designers, developers, maintainers, testers;
Software development requirements;
Functional & technical requirements of CYBNITY solutions
- Architecture requirements
- Security requirements
  - Application Privacy & Security Controls

OTHER RESOURCES

COMMUNICATION CHANNELS

Information web site about the project latest news, and documentations about concept, requirements, business/technology/systems architectures...
CYBNITY LinkedIn page where project news are promoted to professional ecosystem.

CYBNITY's Projects

.github

Presentation of the CYBNITY organization profile

domain-access-control

All the features and services realized by the Access Control bounded context relative to the application domain, including specification library (e.g api), components implementation (e.g software implementation packages) and deployable systems (e.g operable component on infrastructure types).

domain-api-mgt

All the features and services realized by the API Management bounded context relative to the application domain, including specification library (e.g api), components implementation (e.g software implementation packages) and deployable systems (e.g operable component on infrastructure types).

domain-asset-control

All the features and services realized by the Asset Control bounded context relative to the application domain, including specification library (e.g api), components implementation (e.g software implementation packages) and deployable systems (e.g operable component on infrastructure types).

domain-audit-mgt

All the features and services realized by the security Audit bounded context relative to the application domain, including specification library (e.g api), components implementation (e.g software implementation packages) and deployable systems (e.g operable component on infrastructure types).

domain-awareness-mgt

All the features and services realized by the Awareness & Culture bounded context relative to the application domain, including specification library (e.g api), components implementation (e.g software implementation packages) and deployable systems (e.g operable component on infrastructure types).

domain-behavior-intelligence

All the features and services realized by the Behavior Intelligence bounded context relative to the application domain, including specification library (e.g api), components implementation (e.g software implementation packages) and deployable systems (e.g operable component on infrastructure types).

domain-compliance-mgt

All the features and services realized by the Compliance and Certification bounded context relative to the application domain, including specification library (e.g api), components implementation (e.g software implementation packages) and deployable systems (e.g operable component on infrastructure types).

domain-detection-intelligence

All the features and services realized by the security Detection Intelligence bounded context relative to the application domain, including specification library (e.g api), components implementation (e.g software implementation packages) and deployable systems (e.g operable component on infrastructure types).

domain-governance-mgt

All the features and services realized by the cybersecurity Governance bounded context relative to the application domain, including specification library (e.g api), components implementation (e.g software implementation packages) and deployable systems (e.g operable component on infrastructure types).

domain-posture-prevention-mgt

All the features and services realized by the Posture & Prevention bounded context relative to the application domain, including specification library (e.g api), components implementation (e.g software implementation packages) and deployable systems (e.g operable component on infrastructure types).

domain-quality-mgt

All the features and services realized by the Quality bounded context relative to the application domain, including specification library (e.g api), components implementation (e.g software implementation packages) and deployable systems (e.g operable component on infrastructure types).

domain-response-mgt

All the features and services realized by the Response bounded context relative to the application domain, including specification library (e.g api), components implementation (e.g software implementation packages) and deployable systems (e.g operable component on infrastructure types).

domain-risk-mgt

All the features and services realized by the Risk Management bounded context relative to the application domain, including specification library (e.g api), components implementation (e.g software implementation packages) and deployable systems (e.g operable component on infrastructure types).

domain-security-event-mgt

All the features and services realized by the Security Event Management bounded context relative to the application domain, including specification library (e.g api), components implementation (e.g software implementation packages) and deployable systems (e.g operable component on infrastructure types).

domain-threat-intelligence

All the features and services realized by the Threat Intelligence bounded context relative to the application domain, including specification library (e.g api), components implementation (e.g software implementation packages) and deployable systems (e.g operable component on infrastructure types).

domain-trial-training-mgt

All the features and services realized by the security exercises bounded context relative to the application domain, including specification library (e.g api), components implementation (e.g software implementation packages) and deployable systems (e.g operable component on infrastructure types).

domain-vulnerability-mgt

All the features and services realized by the Vulnerability bounded context relative to the application domain, including specification library (e.g api), components implementation (e.g software implementation packages) and deployable systems (e.g operable component on infrastructure types).

foundation

Open source cyber-serenity platform that help the security teams designing and managing companies' ISMS, and which allow them to create resilient digital systems with efficient responses against to cyber-threats.

foundation-techstack

Catalog of technologies selected by CYBNITY as referential frameworks and technologies versions authorized for CYBNITY systems development

iac-helm-charts

Helm charts project supporting the configuration management (repeatable application installation) of CYBNITY systems and their provisioning management (K8S resources: networking, load balancing, db, users, permissions...) as Infrastructure-As-Code (IaC) automating installation on multiples Kubernetes clusters (orchestration managed environments).

mpp-demonstrators

Dedicated to the build and delivery of demonstration models (e.g technology POC, UI demonstrator) allowing to make ideas validation and to take decision about opportunity of technologies use.