skills.rest
alirezarezvani
alirezarezvaniCOMMUNITY
Explore all skills by this author →
Website𝕏@RezaRezvaniBlnGitHub

compliance-os

Orchestrates multi-framework compliance programs by selecting applicable frameworks, mapping control overlap, simulating audits, and consolidating evidence.

25.3k|3.6k|Updated Oct 19, 2025
Search Tags:#gdpr#iso 27001#soc 2#control mapping#GRC#Compliance#audit simulation
One-click install
npx skills add https://github.com/alirezarezvani/claude-skills --skill compliance-os
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: compliance-os
Source: https://github.com/alirezarezvani/claude-skills/tree/main/compliance-os/skills/compliance-os
Command: npx skills add https://github.com/alirezarezvani/claude-skills --skill compliance-os

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

Companies running two or more compliance frameworks (ISO 27001, SOC 2, GDPR, EU AI Act, HIPAA, etc.) in parallel waste effort on duplicate evidence collection, conflicting audit calendars, and fragmented management reviews. This Skill provides a meta-orchestration layer that determines which of 12 supported frameworks apply to a company, computes cross-framework control overlap, simulates internal audits, and consolidates a unified evidence pool.

Core Features & Use Cases

  • Framework Selection: Ranks 12 frameworks (ISO 27001/13485/42001/14971, EU AI Act, MDR 745, GDPR, SOC 2, FDA QSR, NIST CSF 2.0, NIS2, HIPAA) against a company profile JSON and returns applicable ones with a dependency graph.
  • Cross-Framework Control Mapping: Computes control-level overlap with HIGH/MEDIUM/LOW confidence ratings and identifies evidence-reuse opportunities across enabled frameworks.
  • Audit Simulation: Generates realistic mock internal audits per ISO 19011 and IIA IPPF with 8-15 findings, healthy severity distribution, interview questions, and document-review requests, drawing on a 205-scenario library.
  • Evidence Pool Consolidation: Produces a unified evidence checklist showing which artefact satisfies which controls across which frameworks, with reuse-leverage scoring.
  • Use Case: A mid-stage AI SaaS company selling to EU enterprise customers runs the framework selector, learns it needs ISO 27001 + SOC 2 + ISO 42001 + EU AI Act + GDPR, then maps overlap to discover that one quarterly access-review record satisfies controls in all five frameworks.

Quick Start

Ask the assistant to run the compliance-os framework selector against your company profile JSON to determine which compliance frameworks apply and how their controls overlap.

Frequently Asked Questions about compliance-os

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I determine which compliance frameworks apply to my company?▼

Run framework_selector.py with a company profile JSON describing industry, geography, AI use, medical devices, headcount, and data processing. It deterministically ranks the 12 supported frameworks and returns applicable ones with a dependency graph.

How much control overlap exists between ISO 27001 and SOC 2?▼

ISO 27001 Annex A and SOC 2 Trust Services Criteria share roughly 75% control coverage, the densest known pair. The cross_framework_mapper.py tool computes merged controls with HIGH/MEDIUM/LOW confidence ratings and unified evidence requirements.

Can this replace per-framework compliance skills or legal advice?▼

No. It is a meta-orchestrator that coordinates per-framework deep-dive skills rather than replacing them, and its cross-framework mappings reflect published guidance, not binding legal advice. Novel cross-walks should be reviewed with counsel.

How does the mock audit simulator generate findings?▼

audit_simulator.py deterministically generates 8-15 findings from templates mapped to control themes, enforcing the IIA-expected severity distribution of at least 40% observations and at most 15% critical findings. It also outputs interview questions and document-review requests per scoped control.

What dependencies does the compliance-os tooling require?▼

None beyond the Python standard library. All four tools (framework_selector, cross_framework_mapper, audit_simulator, evidence_pool_generator) are stdlib-only, deterministic, and make no LLM calls or network requests.

When should I not use a multi-framework compliance orchestrator?▼

Skip it when operating a single framework, since the per-framework skill alone is sufficient. Also avoid building orchestration before at least two frameworks operate maturely, as premature orchestration adds overhead without reuse benefit.

Related Skills

Explore More Legal & Compliance Skills→
myapihqmyapihq
83

my-company-api

Search and filter company records by geography, headcount, and domain signals.

Official
Intermediate
heaptracetechnologyheaptracetechnology
13

compliance-report

Consolidate multi-framework control mapping and evidence collection into auditable packages.

Community
Advanced
vigneshbarani24vigneshbarani24
6

sap-security-grc

Provide SAP Security, GRC, and SoD guidance for authorization design and compliance.

Community
Intermediate
Muath2000Muath2000

legal-advisor

Draft contracts, ensure compliance, and assess legal risks for technology businesses.

Community
Advanced