Isms Audit Expert
If you're running ISO 27001 audits or preparing for certification, this gives you structured workflows for the entire audit lifecycle. It covers risk-based audit scheduling, control testing procedures for all 93 Annex A controls, evidence collection methods, and finding classification templates. The working papers and sample outputs are detailed enough to use directly, which is helpful if you're building an audit program from scratch or need to standardize how your team documents control tests. It's built for internal auditors and security teams managing ISMS compliance, though external auditors could use the checklists too. The control testing workflows are thorough but assume you already understand ISO 27001 fundamentals.
- skills.sh installs
- 131
- GitHub stars
- 1.1K
- last updated
- Aug 21, 2026
Install
$ npx -y skills add borghei/claude-skills --skill isms-audit-expert --agent claude-codeInstalls into .claude/skills of the current project.
Files
ISMS Audit Expert
Internal and external ISMS audit management for ISO 27001 compliance verification, security control assessment, and certification support.
Clarify First
Before planning or executing the audit, settle the inputs below. When one is missing or vague and would change the result, ask about it; when it wouldn't, use a sensible default and say which one you used.
- Audit type: internal annual, Stage 1, Stage 2, surveillance, or recertification (sets the scope and checklist depth).
- Controls in scope: which Annex A controls / SoA coverage for this engagement (drives the schedule and testing).
- Risk ratings and prior findings: per-control risk and outstanding nonconformities (picks audit frequency and sample size).
Ask about the two or three inputs that matter most for this request, not the whole list. If the user wants a result straight away, produce it and state your assumptions at the top.
Audit Program Management
Risk-Based Audit Schedule
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/borghei/claude-skills
- Category
- Testing & QA
- First seen
- Jun 3, 2026
More from borghei/claude-skills
All 82- Jira Expert131
- Codex Cli Specialist130
- Mdr 745 Specialist124
- Quality Manager Qms Iso13485122
- Atlassian Admin121
- Fda Consultant Specialist121
- Product Manager121
- Quality Manager Qmr121
- Product Designer4.9K
- Business Intelligence1.6K
- Brand Strategist782
- Data Analyst620
- Cfo Advisor455
- Data Scientist447
- Growth Marketer431
- Hr Business Partner397
- Solutions Architect371
- Senior Pm365
- Senior Frontend351
- Talent Acquisition345
- Product Manager Toolkit344
- Operations Manager322
- Senior Fullstack318
- Senior Mobile313
Recommended
More Testing & QA
alicloud-media-mpscinience/alicloud-skillsManage Alibaba Cloud ApsaraVideo for Media Processing (MPS/MTS) resources and workflows via OpenAPI/SDK. Use for media ingest and metadata tasks, transcoding/sn128skills.sh installs
typescript-type-expertgracefullight/stock-checkerAdvanced TypeScript type system specialist for complex generics, conditional types, template literals, type inference, performance optimization, and type-level 128skills.sh installs
nango-function-buildernangohq/skillsBuilds Nango Functions (TypeScript createAction/createSync) with checkpoint-first sync patterns, action and sync references, project/root checks, deletion strat120skills.sh installs
Agent Browseram-will/codex-skillsA fast Rust-based headless browser automation CLI with Node.js fallback that enables AI agents to navigate, click, type, and snapshot pages via structured comma0skills.sh installsFrontend Responsive Design Standardsam-will/codex-skillsBuild responsive, mobile-first layouts using fluid containers, flexible units, media queries, and touch-friendly design that works across all screen sizes. Use 0skills.sh installs
Integrating Stripe Paymentsbountydotnew/bounty.newComplete workflow for integrating Stripe payments (subscriptions or one-time) with Convex + Next.js. Includes hosted checkout, webhooks, UI components, and test0skills.sh installs