Skill UI

This guide details how to configure Windsurf for professional enterprise deployment, covering critical security and governance features. Key areas include setting up SSO/SAML authentication, defining role-based permissions (Owner, Admin, Member), establishing organization-wide AI policies and data controls, managing user seats, and implementing comprehensive audit trails for compliance.

This skill covers the complete lifecycle for establishing, implementing, and maintaining an Information Security Management System (ISMS) based on ISO/IEC 27001:2022. Users learn the full process, from initial gap analysis and risk assessment (including defining risk treatment plans) to selecting Annex A controls, developing the Statement of Applicability (SoA), conducting internal audits, and preparing for final certification. It is essential for organizations needing to achieve formal security compliance and robust governance.

This skill defines the process and framework for establishing mandatory Service Level Agreements (SLAs) for mitigating identified vulnerabilities. It guides users on how to calculate remediation timeframes based on vulnerability severity (CVSS, KEV), asset criticality (Tier 1, 2, 3), and exploit availability. The process includes setting up escalation chains, defining exception processes, and tracking key performance indicators (KPIs) like Mean Time to Remediate (MTTR) to ensure robust security governance and compliance.

Automate and execute comprehensive access recertification campaigns within Saviynt Enterprise Identity Cloud. This process validates user entitlements against industry standards like SOX, SOC2, and HIPAA. It helps organizations mitigate security risks by identifying and revoking excessive or unnecessary access rights, ensuring robust identity governance and compliance.

A comprehensive guide detailing the process of performing entitlement reviews and access certification campaigns using SailPoint IdentityIQ. This skill is critical for maintaining compliance (SOX, HIPAA) by automating manager reviews, targeted privileged access validation, and identifying Separation of Duties (SOD) violations. It ensures robust access governance and facilitates automated remediation workflows.

This skill provides comprehensive governance for Power Automate flows and Power Apps. It allows users to classify flows by business impact, detect orphaned resources, audit connectors, and enforce compliance by writing essential metadata to a cached store. It is ideal for IT governance teams needing centralized control and deep insight into automation assets without relying on Dataverse or the CoE Starter Kit.

Provides expert consultation on ITIL 4 and the emerging ITIL 5 Digital Product & Service Management (DPSM) framework. This skill guides the integration of AI governance, ESG sustainability principles, and product-centric thinking into modern, high-velocity IT service value streams. Ideal for optimizing IT operations and achieving continuous compliance.

This skill governs the secure ingestion and indexing of enterprise documents from diverse connectors (e.g., Google Drive, Confluence, Jira). Key functions include mandatory PII filtering (stripping emails, phones, SSNs) before indexing, preserving strict permission boundaries, and enforcing data retention policies to ensure compliance with global regulations like GDPR and CCPA.

An elite advisory skill designed for CTOs, IT Managers, and digital leaders. It acts as a collective intelligence of eight experts, providing comprehensive guidance on modern IT strategy, governance, and operational excellence. Core capabilities include FinOps management, AI governance roadmapping, C-suite executive communication, and aligning technology investments with core business value.

This skill provides an advanced guide for configuring robust enterprise governance within Navan. Administrators can define granular role hierarchies (e.g., Global Admin, Department Manager), establish department-specific travel policies (such as max hotel rates or preferred chains), and implement multi-tier, automated approval workflows. Use this when establishing strict policy enforcement and complex approval chains for a large, regulated organization.

The /cs:freeze command implements a governance lock on major strategic decisions (e.g., fundraise, layoffs, market entry). By setting a mandatory cooldown period, the system prevents premature reversal or second-guessing, protecting the focus and authority established by critical board decisions. It enforces founder discipline and maintains process integrity.

This multi-framework compliance officer tool pressure-tests an organization's compliance program against six critical questions. It is essential for pre-audit planning, adopting new standards (e.g., ISO, HIPAA, GDPR), or preparing for formal certification stages. It ensures comprehensive governance and efficiency across multiple regulatory frameworks.