Skill UI

Automates compliance and security audit reporting for standards such as PCI DSS, HIPAA, SOC 2, and ISO 27001 by using the compliance-report-generator plugin to collect details, format documentation, and streamline regulatory proof.

This system implements Role-Based Access Control (RBAC) for OpenEvidence, an AI-powered clinical decision support platform. It strictly manages access to sensitive data, including PHI-adjacent datasets and medical literature, ensuring compliance with regulations like HIPAA. The system defines distinct roles—Admin, Clinician, Researcher, Student, and Auditor—with granular permissions for querying, data export, and institutional configuration, maintaining a secure and auditable data environment.

This skill acts as a specialized domain intelligence strategist, capable of analyzing specific industry niches (e.g., Fintech, HealthTech). It goes beyond general functionality to inject crucial domain-specific knowledge, mandatory regulatory compliance (like HIPAA or GDPR), and industry-leading UX/UI patterns. Essential for ensuring the product is optimized for its vertical market.

Guides growth-stage companies through CISO-level security programs by quantifying risks in dollars, sequencing compliance (SOC 2/ISO 27001/HIPAA/GDPR), architecting zero-trust defenses, leading incident response, and translating budgets for boards or sales conversations.

Automate and execute comprehensive access recertification campaigns within Saviynt Enterprise Identity Cloud. This process validates user entitlements against industry standards like SOX, SOC2, and HIPAA. It helps organizations mitigate security risks by identifying and revoking excessive or unnecessary access rights, ensuring robust identity governance and compliance.

This skill provides a comprehensive framework for conducting systematic access reviews and certifications across enterprise applications. It guides users through designing review campaigns, implementing risk-based prioritization (e.g., privileged, PII access), assigning reviewers (manager, application owner), and automating the collection of entitlement data. The process ensures compliance evidence is generated for major standards like SOX, HIPAA, and PCI DSS, helping maintain the principle of least privilege.

A comprehensive guide detailing the process of performing entitlement reviews and access certification campaigns using SailPoint IdentityIQ. This skill is critical for maintaining compliance (SOX, HIPAA) by automating manager reviews, targeted privileged access validation, and identifying Separation of Duties (SOD) violations. It ensures robust access governance and facilitates automated remediation workflows.

This tool provides strategic legal guidance for founders and startup executives, covering critical areas like contract risk review (MSA, NDA, DPA), intellectual property strategy, term sheet decoding, and global regulatory compliance (GDPR, HIPAA, etc.). It surfaces key questions and potential traps to ensure thorough review before legal commitment. NOTE: This is not a substitute for licensed attorney advice.

This tool simulates a highly critical compliance officer, forcing rigorous scrutiny on any multi-framework compliance program. It addresses six critical areas: scope definition, evidence overlap, ownership accountability, audit planning, mock audit simulation, and management review cadence. Use it before adopting new standards (like ISO or HIPAA), planning annual audits, or preparing for major certifications to systematically identify gaps and risks.