skills.rest
finosfinosOfficial·5 Agent Skills Included

common-cloud-controls

Cloud security control catalogs and compliance test automation

Builds standardized security capability, threat, and control catalogs for cloud services across AWS, Azure, and GCP. Maps every control to frameworks like NIST 800-53, DORA, and MITRE ATT&CK without manual cross-referencing. Generates testable assessment requirements and behavioural test plans so financial institutions can verify cloud compliance faster.
85|80
↗
npx skills add finos/common-cloud-controls --all -g -y
Available:

Directs your AI agent to check the skills directory before any task and follow the ordered capability, threat, control, and test workflow for onboarding new cloud services.

All Skills in This Repository (5)

Pure Emerald Level Indicators
📦 In Repo
finosfinos

build-service-behavioural-test-analysis

Analyze FINOS Common Cloud Controls service catalogs to plan Gherkin behavioural test coverage.

Official
Advanced
📦 In Repo
finosfinos

build-threat-catalog

Generate schema-validated threat catalogs for FINOS Common Cloud Controls.

Official
Advanced
📦 In Repo
finosfinos

build-control-catalog

Generate schema-valid FINOS CCC controls.yaml files for cloud services.

Official
Advanced
📦 In Repo
finosfinos

build-capability-catalog

Generate schema-validated FINOS CCC capability catalogs for AWS, Azure, and GCP services.

Official
Intermediate
📦 In Repo
finosfinos

build-features-and-cloud-api

Transform approved cloud analysis documents into executable behavioral test stacks for AWS, Azure, and GCP deployments.

Official
Advanced

Frequently Asked Questions

FAQPage Schema
How to install Common Cloud Controls?▼

Run `npx skills add finos/common-cloud-controls --all -g -y` in your terminal to install all skills in this suite globally.

What is FINOS Common Cloud Controls?▼

It is an open standard defining consistent cybersecurity and compliance controls for common cloud services across AWS, Azure, and GCP, built for the financial services sector.

How do I create a control catalog for a new cloud service?▼

Ask your agent to run the capability, threat, and control catalog skills in order; each produces validated YAML files mapped to frameworks like NIST 800-53 and DORA.

Does it map controls to regulations like DORA?▼

Yes. Controls are mapped to NIST 800-53, the CRI Profile, DORA, the Cyber Resilience Act, FS-ISAC, and the FINOS AI Governance Framework.

Can it generate compliance tests for my cloud setup?▼

Yes. The behavioural test skills turn control catalogs into Gherkin test plans and runnable cloud API tests for AWS, Azure, and GCP.

Related Repositories in Legal & Compliance

View All in Legal & Compliance→
anthropicsanthropics
9.3k

claude-for-legal

AI legal workspace for contracts, privacy, IP, litigation, and compliance

Official📦 124 Skills
handsomestWeihandsomestWei
4.8k

patent-disclosure-skill

Draft Chinese patent disclosures and read patents in plain language

Community📦 1 Skills
nisrulznisrulz
4.7k

app-privacy-policy-generator

Generate privacy policies and terms for mobile and web apps

Community📦 2 Skills