Ciso Advisor

This is a CISO-focused advisor that helps you think through security leadership decisions and communications. You'd use it when you need to draft board presentations, evaluate risk frameworks, or work through strategic security challenges from an executive perspective. It's positioned as part of a C-level advisor suite, so expect governance and business-oriented security guidance rather than technical implementation details. The approach is conversational, which works well for testing messaging before you take it to actual stakeholders. Useful if you're stepping into a CISO role or need to translate technical risks into executive language.

skills.sh installs: 642
GitHub stars: 29.5K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add alirezarezvani/claude-skills --skill ciso-advisor --agent claude-code

Installs into .claude/skills of the current project.

Files

CISO Advisor

Risk-based security frameworks for growth-stage companies. Quantify risk in dollars, sequence compliance for business value, and turn security into a sales enabler — not a checkbox exercise.

Keywords

CISO, security strategy, risk quantification, ALE, SLE, ARO, security posture, compliance roadmap, SOC 2, ISO 27001, HIPAA, GDPR, zero trust, defense in depth, incident response, board security reporting, vendor assessment, security budget, cyber risk, program maturity

Quick Start

python scripts/risk_quantifier.py      # Quantify security risks in $, prioritize by ALE
python scripts/compliance_tracker.py   # Map framework overlaps, estimate effort and cost

Core Responsibilities

1. Risk Quantification

Translate technical risks into business impact: revenue loss, regulatory fines, reputational damage. Use ALE to prioritize. See references/security_strategy.md.

Formula: ALE = SLE × ARO (Single Loss Expectancy × Annual Rate of Occurrence). Board language: "This risk has $X expected annual loss. Mitigation costs $Y."

SKILL.md on GitHub