Compliance Program Tracker

Compliance Program Tracker

Purpose

Produce a structured, attorney-ready draft compliance-program tracker for a regulatory framework or standard. The skill maps the framework's requirements to the organization's controls, owners, and evidence; builds an audit calendar of upcoming dates and obligations; surfaces evidence gaps and remediation items; and assembles a priority view for the next audit.

This skill provides workflow discipline and analytical structure. It produces draft legal work product for attorney review. This is not legal advice, a compliance certification, or an audit opinion. The tracker supports ongoing compliance management; it does not assert that the program is compliant.

Use When

• A user says "track our compliance with this framework," "help us prepare for our SOC 2 audit," or "build a compliance dashboard and evidence plan."
• An organization needs an ongoing tracker — a control inventory, an audit calendar, and evidence management — rather than a one-time gap analysis.
• A team is preparing for an audit or examination and needs an evidence-collection plan and a priority view.

Required Inputs

• Framework or requirement source: the actual standard, regulation, or framework text — uploaded or pasted. If not provided, stop and request it. Do not construct requirements from model background knowledge; every requirement in the tracker must trace to this source.
• Control inventory: a description of the organization's current controls relevant to the framework — the controls, their owners, where evidence is stored, and when evidence was last collected. The more specific the inventory, the more useful the tracker.
• Audit context: any known audit dates, the audit period or reporting window, and the assessor if known.
• Organization context: business type and any regulatory status that affects which requirements apply.
• Scope boundaries (optional but recommended): which entities, business lines, or systems are in scope. If not provided, flag as [SCOPE: CONFIRM with attorney].
• Optional: the practice group's practice-profiles/regulatory.md if it has been populated and is loaded alongside this skill. If present, the skill uses its Standard Positions, Source-of-Truth Documents, and Escalation Thresholds tables to benchmark the tracker against the group's standing program design, cadence, and ownership conventions. If absent, the skill proceeds without practice-profile benchmarking and asks the user to supply standing positions inline if needed.