Skill UI

A specialized skill designed to assist in drafting professional and structured internal communications. It provides guidelines and formats for various corporate documents, including 3P updates (Progress, Plans, Problems), company newsletters, status reports, FAQ responses, and incident reports. Use this skill to ensure consistency in tone and structure across all internal messaging.

Guides security leadership decisions with dollar-based risk quantification, compliance roadmaps for SOC 2, ISO 27001, and HIPAA, incident response, board reporting, and security budget justification.

This skill provides a structured framework for developing comprehensive communication templates for various malware incidents (e.g., ransomware, wipers, worms). It ensures that stakeholders—including C-suite executives, IT teams, customers, and regulators—receive appropriate, severity-based information at the correct time, maintaining transparency and aiding rapid incident response and compliance.

This playbook guides SOC analysts through the structured triage of security incidents. It ingests alerts from SIEM platforms (Splunk, Elastic), enriches data using threat intelligence (VirusTotal, AbuseIPDB), classifies the incident type, and calculates a severity score based on asset criticality and data sensitivity. It culminates in creating structured incident tickets and notifying the appropriate response teams via paging systems, ensuring a comprehensive and standardized incident response workflow.

A structured playbook for diagnosing and resolving critical disruptions within the Navan travel platform. It guides users through severity classification (P1-P4), utilizing built-in AI assistants (Ava), and performing essential API health checks using tools like curl and jq. This runbook ensures a systematic approach to handling failures related to bookings, OAuth tokens, and expense syncing, minimizing downtime and providing clear escalation paths.

This skill simulates a comprehensive auditor pressure test for any Information Security Management System (ISMS) against ISO 27001 standards. It forces interrogation on six critical areas—including scope, risk management, access control, and incident response—ensuring compliance and readiness before internal audits, Stage 1 certification, or surveillance audits.

Guidance on Banco Central do Brasil regulations: CMN Resolution 4.893/2021 cybersecurity policy, BCB Resolution 85/2021 IT risk management (GRSIC), Open Finance Brazil data sharing and consent, incident response (PARI), outsourcing requirements, and related penalties. Supports compliance review, policy drafting, and regulatory audits for financial institutions.