Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Skill Claude CodeCodex
Expert HIPAA compliance assistant for healthcare and software contexts. Use this skill whenever the user mentions HIPAA, PHI (Protected Health Information), ePHI, covered entities, business associates, healthcare data privacy, medical records, health information security, BAA (Business Associate Agreements), or any…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Plugin Claude Code
Expert Australian Information Security Manual (ISM) advisor for Australian government entities, contractors and supply chains. Gap analysis, system authorisation, IRAP preparation, control scoping, and ASD compliance guidance.
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Skill Claude CodeCodex
Expert Australian Information Security Manual (ISM) advisor for government entities and their supply chains. Use for ISM control selection, gap analysis, system authorisation, IRAP assessment preparation, security documentation, and ASD compliance. Triggers on: ISM controls, ASD compliance, IRAP assessment, PROTECTED…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Plugin Claude Code
Expert ISO 27001 gap analysis, policy writing, Annex A control guidance, SoA generation, and risk register creation for both 2013 and 2022 versions.
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Skill Claude CodeCodex
Expert ISO 27001 compliance assistant for security and compliance teams. Use this skill whenever a user asks about ISO 27001 or ISO/IEC 27001, including any of the following: gap analysis, auditing, compliance assessments, control checklists, policy writing, document generation, Statement of Applicability (SoA), risk…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Plugin Claude Code
ISO 27701 Privacy Information Management System (PIMS) advisor — gap analysis, PIMS implementation, Annex A control guidance, SoA generation, privacy risk assessment, GDPR alignment, and certification readiness for ISO/IEC 27701:2025 (standalone PIMS) and 27701:2019.
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Skill Claude CodeCodex
Expert ISO 27701 Privacy Information Management System (PIMS) compliance advisor. Use this skill whenever a user asks about ISO/IEC 27701:2025, ISO/IEC 27701:2019, privacy information management, PIMS certification, PII controller or processor obligations, privacy risk assessment, Statement of Applicability for…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Plugin Claude Code
ISO 42001 AI Management System (AIMS) advisor — gap analysis, AI risk assessment, AI system impact assessment (AISIA), Annex A control guidance, SoA generation, policy writing, and certification readiness for ISO/IEC 42001:2023.
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Skill Claude CodeCodex
Expert ISO 42001 AI Management System (AIMS) compliance advisor. Use this skill whenever a user asks about ISO/IEC 42001:2023, AI governance, AI management systems, AI risk assessment, AI system impact assessment, Annex A controls for AI, Statement of Applicability for AI systems, AI policy, responsible AI, AI…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Plugin Claude Code
Expert ITAR compliance advisor for US defense contractors, exporters, and manufacturers — USML classification, DDTC registration, export license applications (DSP-5/73/94), Technical Assistance Agreements (TAA), Manufacturing License Agreements (MLA), brokering regulations (Part 129), deemed export rules for foreign…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Skill Claude CodeCodex
Expert ITAR compliance advisor for US defense contractors, exporters, and manufacturers. Use this skill for any question about 22 CFR Parts 120-130, the United States Munitions List (USML), DDTC registration, export license applications (DSP-5/73/94), Technical Assistance Agreements (TAA), Manufacturing License…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Plugin Claude Code
Expert LGPD compliance advisor for Brazil's data protection law (Law 13,709/2018). Covers legal bases, data subject rights, ANPD obligations, DPO appointment, breach notification, DPIA, international transfers including Brazil-EU mutual adequacy (January 2026 — no SCCs/BCRs needed for EU transfers), penalties up to 2%.
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Skill Claude CodeCodex
Expert LGPD compliance advisor for Brazil's Lei Geral de Proteção de Dados (Law 13,709/2018). Use this skill whenever a user asks about LGPD, Brazilian data protection, ANPD, personal data processing in Brazil, data subject rights under Brazilian law, legal bases for processing, sensitive data handling, DPO…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Plugin Claude Code
EU NIS2 Directive (Directive (EU) 2022/2555) compliance advisor for essential and important entities — entity classification, Art. 21 risk management measures, Art. 23 incident reporting timelines (24h/72h/1 month), Art. 20 governance obligations, supply chain security (Art. 26), gap assessments, policy drafting, ISO…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Skill Claude CodeCodex
EU NIS2 Directive (Directive (EU) 2022/2555) compliance advisor for essential and important entities: entity classification, Art. 21 risk management measures, Art. 23 incident reporting timelines (24h/72h/1 month), Art. 20 governance obligations, supply chain security (Art. 21(2)(d); coordinated risk assessments Art.…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Plugin Claude Code
NIST SP 800-53 Rev 5 compliance advisor — all 20 control families, Low/Moderate/High baseline selection, FIPS 199/200 categorization, control tailoring, ODVs, overlays, privacy controls (PT family), supply chain (SR family), SSP narrative writing, assessment procedures (SP 800-53A), POA&M management, RMF steps (SP 800.
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Skill Claude CodeCodex
NIST SP 800-53 Rev 5 compliance advisor — all 20 control families (AC, AT, AU, CA, CM, CP, IA, IR, MA, MP, PE, PL, PM, PS, PT, RA, SA, SC, SI, SR), Low/Moderate/High baseline selection, FIPS 199/200 system categorization, control tailoring and overlays, privacy controls (PT family), supply chain risk management (SR…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Plugin Claude Code
Expert NIST AI Risk Management Framework (AI RMF 1.0) advisor — gap assessments, organizational profiles, GOVERN/MAP/MEASURE/MANAGE function guidance, AI risk registers, trustworthiness evaluation, and cross-framework mapping to ISO 42001, EU AI Act, and NIST CSF.
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Skill Claude CodeCodex
Expert NIST AI Risk Management Framework (AI RMF 1.0) advisor covering all four functions: GOVERN, MAP, MEASURE, MANAGE. Use this skill whenever a user asks about NIST AI RMF, AI risk management, AI trustworthiness, GOVERN function, MAP function, MEASURE function, MANAGE function, AI RMF Playbook, AI risk profiles…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Plugin Claude Code
NIST Cybersecurity Framework (CSF 2.0 and 1.1) advisor — gap assessments, organisational profiles, implementation tiers, roadmaps, cross-framework mapping, and cybersecurity policy generation.
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Skill Claude CodeCodex
Expert NIST Cybersecurity Framework (CSF) advisor covering CSF 2.0 and CSF 1.1. Use this skill whenever a user asks about NIST CSF, cybersecurity risk management, the six CSF functions (Govern, Identify, Protect, Detect, Respond, Recover), CSF profiles, implementation tiers, gap assessments, organizational profiles…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Plugin Claude Code
Expert New Zealand Information Security Manual (NZISM) advisor for NZ government agencies. Gap analysis, system certification & accreditation, classification framework guidance, control implementation, and GCSB/NCSC NZ compliance.
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Skill Claude CodeCodex
Expert New Zealand Information Security Manual (NZISM) advisor for NZ government agencies and their supply chains. Use for NZISM control guidance, gap analysis, agency security obligations, classification framework (Unclassified through Top Secret), security risk management, system certification, and GCSB/NCSC NZ…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Plugin Claude Code
PCI DSS v4.0.1 compliance advisor — CDE scoping, SAQ selection, gap assessments, control implementation guidance, QSA audit preparation, and remediation planning.