I've been looking at things in this space recently for a different use-case (defining processes for infosec compliance as part of SOC2 / ISO27001 certification). I trialed a number of tools already…