skills.rest
open-agreements
open-agreementsOFFICIAL
Explore all skills by this author →
WebsiteGitHub

iso-27001-internal-audit

Facilitates ISO 27001:2022 internal audits with a structured workflow for control assessment, evidence collection, and findings generation.

46|9|Updated Feb 9, 2026
Search Tags:#audit#compliance#risk assessment#iso 27001#information security#nist sp 800-53
One-click install
npx skills add https://github.com/open-agreements/open-agreements --skill iso-27001-internal-audit
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: iso-27001-internal-audit
Source: https://github.com/open-agreements/open-agreements/tree/main/skills/iso-27001-internal-audit
Command: npx skills add https://github.com/open-agreements/open-agreements --skill iso-27001-internal-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and scripts (resource) components.

What problem does it solve?

This Skill streamlines the complex process of conducting internal audits against the ISO 27001 standard, helping organizations identify compliance gaps and prepare for external certification.

Core Features & Use Cases

  • Guided Auditing Workflow: Walks users through scoping, control assessment, evidence collection, and findings generation.
  • Control Assessment: Provides detailed guidance for each ISO 27001 Annex A control and ISMS clause.
  • Evidence Collection: Offers commands and examples for gathering necessary audit evidence.
  • Use Case: A startup preparing for its first ISO 27001 certification can use this Skill to systematically assess its controls, document findings, and ensure all requirements are met before the external audit.

Quick Start

Begin an ISO 27001 internal audit by assessing the organizational controls.

Frequently Asked Questions about iso-27001-internal-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I conduct an ISO 27001 internal audit?▼

To conduct an ISO 27001 internal audit, you follow a structured workflow for scoping, control assessment, evidence collection, and findings generation to identify compliance gaps before external certification.

What is included in an ISO 27001 control assessment?▼

An ISO 27001 control assessment provides detailed guidance for evaluating each Annex A control and ISMS clause, alongside commands and examples for gathering the necessary audit evidence.

Can I use one audit for ISO 27001, SOC 2 Type II, and NIST SP 800-53 compliance?▼

Yes, this internal audit process supports compliance with ISO 27001, SOC 2 Type II, and NIST SP 800-53 frameworks simultaneously by assessing controls across multiple standards.

Does the ISO 27001 audit workflow require a live compliance server connection?▼

No, the audit workflow can integrate with a compliance MCP server for live data, but it also falls back to embedded reference files for procedural guidance and control descriptions.

What is the best way to prepare a startup for its first ISO 27001 certification?▼

The best way to prepare for a first ISO 27001 certification is to systematically assess organizational controls, document findings, and ensure all ISMS requirements are met before the external audit.

Related Skills

Explore More Legal & Compliance Skills→
BagelHoleBagelHole
46

iso27001-compliance

Guide ISO 27001 ISMS implementation through the Plan-Do-Check-Act cycle.

Community
Intermediate
ovachieverovachiever
52

isms-audit-expert

Identify ISMS compliance gaps through automated audit processes aligned with ISO 27001.

Community
Advanced
Nir-BhayNir-Bhay
19

iso27001-controls

Generate ISO 27001 control assessment templates and audit checklists.

Community
Advanced
open-agreementsopen-agreements
46

soc2-readiness

Map Trust Services Criteria to NIST SP 800-53 controls and identify security gaps.

Official
Advanced