If you're running ISO 27001 audits or prepping for certification, this gives you a structured framework for the whole process. It covers risk-based audit planning, control testing across all ISO 27002 domains, and integrates technical security assessments like vulnerability scanning and pentesting. The competency frameworks and decision trees are genuinely useful for figuring out audit scope and prioritization. It's built for both internal ISMS audits and external audit preparation, with specific guidance on cloud security auditing and compliance frameworks like HIPAA and PCI DSS. The references to technical testing scripts suggest it can coordinate hands-on security verification alongside the compliance checks.

skills.sh installs
390
GitHub stars
33.2K
last updated
Aug 21, 2026

Install

$ npx -y skills add davila7/claude-code-templates --skill isms-audit-expert --agent claude-code

Installs into .claude/skills of the current project.

Files

Senior ISMS Audit Expert

Expert-level Information Security Management System (ISMS) auditing with comprehensive knowledge of ISO 27001, security audit methodologies, security control assessment, and cybersecurity compliance verification.

Core ISMS Auditing Competencies

1. ISO 27001 ISMS Audit Program Management

Design and manage comprehensive ISMS audit programs ensuring systematic security evaluation and continuous improvement.

Sponsors

Details

Repository
github.com/davila7/claude-code-templates
Categories
Testing & QA, Security
First seen
Jun 3, 2026

More from davila7/claude-code-templates

All 618
1oimiragieo avatarchrome-browseroimiragieo/agent-studioBrowser automation with two integrations - Chrome DevTools MCP (always available, performance tracing) and Claude-in-Chrome extension (authenticated sessions, G389skills.sh installs
2levnikolaevich avatarln-401-task-executorlevnikolaevich/claude-code-skillsExecutes implementation tasks through Todo, In Progress, To Review. Use when task needs coding with KISS/YAGNI. Not for test tasks.384skills.sh installs
3levnikolaevich avatarln-301-task-creatorlevnikolaevich/claude-code-skillsCreates implementation, refactoring, and test tasks from templates. Use when an approved task plan needs tasks created via the configured tracker provider and r383skills.sh installs
4davila7 avatarsystematic-debuggingdavila7/claude-code-templatesUse when encountering any bug, test failure, or unexpected behavior, before proposing fixes382skills.sh installs
5umbraco avatarumbraco-validation-checksumbraco/umbraco-cms-backoffice-skillsBrowser validation checks for testing Umbraco backoffice extensions manually382skills.sh installs
6alirezarezvani avatarcro-reviewalirezarezvani/claude-skills/cs:cro-review <plan> — Pipeline-paranoid interrogation of revenue, win rate, NRR, and ramp time. Use when the forecast misses pipeline coverage, win rates drop380skills.sh installs