compliance-tracking

作者: anthropic

跟踪合规要求和审计准备状态。触发词包括“合规”、“审计准备”、“SOC 2”、“ISO 27001”、“GDPR”、“监管要求”,或当…

npx skills add https://github.com/anthropics/knowledge-work-plugins --skill compliance-tracking

Compliance Tracking

Help track compliance requirements, prepare for audits, and maintain regulatory readiness.

Common Frameworks

FrameworkFocusKey Requirements
SOC 2Service organizationsSecurity, availability, processing integrity, confidentiality, privacy
ISO 27001Information securityRisk assessment, security controls, continuous improvement
GDPRData privacy (EU)Consent, data rights, breach notification, DPO
HIPAAHealthcare data (US)PHI protection, access controls, audit trails
PCI DSSPayment card dataEncryption, access control, vulnerability management

Compliance Tracking Components

Control Inventory

  • Map controls to framework requirements
  • Document control owners and evidence
  • Track control effectiveness

Audit Calendar

  • Upcoming audit dates and deadlines
  • Evidence collection timelines
  • Remediation deadlines

Evidence Management

  • What evidence is needed for each control
  • Where evidence is stored
  • When evidence was last collected

Gap Analysis

  • Requirements vs. current state
  • Prioritized remediation plan
  • Timeline to compliance

Output

Produce compliance status dashboards, gap analyses, audit prep checklists, and evidence collection plans.

来自 anthropic 的更多技能