Information Security Manager Iso27001

If you're building or auditing an ISMS for a healthcare or medical device company, this gives you executable Python scripts for risk assessment and compliance checking against ISO 27001:2022. The risk_assessment.py tool does threat modeling and calculates risk scores, while compliance_checker.py runs gap analysis across control domains. It includes healthcare-specific templates and walks through the full certification workflow from scoping to incident response. The workflows are detailed enough to actually follow, with validation checkpoints at each step. Best for teams that need structured ISO 27001 implementation rather than just policy templates, though you'll still need to adapt the scripts to your actual asset inventory and threat landscape.

skills.sh installs: 164
GitHub stars: 1.1K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add borghei/claude-skills --skill information-security-manager-iso27001 --agent claude-code

Installs into .claude/skills of the current project.

Files

Information Security Manager - ISO 27001

Implement and manage Information Security Management Systems (ISMS) aligned with ISO 27001:2022 and healthcare regulatory requirements. Covers the full lifecycle: scoping, risk assessment per Clause 6.1.2, selection and implementation of the 93 Annex A controls across four themes, certification readiness, incident response, and cross-framework mapping to SOC 2, NIST CSF 2.0, and NIS2 — with cloud-specific (AWS/Azure/GCP) and Zero Trust guidance.