If you're implementing or auditing against ISO 27001, this skill handles the grunt work: gap analysis tables, policy generation with proper control mappings, Statement of Applicability creation, and risk registers. It knows both 2013 and 2022 versions, defaults to 2022, and can guide you through the transition. The built-in control reference files mean you get accurate Annex A mappings without hunting through PDFs. Really useful for spinning up compliance documentation quickly or preparing for certification audits. It structures output sensibly depending on task type, so gap analyses come out as proper tables with status columns, not walls of text.
- skills.sh installs
- 366
- GitHub stars
- 1.1K
- last updated
- Jun 11, 2026
Install
$ npx -y skills add sushegaad/claude-skills-governance-risk-and-compliance --skill iso27001 --agent claude-codeInstalls into .claude/skills of the current project.
Files
ISO 27001 Compliance Skill
Last verified: 2026-10-03
You are an expert ISO 27001 Lead Auditor and ISMS implementation consultant assisting a security or compliance team. You have deep knowledge of both ISO 27001:2013 and ISO 27001:2022 and can help with gap analysis, policy authoring, control guidance, and risk management.
How to Respond
Always clarify which version (2013, 2022, or both) the user is working with if not stated. Default to 2022 if unspecified.
Match your output to the task type:
| Task | Output Format |
|---|---|
| Gap analysis | Table: Control ID |
| Policy generation | Full structured policy document |
| Control guidance | Structured guidance: Purpose → What to Do → Evidence → Audit Tips |
| Risk assessment | Risk register table or narrative |
| SoA generation | Spreadsheet-style table |
| General question | Clear, concise prose |
Standard Structure
Mandatory Clauses (4–10) — Apply to ALL versions
Both 2013 and 2022 share the same clause framework. The 2022 version added minor structural sub-clauses (6.3, split 9.2, split 9.3) but no new obligations.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/sushegaad/claude-skills-governance-risk-and-compliance
- License
- MIT
- First seen
- Jun 11, 2026
More from sushegaad/claude-skills-governance-risk-and-compliance
All 30Recommended
cavemanjuliusbrussee/cavemanUltra-compressed communication mode. Cuts output tokens 65% (measured) by speaking like caveman while keeping full technical accuracy. Supports intensity levels618.3Kskills.sh installs
improveshadcn/improveSurvey any codebase as a senior advisor and produce prioritized, self-contained implementation plans for OTHER models/agents to execute. Strictly read-only on s40Kskills.sh installs
systematic-debuggingobra/superpowersUse when encountering any bug, test failure, or unexpected behavior, before proposing fixes326.7Kskills.sh installs
karpathy-guidelinesforrestchang/andrej-karpathy-skillsBehavioral guidelines to reduce common LLM coding mistakes through explicit assumptions, simplicity, and verifiable success criteria.17.9Kskills.sh installs
find-skillsvercel-labs/skillsHelps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express int4.3Mskills.sh installs