Security assurance
Neural ISM is a proposed browser-based, framework-agnostic security control assurance workbench with first-class support for the Australian Government Information Security Manual (ISM). Its local-first design keeps workspace content in the browser while making implementation narratives, reference-only evidence, attestations, user-managed controls and portable exports easier to review.
Local-first assurance
Neural ISM is designed to help security practitioners, GRC teams, system owners and assessors search controls, record implementation narratives, link reference-only evidence and prepare deliberate exports without treating a spreadsheet as the canonical data model.
Privacy boundary
The repository describes a browser-only application with IndexedDB persistence, explicit local import/export and no workspace API. Evidence is represented as references and metadata, not stored evidence files; browser storage is not a backup or an independently verifiable audit trail.
Current implementation
These capabilities are documented in the latest repository snapshot. They describe the current project scope and test evidence, not an independent acceptance test of a deployed application.
Browse, search and sort requirements; record applicability, implementation responses, supplementary narratives, review observations and unverified local assertions.
Keep official releases, imported framework packs and user-authored controls distinct, with immutable custom revisions and directional mappings that do not silently propagate response status.
Use versioned JSON backup/restore, filtered JSON and Markdown packages, framework-pack JSON/CSV and extended XLSX export with explicit warnings where a format cannot carry the full workspace.
Synthetic Chromium checks cover local persistence, safe rendering, no off-origin requests in tested flows, framework revision migration, backup restore and supported-profile Annex round trips.
Latest repository progress
The latest main branch adds the in-app user guide after the Phase 3 assurance hardening and Phase 4 multi-release catalogue foundations. The project remains in implementation and evidence-building mode.
Phase 2 local-first workflows are accepted. Phase 3 implementation covers browser verification, review indicators, framework packs, immutable revisions, extended exports and recovery work. Phase 4 establishes pinned multi-release catalogue foundations and historical workspace boundaries.
Gate 3 still requires negative and malformed Annex fixtures, archive migration and storage-loss evidence, URL sanitisation, accessibility, non-Chromium browser coverage, performance evidence and a controlled deployment decision.
Neural ISM is not an ASD product. The repository does not claim ASD endorsement, accreditation, independent security assessment or qualified ASD-compatible Annex support.
Explore Neural ISM
The source repository is private, and no public application URL is advertised on this project page until the documented release gates are satisfied.
Return to the project index for Neural ISM, ArchWeave, RiskStudio and future technical work.
Use the contact pathway for questions about McHughCyber's technical projects and research.