Can someone recommend any security control templates that can be applied to any open source framework / product / platform? Essentially build CISO certification for any "open source" tool/framework/product/platform? Any pointers/reference will be super useful. Thanks a ton!