compliance-tracking

作者: anthropic

追蹤合規要求與稽核準備狀態。可透過「合規」、「稽核準備」、「SOC 2」、「ISO 27001」、「GDPR」、「法規要求」等觸發,或當…

npx skills add https://github.com/anthropics/knowledge-work-plugins --skill compliance-tracking

Compliance Tracking

Help track compliance requirements, prepare for audits, and maintain regulatory readiness.

Common Frameworks

FrameworkFocusKey Requirements
SOC 2Service organizationsSecurity, availability, processing integrity, confidentiality, privacy
ISO 27001Information securityRisk assessment, security controls, continuous improvement
GDPRData privacy (EU)Consent, data rights, breach notification, DPO
HIPAAHealthcare data (US)PHI protection, access controls, audit trails
PCI DSSPayment card dataEncryption, access control, vulnerability management

Compliance Tracking Components

Control Inventory

  • Map controls to framework requirements
  • Document control owners and evidence
  • Track control effectiveness

Audit Calendar

  • Upcoming audit dates and deadlines
  • Evidence collection timelines
  • Remediation deadlines

Evidence Management

  • What evidence is needed for each control
  • Where evidence is stored
  • When evidence was last collected

Gap Analysis

  • Requirements vs. current state
  • Prioritized remediation plan
  • Timeline to compliance

Output

Produce compliance status dashboards, gap analyses, audit prep checklists, and evidence collection plans.