Plugins
3 pluginscurated
ISO 27001 Audit Pipeline
Pressure-test an ISMS and generate audit evidence for ISO 27001 certification readiness.
9 skills · plugin
@alirezarezvani
Ra Qm Team
14 regulatory affairs & quality management skills for HealthTech/MedTech: ISO 13485 QMS, MDR 2017/745, FDA 510(k)/PMA, GDPR/DSGVO, ISO 27001 ISMS, CAPA management, risk management, clinical evaluation, SOC 2 compliance.
10 skills · plugin
@alirezarezvani
Compliance Os
Compliance OS — meta-orchestrator for multi-framework compliance programs spanning 9 frameworks (ISO 27001, ISO 13485, ISO 42001, ISO 14971, EU AI Act, MDR 745, GDPR, SOC 2, FDA QSR). Framework selector, cross-framework control mapper, audit simulator, and consolidated evidence-pool generator (stdlib Python), plus 3 cs-* compliance agents and 3 /cs:* readiness commands.
9 skills · plugin
Results for “iso-27001”
16 skills
mukul975-2 iso-27701-pims
Guides ISO 27701 Privacy Information Management System implementation extending ISO 27001/27002. Covers Clause 5 PIMS-specific requirements, Clause 6 PIMS guidance for ISO 27002, Clause 7 PII controller guidance (Annex A), Clause 8 PII processor guidance (Annex B), gap assessment, and certification path. Keywords: ISO 27701, PIMS, privacy management system, ISO 27001 extension, certification, Annex A, Annex B.
228 · bundle
alirezarezvani compliance-readiness
Pressure-tests any compliance program with six forcing questions before adopting a new framework, planning an audit cycle, or signing off on certification readiness.
20.4k
More results
30eggis specialized-compliance-auditor
Expert technical compliance auditor specializing in SOC 2, ISO 27001, HIPAA, and PCI-DSS audits — from readiness assessment through evidence collection to certification.
2
alirezarezvani quality-manager-qmr
Provides quality system governance, management review leadership, regulatory compliance oversight, and quality performance monitoring per ISO 13485 Clause 5.5.2 for HealthTech and MedTech companies.
20.4k · bundle
shulkwisec information-disclosure-deep-dive
Complete PortSwigger deep-dive with exact payloads for every lab variant including zero-day techniques
21 · bundle
github csharp-mstest
Write effective unit tests with modern MSTest 3.x/4.x, covering assertion APIs, data-driven tests, and test lifecycle best practices.
36.2k
affaan-m accessibility
Design, implement, and audit inclusive digital products using WCAG 2.2 Level AA standards, with guidance for Web, iOS, and Android platforms.
226k
comeonoliver harden
Strengthen interfaces against edge cases, errors, internationalization issues, and real-world usage scenarios that break idealized designs.
61
lucian55 cuijian-skill
崔健（摇滚）认知与表达框架（压缩蒸馏）：地下与现场感、隐喻与直白并置… 触发：一块红布 等。非煽动违法
9 · bundle
construct-ai-primary continuous-improvement
Use when identifying opportunities for incremental improvements in processes, systems, or practices. This skill provides a Kaizen-style framework for ongoing improvement across all areas of operation.
0
mukul975 building-identity-governance-lifecycle-process
Designs and automates identity governance lifecycle processes including joiner-mover-leaver workflows, role mining, access requests, periodic recertification, and orphaned account remediation using IGA platforms.
24.6k · bundle
curiositech alphago-deep-rl
Strategic patterns for solving intractable problems through cascading approximation, self-improvement, and heterogeneous evaluation from DeepMind's AlphaGo system
10 · bundle
theheavenlyd3mon 37signals-way
Build lean, opinionated products using the 37signals philosophy from Getting Real, Rework, and Shape Up. Use when the user mentions "Getting Real", "Rework", "Shape Up", "37signals", "Basecamp method", "six-week cycles", "fixed time variable scope", "appetite vs estimates", "betting table", "breadboarding", "fat marker sketch", "build less", "underdo the competition", or "opinionated software". Also trigger when cutting scope to ship faster, running small teams, avoiding long-term roadmaps, or eliminating meetings. Covers shaping, betting, building, and the art of saying no. For MVP validation, see lean-startup. For design sprints, see design-sprint.
28 · bundle
mmehdi0606 harden
Strengthen interfaces against edge cases, errors, internationalization issues, and real-world usage scenarios that break idealized designs.
2
shulkwisec cors-misconfiguration-complete-deep-dive
Provides a structured deep-dive into CORS misconfiguration vulnerabilities with exact payloads for every PortSwigger lab variant, including zero-day escalation techniques and blue-team detection guidance.
21 · bundle
levicarlosz nist-csf
Expert NIST Cybersecurity Framework (CSF) advisor covering CSF 2.0 and CSF 1.1. Use this skill whenever a user asks about NIST CSF, cybersecurity risk management, the six CSF functions (Govern, Identify, Protect, Detect, Respond, Recover), CSF profiles, implementation tiers, gap assessments, organizational profiles, community profiles, CSF core subcategories, informative references, or mapping to other frameworks (NIST SP 800-53, ISO 27001, CIS Controls, COBIT). Also trigger for questions like "how do I implement NIST CSF?", "what does CSF 2.0 change?", "help me build a CSF profile", "how do I assess my cybersecurity posture?", or any request involving organizational cybersecurity risk strategy or framework alignment.
2 · bundle