Isms Audit Expert

You'd reach for this when you need to run ISO 27001 audits or gap assessments and want structured guidance through the process. It walks you through evidence collection, control evaluation, and finding documentation using the standard's Annex A framework. The approach is methodical: it'll help you map controls, assess maturity levels, and generate proper audit reports. Honestly, it's most useful if you're already familiar with ISMS concepts but want consistency across audits or need to train junior auditors. The skill keeps you honest about scope and ensures you don't skip the boring but necessary parts of compliance work.

skills.sh installs: 806
GitHub stars: 29.5K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add alirezarezvani/claude-skills --skill isms-audit-expert --agent claude-code

Installs into .claude/skills of the current project.

Files

ISMS Audit Expert

Internal and external ISMS audit management for ISO 27001 compliance verification, security control assessment, and certification support.

Audit Program Management
Audit Execution
Control Assessment
Finding Management
Certification Support
Tools
References

Audit Program Management

Risk-Based Audit Schedule

Risk Level	Audit Frequency	Examples
Critical	Quarterly	Privileged access, vulnerability management, logging
High	Semi-annual	Access control, incident response, encryption
Medium	Annual	Policies, awareness training, physical security
Low	Annual	Documentation, asset inventory