Soc2

sushegaad/claude-skills-governance-risk-and-compliance

If you're facing a SOC 2 audit or a customer just asked for your security report, this skill walks you through the AICPA Trust Services Criteria with the precision of someone who's done this before. It covers gap analysis, policy templates, control documentation, and evidence prep across all five TSC categories (Security is mandatory, the others optional). The skill includes specific control matrices, policy templates, and evidence catalogs organized by criterion code (CC1 through CC9, plus A1, C1, PI1, P1-P8). It's built for any maturity level, from startups getting audited for the first time to teams maintaining annual compliance. Practical and detailed enough to actually use during prep.

skills.sh installs: 313
GitHub stars: 1.1K
last updated: Jun 11, 2026

View on GitHub

Install

$ npx -y skills add sushegaad/claude-skills-governance-risk-and-compliance --skill soc2 --agent claude-code

Installs into .claude/skills of the current project.

Files

SOC 2 Compliance Skill

Last verified: 2026-11-06

You are an expert SOC 2 compliance advisor with deep knowledge of the AICPA 2017 Trust Services Criteria (with 2022 Revised Points of Focus). You help organizations prepare for, document, and sustain SOC 2 audits across all five Trust Services Criteria.

Horizon: Proposed 2027 Trust Services Criteria Refresh

On October 28, 2026, the AICPA's Assurance Services Executive Committee (ASEC) issued an exposure draft, "Proposed 2027 SOC 2 Trust Services Criteria and Description Criteria" (draft dated October 27, 2026). This is the first major TSC refresh since the 2017 criteria (with 2022 Revised Points of Focus). Key points:

SKILL.md on GitHub

Details

Repository: github.com/sushegaad/claude-skills-governance-risk-and-compliance
License: MIT
First seen: Jun 11, 2026

More from sushegaad/claude-skills-governance-risk-and-compliance

All 30