Audit Compliance Framework Mapper
Map regulatory requirements to audit procedures across SOX, COSO, GDPR, HIPAA, ISO 27001
What You Can Do
You can translate regulatory language from multiple compliance frameworks into testable audit procedures, control objectives, and evidence requirements. The skill creates detailed audit programs that document the chain between regulations and specific test procedures, ensuring consistent coverage across SOX, COSO, GDPR, HIPAA, ISO 27001, and other frameworks. You'll reduce compliance gaps, accelerate audit planning, and generate documentation that demonstrates regulatory alignment for multi-jurisdictional engagements.
Features
Link specific regulatory articles/sections to control objectives and audit procedures across multiple frameworks
Create matrices spanning SOX, COSO, and industry-specific frameworks showing overlapping obligations
Specify what evidence types, documentation, and test procedures satisfy each regulatory requirement
Highlight uncovered requirements and overlapping control areas to optimize testing scope
Generate detailed audit programs structured by control area with procedure steps and evidence checklists
Map requirements across jurisdictions to streamline global compliance efforts
Create audit trails linking regulations → control objectives → procedures → evidence
Example Output
Example 1: SOX Section 404 & COSO Alignment
- Regulatory Requirement: SOX 404(b) — Management assessment of internal control effectiveness
- COSO Component: Control Activities (component 4)
- Audit Procedure: Test 15 key controls for design and operating effectiveness using observation, inquiry, and document review
- Evidence Required: Control documentation, test results, exception logs, management sign-offs
Example 2: GDPR Data Processing Control Matrix
- GDPR Article 32 Requirement: Implement appropriate technical and organizational measures
- Related ISO 27001 Controls: A.13.1.1 (access control), A.14.1.1 (change management)
- Audit Procedure: Review access logs for 30-day period, test change approval process for 10 changes, verify encryption implementation
- Gap Identified: Current audit program covers A.13.1.1 but not encryption verification — add 2 additional procedures
Example 3: HIPAA Security Rule Testing Plan
- Requirement: 45 CFR § 164.312(a)(2) — Encryption and decryption mechanisms
- Related COSO: Asset safeguarding
- Procedure: Inventory all systems storing PHI, verify encryption settings, test encryption strength using NIST standards
- Evidence: System inventory spreadsheet, encryption configuration screenshots, encryption test reports
What's Included
- SKILL.md instruction file with framework mapping methodology:
- Compliance Framework Reference Matrix: Pre-populated with SOX, COSO, GDPR, HIPAA, ISO 27001 requirements and cross-references
- Audit Program Template: Structured template mapping regulations → control objectives → procedures → evidence
- Control Matrix Workbook: Multi-framework control mapping template for overlap analysis
- Evidence Requirement Checklist: Guide for identifying and documenting required evidence types by framework
Who It's For
- Internal auditors planning multi-framework compliance audits and SOX 404 assessments
- External auditors designing audit programs for complex regulatory environments
- Compliance officers coordinating global audit programs across multiple jurisdictions
- Risk managers developing control frameworks aligned with multiple standards
- Audit managers training teams on regulatory requirements and testing procedures
Best For
- Mapping audit scope across overlapping regulatory frameworks (SOX + GDPR, HIPAA + ISO 27001)
- Building detailed audit programs that link regulations to specific test procedures
- Creating control matrices that demonstrate coverage across multiple standards
- Conducting compliance gap assessments and identifying uncovered requirements
- Documenting audit trails for regulatory inquiries and management reporting
You might also like
You receive a comprehensive framework for evaluating diversified passive income streams, assessing client risk profiles, and recommending portfolio structures that maximize income while maintaining alignment with financial objectives. The skill analyzes income sources (real estate, dividends, bonds, peer lending, digital assets), models cash flow projections, evaluates tax efficiency, and provides data-driven strategy recommendations ranked by performance potential.
by eryet
You can systematically evaluate payment timing decisions across your vendor base by modeling discount capture opportunities against working capital requirements. The skill analyzes vendor payment terms, your cash flow constraints, and strategic vendor priorities to generate prioritized payment schedules that maximize savings while maintaining adequate liquidity and protecting critical supplier relationships.
by eryet
Create comprehensive, personalized wealth strategies that align client assets, goals, and risk tolerance. You can assess complex financial situations, generate multi-faceted investment and tax strategies, and produce professional recommendations that incorporate goal timelines, asset allocation frameworks, and tax efficiency considerations. The skill helps you move beyond generic advice to deliver actionable, client-specific wealth plans backed by structured analysis.
by eryet
You can generate professionally formatted SVG color palettes by providing a theme name, source URL, or specific hex codes. Claude researches color standards, extracts values from web sources, and organizes 4-7 swatches from dark to light with an anchor brand color at center. Each swatch includes click-to-copy hex codes and hover effects for easy reference.
by eryet
You can trace financial transactions across multiple accounts and entities, document complete chain-of-custody for audit evidence, identify fraud indicators and anomaly patterns, and construct defensible audit conclusions that satisfy both forensic rigor and legal admissibility requirements. This skill provides structured protocols for adversarial skepticism, hostile cross-examination preparation, and quantification of losses or damages with transparent methodologies.
by eryet
You can rapidly analyze invoice exceptions—including three-way match failures, discrepancies, duplicates, policy violations, and tax code errors—and automatically assign severity levels (critical, high, medium, low) based on financial impact and risk. Claude then generates targeted remediation instructions and routes each exception to the appropriate resolver (AP clerk, manager, tax team, or procurement), complete with audit trails for compliance and first-touch resolution tracking.
by eryet
You can upload aging data from your accounting system and Claude will systematically categorize invoices by delinquency bucket, identify high-risk accounts with payment pattern analysis, explain why balances are aging, and generate prioritized collection strategies with account-specific context. This transforms static aging reports into actionable recovery plans that help you understand portfolio health and accelerate cash flow.
by eryet
You can systematically classify and track expenses against specific restricted grants and donations, reconcile fund balances with compliance verification, and generate accurate financial statements that separate restricted and unrestricted funds. This skill prevents audit failures, donor relation damage, and grant non-compliance penalties by ensuring every restricted fund expense is properly documented, allowable under grant terms, and traceable to donor/grantor requirements.
by eryet