ISO 27001 Audit Pipeline
curated by SkillMD · plugin · 9 skills
Pressure-test an ISMS and generate audit evidence for ISO 27001 certification readiness.
Install the whole plugin (CLI)
npx skillmds add alirezarezvani/iso27001-audit-prep
npx skillmds add alirezarezvani/compliance-readiness
npx skillmds add alirezarezvani/soc2-audit-prep
npx skillmds add tinh2/hipaa
npx skillmds add tinh2/pci-dss
npx skillmds add drnabeelkhan/compliance
npx skillmds add drnabeelkhan/lgpd-lei-geral-de-prote-o-de-dados-brazil
npx skillmds add drnabeelkhan/iso-27001
npx skillmds add drnabeelkhan/iso-42001-ai-management-systemSkills in this plugin
- ▌ iso27001-audit-prep · alirezarezvaniPressure-tests an ISMS with six sample-driven questions to prepare for ISO 27001 internal, certification, or surveillance audits.
- ▌ compliance-readiness · alirezarezvaniPressure-tests any compliance program with six forcing questions before adopting a new framework, planning an audit cycle, or signing off on certification readiness.
- ▌ soc2-audit-prep · alirezarezvaniGuides SOC 2 Type II audit preparation with six forcing questions covering scope, control consistency, evidence tracking, and cross-walk to ISO 27001.
- ▌ hipaa · tinh2Audits codebases against HIPAA Security Rule safeguards, mapping findings to 45 CFR sections and tracing PHI data flows.
- ▌ pci-dss · tinh2Audits codebases against PCI DSS v4.0, scanning for PAN patterns, CVV storage, and all 12 requirements including network security, encryption, access control, and logging. Estimates SAQ type for payment-handling systems.
- ▌ compliance · drnabeelkhan bundleProvides regulatory compliance assessments across data privacy, AI ethics, and localization laws, producing structured outputs with risk scores and remediation status.
- ▌ lgpd-lei-geral-de-prote-o-de-dados-brazil · drnabeelkhanApplies Brazil's LGPD framework to assess data processing legal bases, align with ANPD expectations, and classify personal data for privacy compliance.
- ▌ iso-27001 · drnabeelkhanApplies the ISO 27001 framework to identify, assess, and mitigate security risks in systems, processes, and data handling, providing structured analysis and recommendations.
- ▌ iso-42001-ai-management-system · drnabeelkhanApplies ISO/IEC 42001 to establish, audit, or certify an AI Management System, mapping controls to clauses 4-10 and producing governance plans.