461 production-ready OPA Rego policies for CIS, DISA STIGs, NIST, NERC-CIP, IEC 62443, ISO 27001, SOC 2, PCI-DSS, EU AI Act, GEISA, and more — Apache 2.0, Rego v1, ready to load.
-
Updated
Jul 28, 2026 - Open Policy Agent
461 production-ready OPA Rego policies for CIS, DISA STIGs, NIST, NERC-CIP, IEC 62443, ISO 27001, SOC 2, PCI-DSS, EU AI Act, GEISA, and more — Apache 2.0, Rego v1, ready to load.
ICS/OT Exposure Intelligence Platform | 8 Protocols | Purdue Model | Asset Inventory | Threat Intel (APT Groups) | Risk Matrix | 72 Hardening Controls | Login System | IEC 62443, NIST 800-82, NERC CIP | Shodan-aware
MuleSoft API-led reference architecture for utility grid operations — integrates SCADA, weather, DER, and field systems with governed agent coordination. Reference/demonstration designs, not a production deployment.
Reference API designs unifying grid, renewable, and building-optimization data (dsgrid / OpenEMS / REopt). Reference/demo architecture — not a production or certified-compliant system.
Open-source NERC CIP compliance templates and data room for energy transition infrastructure. Maintained by Infrastructure Velocity, an SDVOSB.
OT, ICS, and IIoT Tool with asset discovery, SBOM and supply chain visibility, MITRE ATT&CK ICS mapping, zone and conduit policy with blast radius analysis, evidence locker and safety gates, compliant with IEC 62443, NIST 800-82, and NERC CIP, supporting golden image drift detection and IoT lifecycle management.
Production-grade, Python-first guides for automating energy trade matching, settlement reconciliation, ISO/RTO reporting, and regulatory filing. A static Eleventy site.
7 OT/ICS tabletop exercise skills for AI agents — follows agentskills.io spec. Compatible with Claude Code, GitHub Copilot, Cursor, VS Code, Gemini CLI, and 30+ agent platforms.
AGPL-3.0 reference impl of EnergyTech audit-stream + 2-axis BES/OT-IT vault. Runs Continental Grid Operator × VendorE GridSense 6.x trajectory end-to-end. Anchors the FIRST Suite numeric regulatory wall-clock invariant (CIP-008 1-hour) in working code.
EnergyTech audit-stream Operator: per-grid-operations AI-decision events hash-chained for NERC CIP + FERC + TSA Security Directives + state PUC + DOE EO 14028 evidence. Every event carries bes_cyber_system_categorization + ot_it_boundary. First Suite verifier with regulatory wall-clock invariant (CIP-008 1-hour reporting window).
An open-source Critical Infrastructure Protection (CIP) portfolio and OT security simulation lab. Maintained for continuing education and defense sector career preparation.
Enterprise-grade defense framework for AI agents. Five-layer pipeline (sanitizer + injection detector + RBAC + audit + human gate). MCP-native. HIPAA / SOC 2 / NERC CIP ready. Apache 2.0.
EnergyTech compliance Evidence Bundle profile: NERC CIP-002 through CIP-014 + TSA SD-2021-02C + DOE EO 14028 + FERC Order 2222 + state PUC prudency review. 12 obligation families × 53 required evidence kinds — largest Suite evidence bundle (reflects energy's multi-layered regulatory scope).
Add a description, image, and links to the nerc-cip topic page so that developers can more easily learn about it.
To associate your repository with the nerc-cip topic, visit your repo's landing page and select "manage topics."