MyOpenCRE: allow for mapping CREs to a standard automatically
@Neth766 is already working on this.
Since Apr 5, 2026.
- Dominant language
- Python
- Stars
- 180
- Forks
- 137
- Avg merge
- 3d 23h
- Merged PRs (30d)
- 21
Description
MyOpenCRE is a nifty addition to the project that allows users to add their own mappings.
Using MyOpenCRE, users can download a CSV of all existing CREs, then map their own standard sections/subsections and finally re-upload for processing.
Mapping standards to CREs is a time consuming process. Instead we could use a bit of generative AI to do the mapping ourselves.
This feature would use a combination of AI techniques to derive highly accurate mappings between a CRE and the described information of the control of a Standard.
Stretch goal: If a mapping is not possible automatically or if a CRE does not exist for that mapping, the application should identify the controls for which a mapping could not be produced
Example Outcome: MyOpenCRE can map automatically the following standards:
- PCI-DSS
- DORA
- SOC2
Stretch goal example outcome: MyOpenCRE can partially map the OWASP AI Exchange and the top 10 for LLMs while identifying the controls that require human intervention or the release of new CREs.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.