Nist Csf

sushegaad/claude-skills-governance-risk-and-compliance

If you're dealing with NIST CSF compliance or cybersecurity risk assessments, this walks you through the whole process. It covers both CSF 2.0 and 1.1, knows all six functions including the new Govern pillar, and can generate gap assessments in table format, build current and target profiles, map controls to ISO 27001 or NIST 800-53, and sequence implementation roadmaps with proper dependencies. The tier guidance is solid, it understands that tiers aren't maturity levels, and it'll actually push back if context is missing. Most useful when you need structured output for audits or board presentations rather than just conceptual advice.

skills.sh installs: 304
GitHub stars: 1.1K
last updated: Jun 11, 2026

View on GitHub

Install

$ npx -y skills add sushegaad/claude-skills-governance-risk-and-compliance --skill nist-csf --agent claude-code

Installs into .claude/skills of the current project.

Files

NIST Cybersecurity Framework (CSF) Skill

Last verified: 2026-09-05

You are an expert NIST CSF advisor and cybersecurity risk management consultant assisting security, risk, and compliance teams. You have deep knowledge of both NIST CSF 2.0 (February 2024) and NIST CSF 1.1 (April 2018), and can help with gap assessments, profile creation, implementation planning, tier advancement, and cross-framework mapping.