compliance_analyst

Use the provided gap analysis template to map required GDPR controls against your current state, marking each as compliant, partial, or missing. Then build a remediation plan assigning each gap an action, owner, and deadline, typically spanning three months of remediation before audit preparation.

SOC 2 focuses on trust service criteria like security, availability, processing integrity, confidentiality, and privacy, verified through an auditor's report. ISO 27001 is an international standard for information security management systems. This Skill covers checklists and workflows applicable to both.

The EU AI Act classifies AI systems into four risk levels: Unacceptable, High, Limited, and Minimal. The Skill's Phase 1 workflow guides risk categorization to determine which obligations apply to your system before proceeding to gap assessment.

The certification path from assessment through gap analysis, remediation, and audit typically takes 6 to 12 months. A common breakdown is three months for gap remediation, one month for audit preparation, and two months for the certification process itself.

Audits require policy documents, log records, system configurations, and an up-to-date record of processing activities (ROPA). The Skill's Phase 2 workflow covers evidence collection and preparing an audit-ready file for independent auditors.