Instructions file
Instructions for nathanimphilipos/synergos-grc, covering synergos grc — working rules, goal, source evidence structure, ground rules and narrative format (per control).
Instructions file
Instructions for nathanimphilipos/synergos-grc, covering synergos grc — working rules, goal, source evidence structure, ground rules and narrative format (per control).
Plugin Claude Code
GRC (Governance, Risk, and Compliance) domain knowledge — frameworks, controls, audits, evidence, ConMon, cross-framework mappings, document review, and operational workflows. Cloud-agnostic.
Agent
A read-only research agent for deep GRC reference lookups across frameworks, mappings, and audit procedures.
Command
Simulate a full 3PAO assessment for a specific control. Walks through every assessment objective, checks evidence sufficiency, generates interview questions, and produces SAR-style findings.
Command
Audit preparation checklists and guidance by audit type.
Command
Authorization boundary definition guidance.
Command
Generate a recurring compliance activity calendar by framework.
Command
Continuous monitoring guidance by topic.
Command
Look up controls by framework and ID or keyword.
Command
Draft deviation requests, risk acceptances, or false positive justifications.
Command
Generate an evidence preparation checklist for audits or assessments.
Command
Perform a structured gap analysis against a compliance framework.
Command
Model control inheritance based on service model and provider stack.
Command
Run an evidence-based risk assessment using the ISORA question set. For each question, searches control-family folders and SOC 2 Evidence to determine if the control is actually in place — not narrative quality, but operational reality.
Command
Map controls between compliance frameworks using NIST 800-53 as the universal hub.
Command
Analyze overlap and gaps across multiple compliance frameworks.
Command
OSCAL structure, readiness, and conversion guidance.
Command
Simulate a GovRAMP PMO quarterly snapshot review for a specific control. Evaluates each sub-part, assigns Pass/Pass with Concerns/Fail verdicts, compares against historical PMO feedback, and scores maturity.
Command
POA&M management help and templates.
Command
NIST 800-53 Rev 4 to Rev 5 transition guidance.
Command
Review a CRM for coverage, clarity, and completeness.
Command
Review a control implementation narrative for completeness and quality.
Command
Review POA&M entries or structure for completeness.
Command
Review a policy document for structure, coverage, and language quality.