regulatory-map

What problem does it solve?

This Skill systematically maps proposed changes to applicable regulatory requirements and control obligations, ensuring no compliance obligation is missed and all required controls are identified before development begins.

Core Features & Use Cases

• Regulatory Domain Identification: Automatically flags relevant regulatory domains (e.g., APRA CPS 234, SOX, Privacy Act) based on change descriptions.
• Requirement Mapping: Links proposed changes to specific regulatory requirements and assesses their applicability.
• Control Gap Analysis: Identifies existing, verifiable, or new controls needed to meet mapped requirements.
• Risk Classification: Provides an overall regulatory risk level (Low to Critical) for the proposed change.
• Use Case: Before implementing a new feature that touches customer data, use this Skill to understand all privacy and data handling regulations that apply, and to identify any new security controls that must be built.

Quick Start

Use the regulatory-map skill to map the proposed change described in the attached document 'new-feature-spec.md' to applicable regulations.