Skill UI

Automates compliance and security audit reporting for standards such as PCI DSS, HIPAA, SOC 2, and ISO 27001 by using the compliance-report-generator plugin to collect details, format documentation, and streamline regulatory proof.

A comprehensive skill for implementing and managing Information Security Management Systems (ISMS) aligned with ISO 27001:2022 and global regulatory standards. This tool guides users through critical security processes, including risk assessments, control implementation, gap analyses, and preparing for audits. Essential for HealthTech and MedTech companies ensuring data privacy and compliance.

Provides ISO 27001 ISMS audit and certification guidance, covering program planning, risk-based execution, Annex A control assessment, finding management, and Stage 1/Stage 2 documentation support for compliance teams.

Delivers automated guidance for ISO27001 gap analyzer requests in the Security Advanced domain, covering practical walkthroughs, production-ready artifacts, and validation checks that keep security operations aligned with enterprise compliance standards.

Guides growth-stage companies through CISO-level security programs by quantifying risks in dollars, sequencing compliance (SOC 2/ISO 27001/HIPAA/GDPR), architecting zero-trust defenses, leading incident response, and translating budgets for boards or sales conversations.

This guide provides a comprehensive methodology for conducting cloud security audits across major platforms (AWS, Azure, GCP) using industry-standard CIS Benchmarks. It covers selecting appropriate benchmark versions, running automated assessments using tools like Prowler and ScoutSuite, interpreting complex compliance results, and prioritizing systematic remediation steps to achieve and maintain continuous compliance (e.g., SOC 2, ISO 27001).

This skill covers the complete lifecycle for establishing, implementing, and maintaining an Information Security Management System (ISMS) based on ISO/IEC 27001:2022. Users learn the full process, from initial gap analysis and risk assessment (including defining risk treatment plans) to selecting Annex A controls, developing the Statement of Applicability (SoA), conducting internal audits, and preparing for final certification. It is essential for organizations needing to achieve formal security compliance and robust governance.

A comprehensive advisor for Hospital IT Managers and Digital Health Leaders. This skill guides digital transformation across the entire healthcare lifecycle, focusing on achieving clinical safety, compliance (HIMSS, ONA, JCI), and maximizing operational value. It covers everything from HIS/PEP integration (MV-SOUL, Tasy) and interoperability standards (FHIR, HL7) to advanced security frameworks (NIST, ISO 27001) and legal compliance (LGPD). Ideal for planning digital roadmaps and ensuring high-availability for life-critical systems.

A meta-orchestrator designed for compliance teams to manage complex, multi-jurisdictional compliance programs. It automatically selects applicable regulatory frameworks (e.g., ISO 27001, GDPR, EU AI Act, HIPAA), computes control overlap across standards, simulates mock audits, and consolidates evidence into a unified reuse map. Ideal for planning annual audits or achieving multi-certification.

This skill simulates a comprehensive auditor pressure test for any Information Security Management System (ISMS) against ISO 27001 standards. It forces interrogation on six critical areas—including scope, risk management, access control, and incident response—ensuring compliance and readiness before internal audits, Stage 1 certification, or surveillance audits.

Generates a comprehensive, prioritized compliance checklist for major frameworks like GDPR, SOC 2, ISO 27001, HIPAA, and more. This tool performs detailed gap analysis, identifies quick wins, and structures a phased implementation roadmap, making it essential for audit preparation and maintaining regulatory adherence.

This methodology guides organizations through a comprehensive cybersecurity risk assessment using the NIST SP 800-30 framework. It systematically identifies threat sources, vulnerabilities, and potential threat events. By determining the likelihood and impact of these threats, the process calculates overall risk, resulting in a prioritized, defensible risk register. Essential for compliance (e.g., ISO 27001, HIPAA), system authorization, and strategic risk reporting.