skills.rest
aviskaar
aviskaarOFFICIAL
Explore all skills by this author →
WebsiteGitHub

industry-compliance

Provide industry-specific regulatory compliance requirements for banking, healthcare, defense, and energy sectors.

6|1|Updated Feb 20, 2026
Search Tags:#compliance#healthcare#DORA#banking#regulation#ITAR#CMMC
One-click install
npx skills add https://github.com/aviskaar/open-org --skill industry-compliance
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: industry-compliance
Source: https://github.com/aviskaar/open-org/tree/main/skills/industry-compliance
Command: npx skills add https://github.com/aviskaar/open-org --skill industry-compliance

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps organizations understand and implement the specific regulatory compliance requirements unique to highly regulated industries, going beyond general security frameworks.

Core Features & Use Cases

  • Industry-Specific Mandates: Provides detailed controls and requirements for Banking & Finance (FFIEC, FINRA, DORA), Healthcare & Life Sciences (FDA 21 CFR Part 11, HITRUST), Hi-Tech & Defense (ITAR, CMMC), and Manufacturing/Energy (ICS/OT Security).
  • Regulatory Gap Analysis: Helps identify where standard frameworks fall short and what additional controls are needed.
  • Use Case: A FinTech startup needs to ensure its platform complies with both general security best practices and specific financial regulations like FFIEC. This Skill provides the detailed requirements for FFIEC compliance, including inherent risk assessment and cybersecurity maturity domains.

Quick Start

Use the industry-compliance skill to detail the FFIEC requirements for a banking application.

Frequently Asked Questions about industry-compliance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What are the specific FFIEC compliance requirements for a banking application?▼

FFIEC compliance for banking applications requires inherent risk assessments and cybersecurity maturity domains. This Skill details these financial regulatory controls to help platforms satisfy audit regimes unique to the banking and finance sector.

How do I identify regulatory gaps between standard security frameworks and healthcare mandates?▼

Identifying regulatory gaps for healthcare involves comparing standard security frameworks against mandates like FDA 21 CFR Part 11 and HITRUST CSF. This Skill maps specialized security controls needed to bridge compliance shortfalls in life sciences.

Does DORA regulation compliance require specialized security controls for FinTech platforms?▼

DORA regulation compliance requires specialized security controls for FinTech platforms operating in banking and finance. This Skill provides detailed requirements and penalty structures to satisfy the Digital Operational Resilience Act mandates.

What is the difference between ITAR and CMMC compliance for defense manufacturing?▼

ITAR and CMMC compliance differ in defense manufacturing scope, with ITAR governing export controls and CMMC defining cybersecurity maturity. This Skill outlines the specific security controls and audit regimes required for hi-tech and defense sectors.

When do I need NERC CIP compliance for manufacturing and energy systems?▼

NERC CIP compliance is needed for manufacturing and energy systems involving ICS/OT security to protect critical infrastructure. This Skill details the specific regulatory requirements and penalty structures for the energy sector.

Related Skills

Explore More Legal & Compliance Skills→
jason-c-devjason-c-dev
1

aws-observability-setup

Configures CloudWatch, CloudTrail, AWS Config, and Security Hub across accounts and regions.

Community
Intermediate
1479089714790897
7

kwp-operations-compliance-tracking

Map internal controls to compliance frameworks and track evidence collection timelines.

Community
Intermediate
abnejLLCabnejLLC

hitrust-expert

Guide HITRUST CSF compliance assessments and control mapping for healthcare organizations.

Community
Advanced
THUYRanTHUYRan
678

legal-risk-assessment

Consolidate licensing, compliance, and penalty data into a structured regulatory risk profile.

Community
Intermediate