arckit-au-ism-controls

Generate an ASD ISM control applicability statement for Australian Government projects.

Updated Jul 24, 2026
One-click install
npx skills add https://github.com/tractorjuice/arckit-kimi --skill arckit-au-ism-controls
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: arckit-au-ism-controls
Source: https://github.com/tractorjuice/arckit-kimi/tree/main/skills/arckit-au-ism-controls
Command: npx skills add https://github.com/tractorjuice/arckit-kimi --skill arckit-au-ism-controls

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill automates the complex and time-consuming process of generating an ASD Information Security Manual (ISM) control applicability statement, ensuring Australian Government projects meet rigorous security standards.

Core Features & Use Cases

  • Automated Scoping: Generates a comprehensive control applicability matrix based on system classification and deployment models.
  • Evidence Mapping: Integrates existing ArcKit artefacts like diagrams, risk registers, and maturity models to provide verifiable compliance evidence.
  • Use Case: A project manager needs to produce an ISM compliance report for a PROTECTED-level cloud system; this Skill aggregates all architectural evidence and maps it against the latest ASD ISM controls to identify gaps and remediation actions.

Quick Start

Invoke the arckit-au-ism-controls skill to generate the security compliance statement for your current project.

Frequently Asked Questions about arckit-au-ism-controls

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate an ASD ISM control applicability statement for an Australian Government project?

An ISM control applicability statement maps your system architecture against the ASD Information Security Manual. This Skill automates that mapping by evaluating your security posture across 17 control domains to satisfy technical-controls evidence requirements for PSPF outcomes and DISP member self-attestation.

Can I automate ISM compliance reporting for a PROTECTED-level cloud system?

Yes, you can automate ISM compliance reporting for PROTECTED-level systems. The Skill aggregates your architectural evidence, risk data, and classification requirements, mapping them against ASD ISM controls to produce a verifiable compliance matrix that identifies gaps and remediation actions.

How do I map architectural evidence to ASD Information Security Manual controls?

You map architectural evidence to ASD ISM controls by integrating existing artefacts like diagrams, risk registers, and maturity models. The Skill synthesizes this evidence against your deployment model and classification requirements to evaluate your posture across 17 security control domains.

Does this ISM compliance tool support DISP member self-attestation requirements?

Yes, this ISM compliance tool supports DISP member self-attestation. By generating a control applicability statement that synthesizes your architectural evidence and risk data across 17 control domains, it satisfies the technical-controls evidence requirements for DISP self-attestation and PSPF outcomes.

What is the best way to scope ISM controls for Australian Government regulated-sector technology projects?

The best way to scope ISM controls is through automated scoping based on system classification and deployment models. This Skill generates a comprehensive applicability matrix by evaluating your architecture, risk data, and classification requirements across all 17 ASD ISM control domains.