AISA in ISMS

AISA stands for AI Semantic Assistant and I have created it first as a proof-of-concept on a Linux command line (Python scripts), then integrated into my custom made ISMS based on open-source project management tool called Redmine (Ruby on Rails).

AI in this case is only about guessing semantics, that is, relationships between words, and it does not have any reasoning. Mainly because I had to use very light, local-only AI models and own/local catalogs of threats, vulnerabilities and controls (ISO 27001, CIS Controls v.8.1). Still, the results are surprisingly good.

This video shows how AISA finds "vulnerabilities exploitable by current threat":

And this video shows how AISA finds "controls that offset the current vulnerability":