If you're implementing ISO 27701 for privacy compliance or extending an existing ISO 27001 system, this skill knows both the 2019 extension edition and the new 2025 standalone version. It'll walk you through gap analysis with actual control tables, generate policies and Statements of Applicability, and help with DPIAs and Records of Processing Activities. The skill defaults to 2025 but switches to 2019 guidance if you mention an existing ISO 27001 cert. It's built for compliance and legal teams but speaks clearly enough for technical implementers. The GDPR mapping is solid, which matters since demonstrating regulatory compliance is the whole point of getting certified.

skills.sh installs
290
GitHub stars
1.1K
last updated
Jun 11, 2026

Install

$ npx -y skills add sushegaad/claude-skills-governance-risk-and-compliance --skill iso27701 --agent claude-code

Installs into .claude/skills of the current project.

Files

ISO 27701 Privacy Information Management Skill

Last verified: 2026-10-03

You are an expert ISO 27701 Lead Implementer and PIMS advisor assisting a privacy, legal, or compliance team. You have deep knowledge of both ISO 27701:2019 (extension edition) and ISO 27701:2025 (standalone edition) and can help with gap analysis, PIMS implementation, control guidance, SoA generation, DPIA support, and regulatory alignment (GDPR, CCPA, LGPD, PIPEDA).


How to Respond

Version selection — read context carefully before defaulting:

  • If the user mentions an existing ISO 27001 certification or asks about "extending" ISO 27001, lead with the 2019 edition extension model (ISO 27001 is a prerequisite in 2019; ISO 27701:2019 cannot be certified standalone). Then note that the 2025 edition is now standalone and integration is still fully supported.
  • If the user is starting fresh with no existing ISO 27001, default to 2025 (standalone standard, ISO 27001 no longer a prerequisite).
  • If unspecified and context is unclear, default to 2025 but note the 2019 edition is still the most widely certified and requires ISO 27001 as a prerequisite.

Sponsors

Details

Repository
github.com/sushegaad/claude-skills-governance-risk-and-compliance
License
MIT
First seen
Jun 11, 2026

More from sushegaad/claude-skills-governance-risk-and-compliance

All 30

Recommended

1juliusbrussee avatarcavemanjuliusbrussee/cavemanUltra-compressed communication mode. Cuts output tokens 65% (measured) by speaking like caveman while keeping full technical accuracy. Supports intensity levels618.3Kskills.sh installs
2mattpocock avatargrill-memattpocock/skillsA relentless interview to sharpen a plan or design.1.5Mskills.sh installs
3shadcn avatarimproveshadcn/improveSurvey any codebase as a senior advisor and produce prioritized, self-contained implementation plans for OTHER models/agents to execute. Strictly read-only on s40Kskills.sh installs
4obra avatarsystematic-debuggingobra/superpowersUse when encountering any bug, test failure, or unexpected behavior, before proposing fixes326.7Kskills.sh installs
5forrestchang avatarkarpathy-guidelinesforrestchang/andrej-karpathy-skillsBehavioral guidelines to reduce common LLM coding mistakes through explicit assumptions, simplicity, and verifiable success criteria.17.9Kskills.sh installs
6vercel-labs avatarfind-skillsvercel-labs/skillsHelps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express int4.3Mskills.sh installs