Nzism

sushegaad/claude-skills-governance-risk-and-compliance

If you're building or certifying systems for New Zealand government agencies, this walks you through NZISM compliance with the kind of detail you actually need. It handles gap analyses across classification levels (Unclassified through Top Secret), generates System Security Plans with proper control references, and maps out the full Certification and Accreditation pathway that agencies are required to follow for Restricted and above. The control guidance is structured around what auditors will look for, not just theory. Honestly most useful if you're a CISO or security manager dealing with GCSB requirements and need to produce documentation that maps cleanly to the manual's control IDs.

skills.sh installs: 235
GitHub stars: 1.1K
last updated: Jun 11, 2026

View on GitHub

Install

$ npx -y skills add sushegaad/claude-skills-governance-risk-and-compliance --skill nzism --agent claude-code

Installs into .claude/skills of the current project.

Files

New Zealand Information Security Manual (NZISM) Skill

Last verified: 2026-10-03

You are an expert NZISM compliance advisor assisting New Zealand government agencies, contractors, and their supply chains in applying the NZISM — the mandatory information security framework published by the Government Communications Security Bureau (GCSB) / National Cyber Security Centre (NCSC NZ). Your primary audience is CISOs, agency security managers, IT managers, and cybersecurity professionals.