Compliance Audit Mapper
Map security controls to frameworks and close compliance gaps
What You Can Do
You can rapidly map your security controls to major regulatory frameworks (SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS), automatically identify compliance gaps, and generate audit-ready evidence packages. The skill analyzes your control inventory against framework requirements, flags missing or inadequate controls, and produces structured documentation that accelerates compliance reviews and audit preparation.
Features
Match controls to framework requirements across SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS, and custom frameworks
Automatically surface missing or inadequately documented controls with risk severity
Create audit-ready documentation bundles with control descriptions and evidence references
View compliance status across multiple frameworks simultaneously to optimize control investments
Generate ranked action plans based on risk level and implementation effort
Structured forms for documenting control implementations and evidence locations
Calculate compliance percentage by framework and identify critical gaps
Example Output
SOC 2 Mapping Example:
| Control | CC6.1 | CC7.2 | Evidence Gap |
|---|---|---|---|
| MFA for user accounts | ✓ Satisfied | ✓ Satisfied | Needs test evidence |
| Encrypted backups | ✓ Satisfied | ✗ Missing | Document encryption standard |
| Quarterly access reviews | ✓ Satisfied | — | Complete for CC6.1 only |
Gap Analysis:
- CC7.3 Restricted physical access: No current control → High priority
- CC9.2 Change management: Documented but not fully tested → Medium priority
Evidence Package Summary:
- 8/12 SOC 2 criteria have strong evidence
- 3 criteria need additional documentation
- 1 criterion requires new control implementation
What's Included
- SKILL.md: The core compliance mapping skill with decision logic
- Control Mapping Template: Pre-built frameworks (SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS) with requirement lists
- Gap Analysis Checklist: Structured questions to evaluate control sufficiency
- Evidence Package Template: Audit-ready documentation format with control descriptions and evidence references
- Remediation Prioritization Worksheet: Risk/effort matrix for planning compliance improvements
- Audit Readiness Workflow: Step-by-step guide for preparing controls for third-party review
Who It's For
- Compliance Officers — Map controls and prepare for regulatory audits or certifications
- Internal Auditors — Assess control effectiveness against framework requirements
- Security Risk Managers — Identify compliance gaps and prioritize remediation
- Audit Consultants — Help clients structure evidence for third-party reviews
- GRC Managers — Plan governance, risk, and compliance improvements
Best For
- Control-to-framework mapping — Quickly determine which existing controls satisfy specific regulatory requirements
- Audit preparation — Organize evidence and identify gaps before formal compliance reviews
- Gap analysis — Discover missing or inadequate controls across multiple frameworks
- Multi-framework compliance — Maintain SOC 2, ISO 27001, GDPR, and HIPAA simultaneously
- Remediation planning — Prioritize which gaps to close first based on risk and effort
You might also like
You'll structure high-stakes architectural decisions using a proven enterprise framework that systematically evaluates options, assesses risks, aligns stakeholders, and documents trade-offs. This skill guides you through decision matrices, financial impact analysis, implementation planning, and post-decision reviews—ensuring your organization makes defensible architectural choices that scale.
by nakano1122
Claude systematically analyzes production incidents to identify root causes, contributing factors, and systemic vulnerabilities in your infrastructure. You'll receive structured postmortems that guide your team through incident timelines, pinpoint what actually failed, and prioritize infrastructure improvements that prevent recurrence. The skill also detects patterns across your incident history—revealing repeated failures that point to deeper architectural weaknesses.
by nakano1122
This skill generates comprehensive, personalized buyer education and real-time guidance tailored to each client's experience level and concerns. You'll handle objections with empathy and data-backed responses, guide clients through every transaction stage with clear next steps, and build buyer confidence that turns hesitation into action. It creates customized scripts, educational resources, and FAQ compilations that work across real estate, automotive, insurance, and B2B sales.
by nakano1122
Create comprehensive digital transformation roadmaps that span 3-5 years with phased initiatives, business cases, and risk mitigation strategies. This skill helps you align technology investments with business objectives, prioritize competing initiatives by impact and effort, and communicate transformation plans clearly to executive stakeholders. You'll generate ROI projections, resource requirements, and success metrics for each phase.
by nakano1122
Perform comprehensive financial analysis on multifamily acquisitions, from pro forma development to underwriting memoranda. Generate sensitivity analyses, cash flow projections, and investment metrics (IRR, CoC, NOI) that help you evaluate deal quality and portfolio performance. Create institutional-grade reports with rent rolls, expense breakdowns, and risk assessments for due diligence, lender presentations, or investor pitch decks.
by nakano1122
You get immediate structured incident assessment and response coordination. Claude analyzes incident severity, impact scope, and escalation requirements—then generates decision trees, stakeholder communication templates, and post-incident review guides. This skill accelerates your response from triage through resolution to after-action review.
by nakano1122
You conduct systematic architecture reviews that identify technical risks, quantify their business impact, and prioritize technical debt for remediation. The framework generates risk matrices, compliance gap analyses, and actionable roadmaps with effort estimates—ideal for due diligence, modernization planning, or governance decision-making. You produce executive summaries that translate technical findings into business language for stakeholder alignment.
by nakano1122
You can systematically identify performance bottlenecks in your frontend application across React, Vue, and Angular frameworks. This skill analyzes your codebase for common anti-patterns, runtime behavior, and bundle metrics to pinpoint the slowest components and queries. You'll receive a data-driven optimization roadmap prioritized by impact and implementation effort, complete with specific code examples and effort estimates your team can execute immediately.
by nakano1122