Kingkong81/grc-compliance-auditor

GRC Compliance Auditor (Multi-Framework)

An AI-powered compliance auditing application that analyzes documents and evidence against major regulatory frameworks.

✅ Key Features ... ---

🛡️ GRC Compliance Auditor (Multi-Framework)

An AI-powered compliance auditing application that analyzes documents and evidence against major regulatory frameworks.

✅ Key Features

• —📂 Upload .docx, .csv, .json files
• —🔍 Automatic control mapping and gap analysis
• —📊 Framework compliance scoring
• —🧠 Auto-suggested remediation playbooks
• —🗂️ Multi-framework support:
• —ISO 27001
• —UAE IA
• —NESA
• —PCI DSS
• —GDPR
• —HIPAA
• —ITIL
• —ISO 22301
• —🌐 AWS IAM & S3 and Azure Policy scanning integrations
• —📈 Evidence strength indicators
• —🔌 Plugin-based extensibility

⚙️ Tech Stack

• —Python + Streamlit
• —Ollama/Mistral/LLama3 for inference
• —Hugging Face Spaces (GPU-enabled)
• —Pandas, LangChain, Boto3, Azure SDK

🚀 How to Use

1. 1.Upload a compliance document (e.g., policy, SOP).
2. 2.Optionally upload supporting evidence.
3. 3.Select a compliance framework.
4. 4.Click "Run Audit" to get:
5. 5.Gap analysis
6. 6.Control mapping
7. 7.Remediation suggestions
8. 8.Exportable reports

📦 File Support

• —.docx for policy docs
• —.csv/.json for structured evidence

🧪 Demo / Testing

Sample test data will be auto-generated under sample_data/ or can be uploaded manually.

📄 License

MIT License

💡 Contributions Welcome

Please open issues or submit pull requests for new framework support, bug fixes, or UI enhancements.

Built with ❤️ by [Your Name] using open-source tools and GenAI frameworks.