Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Plugin Claude Code
Claude Code skills for Governance, Risk & Compliance — ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF, PCI DSS, TSA Cybersecurity, ISO 42001 AI Management System, ISO 27701 Privacy Information Management, DORA Digital Operational Resilience, DPDPA India Digital Personal Data Protection, CMMC 2.0 Cybersecurity…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Plugin Claude Code
California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) compliance advisor — business threshold analysis, consumer rights fulfillment, ADMT opt-out (Jan 2027 deadline), cybersecurity audits and risk assessments (live Jan 2026), enforcement precedents (Disney $2.75M record), privacy notice…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Skill Claude CodeCodex
California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) compliance advisor — business threshold analysis, consumer rights fulfillment (access, delete, correct, opt-out of sale/sharing, limit SPI, ADMT opt-out), privacy notice drafting, service provider vs. contractor vs. third-party…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Plugin Claude Code
CIS Controls v8 (CIS Top 18) advisor — Implementation Group scoping (IG1/IG2/IG3), gap assessments across all 153 safeguards, asset/software inventory, data protection, secure configuration, MFA and access control, vulnerability management, audit log management, malware defenses, incident response, penetration testing.
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Skill Claude CodeCodex
Expert CIS Controls v8 (CIS Top 18) advisor — implementation group scoping (IG1/IG2/IG3), control gap assessments, safeguard-level guidance, asset inventory, software inventory, data protection, secure configuration, account management, access control, continuous vulnerability management, audit log management, email…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Plugin Claude Code
Expert CMMC 2.0 compliance advisor for US defense contractors — gap analysis, SSP drafting, POA&M management, SPRS scoring, CUI scoping, and C3PAO assessment readiness for Level 1, 2, and 3.
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Skill Claude CodeCodex
Expert CMMC 2.0 (Cybersecurity Maturity Model Certification) advisor for US defense contractors and subcontractors in the Defense Industrial Base (DIB). Use this skill whenever a user asks about CMMC 2.0, CMMC Level 1, Level 2, or Level 3, DoD cybersecurity compliance, NIST SP 800-171, CUI (Controlled Unclassified…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Plugin Claude Code
EU CSRD (Corporate Sustainability Reporting Directive, EU 2022/2464) compliance advisor — scope & threshold analysis (large PIEs, other large, listed SMEs, non-EU), double materiality assessment (DMA), ESRS gap assessment, ESRS E1–E5 environmental disclosures, ESRS S1–S4 social disclosures, ESRS G1 governance, Scope…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Skill Claude CodeCodex
Expert CSRD (Corporate Sustainability Reporting Directive, EU 2022/2464) compliance advisor. Use this skill whenever a user asks about CSRD, European Sustainability Reporting Standards (ESRS), double materiality assessment, sustainability reporting obligations, ESG disclosure, CSRD scope and thresholds, value chain…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Plugin Claude Code
DORA (Regulation (EU) 2022/2554) compliance advisor for EU financial entities — ICT risk management framework, incident classification and reporting, TLPT, ICT third-party risk, Register of Information, and all adopted RTS/ITS with article-level citations.
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Skill Claude CodeCodex
Expert DORA (Regulation (EU) 2022/2554 — Digital Operational Resilience Act) compliance advisor for EU financial entities. Use this skill whenever a user asks about DORA compliance, ICT risk management frameworks, ICT incident classification or reporting, threat-led penetration testing (TLPT), ICT third-party risk…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Plugin Claude Code
India's Digital Personal Data Protection Act, 2023 (DPDPA) and DPDP Rules, 2025 compliance advisor — gap analysis, notice and consent requirements, Data Principal rights, breach notification, children's data, Significant Data Fiduciary obligations, cross-border transfers, Data Protection Board proceedings, and GDPR…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Skill Claude CodeCodex
Expert India Digital Personal Data Protection Act, 2023 (DPDPA) compliance advisor. Use this skill whenever a user asks about the DPDPA, DPDP Act, DPDP Rules 2025, India data privacy law, Data Fiduciary obligations, Data Principal rights, Significant Data Fiduciary, Data Protection Board of India, consent under DPDPA…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Plugin Claude Code
EAR compliance advisor — ECCN classification, EAR99 determination, EAR vs ITAR jurisdiction, license requirement analysis, all 14 license exceptions, restricted party screening, deemed exports, FDPR, de minimis, 10 General Prohibitions, SNAP-R licensing, VSD, civil/criminal penalties, and Export Compliance Programme…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Skill Claude CodeCodex
Export Administration Regulations (EAR, 15 CFR Parts 730-774) compliance advisor — ECCN classification across all 10 CCL categories and 5 product groups (A-E), EAR99 determination, jurisdiction analysis (EAR vs ITAR order of review), license requirement analysis via Country Chart, all license exceptions (LVS, GBS…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Plugin Claude Code
EU AI Act (Regulation (EU) 2024/1689) compliance advisor — risk classification across all four tiers, all 9 prohibited practices (Art. 5), Annex III high-risk use cases, provider and deployer obligations (Arts. 9–17, 26), GPAI model obligations and systemic risk (Arts. 51–55, enforcement Aug 2, 2026), conformity…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Skill Claude CodeCodex
EU AI Act (Regulation (EU) 2024/1689) compliance advisor — risk classification across all four tiers, all 9 prohibited practices (Art. 5, including the nudification/CSAM prohibition from Dec 2, 2026), all 8 Annex III high-risk use case areas, provider and deployer obligations (Arts. 9–17, 26), GPAI model obligations…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Plugin Claude Code
Expert EU Cyber Resilience Act (CRA) advisor for Regulation (EU) 2024/2847. Covers product classification (Default/Class I/Class II), Annex I essential requirements gap analysis, conformity assessment (self-assessment vs Notified Body), CE marking, SBOM, vulnerability handling, 24/72-hour ENISA reporting, support…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Skill Claude CodeCodex
Expert EU Cyber Resilience Act (CRA) advisor for Regulation (EU) 2024/2847 — mandatory cybersecurity and vulnerability handling requirements for all products with digital elements (PDEs) sold in the EU. Use this skill for gap analysis, product classification (Default / Class I / Class II), conformity assessment route…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Plugin Claude Code
End-to-end FedRAMP authorization guidance under CR26 — Certification Classes A-D, FedRAMP 20x pathway, readiness assessments, SSP narratives, POA&M management, NIST 800-53 Rev 5 control mapping, OSCAL mandate, and ConMon support.
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Skill Claude CodeCodex
Expert guidance for FedRAMP certification and compliance under CR26 (FedRAMP Consolidated Rules for 2026). Use this skill whenever a user asks about FedRAMP authorization, ATO (Authority to Operate), cloud security for federal government, NIST SP 800-53 controls, CSP compliance, or any of the core FedRAMP document…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Plugin Claude Code
GDPR compliance assistant — code and system audits, privacy notice drafting, DPAs, DPIAs, data flow reviews, and authoritative article-cited Q&A.
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Skill Claude CodeCodex
Expert GDPR compliance assistant covering all four core workflows: (1) auditing code and systems for GDPR violations, (2) drafting GDPR-compliant documents such as privacy policies, Data Processing Agreements (DPAs), and consent notices, (3) answering GDPR compliance questions with authoritative article citations, and…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Plugin Claude Code
HIPAA compliance advisor covering Privacy Rule, Security Rule, and Breach Notification — document generation, technical safeguards for cloud, and breach response.