Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Claude Skills for Governance, Risk, & Compliance (GRC): Expert-level compliance guidance for ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF, PCI DSS, EU AI Act, ISO 42001, ISO 27701, DORA, CSRD, India's DPDPA, CMMC 2.0, NIST AI Risk, SWIFT, CCPA/CPRA, and others. Benchmark 89% (with skills) vs 55% (without skills). Updated Monthly.

Claude Skills for Governance, Risk & Compliance (GRC)

What it is – A collection of 36 Claude Skills – small knowledge‑packages that you upload to Anthropic’s Claude LLM. Each skill contains a SKILL.md with detailed guidance, templates and reference material for a specific compliance framework (ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, etc.). When Claude detects a conversation about one of those topics it automatically loads the relevant skill, letting the model answer as if it were a domain‑expert auditor.

Who it helps – Security, privacy and GRC teams, developers building regulated systems, legal/privacy officers, auditors, and any organisation that needs to produce audit‑ready artefacts without maintaining a large in‑house knowledge base.

Key capabilities

  • Gap analysis & control mapping – Structured checklists that compare an organisation’s current state to the required controls of each framework.
  • Document generation – Ready‑to‑use policy drafts, Statements of Applicability, risk registers, privacy notices, Business Associate Agreements, etc., all pre‑filled with the correct citations (e.g., ISO clauses, GDPR articles, NIST 800‑53 control IDs).
  • Regulatory navigation – Up‑to‑date guidance on recent changes (e.g., FedRAMP CR26, PCI v4.0.1, ISO 27001:2022) and cross‑mapping to other standards (CSF ↔ 800‑53 ↔ CIS Controls).
  • Technical advice – Recommendations for cloud architectures, encryption, continuous monitoring, and other technical safeguards tied to the specific framework.
  • Evaluation – Benchmarked on 180 test cases (902 assertions) with an 89 % accuracy score versus a 55 % baseline.

How to use

  1. Install a skill via the Claude Code Marketplace (or manually upload the .skill archive).
  2. Start a conversation with Claude; mention a relevant term (e.g., “ISO 27001 gap analysis”).
  3. Claude automatically activates the matching skill and returns the appropriate output – a policy draft, control mapping table, or remediation roadmap.

Limitations / disclaimer – The skills are knowledge packs, not a substitute for professional legal or audit advice. They are kept current by the author and updated monthly, but users should verify any regulatory citations against the latest official documents.

Quick start example (ISO 27001)

User: We need a Statement of Applicability for ISO 27001:2022 covering all 93 controls.
Claude (with ISO 27001 skill):
- Provides a table with each control ID, applicability decision, justification, and reference to the Annex A clause.
- Includes a template header/footer with document‑control metadata.
- Adds a brief narrative explaining the transition from ISO 27001:2013.

Where to find more – The repository includes the .skill files for each framework, a README with trigger phrases, and a short demo video. See the Releases tab for the latest version (v2.1.0) and the MIT license for reuse.

Related

  • Project
    borghei/Claude-Skills

    Claude Skills is an open‑source library of 385 ready‑to‑use “skills” – prompt‑plus‑Python bundles – that can be loaded into Claude, ChatGPT, Gemini, Copilot, Cursor and other LLM assistants. It ships 77 expert personas, 900 pure‑Python tools, and compliance workflows for 18 regulated frameworks, letting non‑engineers run real business, product‑management and compliance tasks via slash‑commands or plugin installation.

  • Project
    GRCEngClub/claude-grc-engineering

    An open-source GRC engineering toolkit for Claude that automates evidence collection, gap assessment, and remediation across multiple compliance frameworks.

  • Project
    michaelshimeles/skills

    A curated set of Claude Code agent skills that automate common development tasks—visual diff generation, service‑layer structuring, evidence‑driven UI testing, iterative Greptile review loops, work‑tree isolation, and prose clean‑up—plus a ready‑to‑drop workflow tying them together.

  • Project
    Masriyan/Claude-Code-CyberSecurity-Skill

    A collection of 22 specialized skill modules for Claude Code that provide structured methodologies and automation scripts for professional cybersecurity operations.

  • Project
    jherrodthomas/automotive-skills-suite

    A suite of 152 Claude skills that automate the generation and review of structured Excel deliverables for automotive safety, cybersecurity, and quality engineering standards.