Skills
.Work. You
Rest

soa

Community

Automate ISO 27001 SoA generation from risk docs.

Legal & Compliance#compliance#soa#controls#iso27001#risk-treatment#audits#annex-a
Authorgombing
Version1.0.0
Installs0

System Documentation

What problem does it solve?

The SoA skill streamlines the creation of a formal Statement of Applicability by consolidating risk-treatment decisions and Annex A reviews into a complete, auditable document. It prevents gaps by enforcing pre-populated statuses and documented justifications for exclusions, supporting Stage 1 and Stage 2 audits.

Core Features & Use Cases

  • Loads and references the Risk Treatment Plan and Annex A Review to pre-populate inclusion/exclusion status for all 93 Annex A controls.
  • Builds an internal mapping of control applicability, justifications (RT/LR/CR/BP/NA), and implementation status (IMP/PAR/NIM/NAP).
  • Outputs a structured SoA with per-control details, a Not Applicable register for exclusions, and a version-history ready for audit roadmaps.
  • Supports engagement-driven workflows from risk treatment through to the SoA, along with source-document references for traceability.

Quick Start

Run the /soa command to generate the Statement of Applicability for the current engagement.

Dependency Matrix

Required Modules

None required

Components

Standard package

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: soa
Download link: https://github.com/gombing/ISO27001Agent/archive/main.zip#soa

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.