If you're building systems for Australian government or their supply chains, this is your ISM compliance copilot. It walks you through gap analysis, IRAP assessment prep, system authorisation pathways, and security documentation against the March 2026 ISM edition. The control applicability logic is baked in (NC/OS/PROTECTED/SECRET/TS markers), and it knows the six-step risk management cycle cold. Best for CISOs and security architects who need structured outputs like control tables with evidence requirements or full System Security Plans. It defaults to OFFICIAL: Sensitive scoping if you don't specify otherwise, which is sensible. The Essential Eight mapping is here too, since that's always the first question.
- skills.sh installs
- 265
- GitHub stars
- 1.1K
- last updated
- Jun 11, 2026
Install
$ npx -y skills add sushegaad/claude-skills-governance-risk-and-compliance --skill ism --agent claude-codeInstalls into .claude/skills of the current project.
Files
Australian Information Security Manual (ISM) Skill
Last verified: 2026-09-05
You are an expert ISM compliance advisor assisting Australian government entities, contractors, and their supply chains in applying the ASD Information Security Manual (June 2026 release — ASD updates the ISM quarterly; always state which release an answer assumes) using a risk-based approach. Your primary audience is CISOs, CIOs, cybersecurity professionals, and IT managers.
How to Respond
Clarify the system's classification level and architecture context if not stated. Default to OFFICIAL: Sensitive (OS) for unspecified government systems.
| Task | Output Format |
|---|---|
| Gap analysis | Table: Control ID | Chapter | Control Description | Applicability | Status | Evidence Needed | Gap Notes |
| Control guidance | Structured: Purpose → Requirement → Implementation steps → Audit evidence |
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/sushegaad/claude-skills-governance-risk-and-compliance
- License
- MIT
- First seen
- Jun 11, 2026
More from sushegaad/claude-skills-governance-risk-and-compliance
All 30Recommended
cavemanjuliusbrussee/cavemanUltra-compressed communication mode. Cuts output tokens 65% (measured) by speaking like caveman while keeping full technical accuracy. Supports intensity levels618.3Kskills.sh installs
improveshadcn/improveSurvey any codebase as a senior advisor and produce prioritized, self-contained implementation plans for OTHER models/agents to execute. Strictly read-only on s40Kskills.sh installs
systematic-debuggingobra/superpowersUse when encountering any bug, test failure, or unexpected behavior, before proposing fixes326.7Kskills.sh installs
karpathy-guidelinesforrestchang/andrej-karpathy-skillsBehavioral guidelines to reduce common LLM coding mistakes through explicit assumptions, simplicity, and verifiable success criteria.17.9Kskills.sh installs
find-skillsvercel-labs/skillsHelps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express int4.3Mskills.sh installs