cis-controls

Claude Skills for Governance, Risk & Compliance (GRC)

Expert-level compliance guidance for ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF, PCI DSS, TSA Cybersecurity, ISO 42001 AI Management System, ISO 27701 Privacy Information Management, DORA Digital Operational Resilience, India's Digital Personal Data Protection Act (DPDPA), CMMC 2.0 Cybersecurity Maturity Model Certification, NIST AI Risk Management Framework, SWIFT Customer Security Programme (CSP), Australian Information Security Manual (ISM), EU NIS2 Directive, CCPA/CPRA California Privacy, ITAR (International Traffic in Arms Regulations), Brazil's LGPD (Lei Geral de Proteção de Dados), EU CSRD (Corporate Sustainability Reporting Directive), CIS Controls v8 (CIS Top 18), EAR (Export Administration Regulations), NIST SP 800-53 (Security and Privacy Controls for Federal Systems), EU AI Act (Regulation (EU) 2024/1689), Section 508 (US Federal ICT Accessibility), WCAG (Web Content Accessibility Guidelines), NZISM (New Zealand Information Security Manual), Vietnam PDPL (Law on Personal Data Protection No. 91/2025/QH15), and EU CRA (Cyber Resilience Act, Regulation (EU) 2024/2847) — powered by Claude Skills.

Benchmarked across 150 test cases using the eval framework — each graded against at least 5 verifiable assertions by independent agents (752 assertions in total). Skills scored 94% vs a baseline of 81%.

Table of Contents

• What Are Claude Skills?
• Who Is This For?
• The Skills
  • ISO 27001
  • SOC 2
  • FedRAMP
  • GDPR
  • HIPAA
  • NIST CSF
  • PCI DSS
  • TSA Cybersecurity
  • ISO 42001 AI Management System
  • ISO 27701 Privacy Information Management
  • DORA Digital Operational Resilience
  • DPDPA India Digital Personal Data Protection
  • CMMC 2.0 Cybersecurity Maturity Model Certification
  • NIST AI Risk Management Framework
  • SWIFT Customer Security Programme (CSP)
  • Australian Information Security Manual (ISM)
  • EU NIS2 Directive
  • CCPA/CPRA California Privacy
  • ITAR — International Traffic in Arms Regulations
  • LGPD — Brazil's General Data Protection Law
  • CSRD — EU Corporate Sustainability Reporting Directive
  • CIS Controls v8 — CIS Top 18 Cyber Hygiene
  • EAR — Export Administration Regulations
  • NIST SP 800-53 — Security and Privacy Controls for Federal Systems
  • EU AI Act — Regulation (EU) 2024/1689
  • Section 508 — US Federal ICT Accessibility
  • WCAG — Web Content Accessibility Guidelines
  • NZISM — New Zealand Information Security Manual
  • Vietnam PDPL — Law on Personal Data Protection
  • EU CRA — Cyber Resilience Act
• Potential Use Cases
• How to Install a Skill
• Install via Claude Code Marketplace
• Skill Evaluation
• Customer Testimonials
• Support
• Author
• Disclaimer

What Are Claude Skills?