Compliance Audit Mapper
Map security controls to frameworks and close compliance gaps
What You Can Do
You can rapidly map your security controls to major regulatory frameworks (SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS), automatically identify compliance gaps, and generate audit-ready evidence packages. The skill analyzes your control inventory against framework requirements, flags missing or inadequate controls, and produces structured documentation that accelerates compliance reviews and audit preparation.
Features
Match controls to framework requirements across SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS, and custom frameworks
Automatically surface missing or inadequately documented controls with risk severity
Create audit-ready documentation bundles with control descriptions and evidence references
View compliance status across multiple frameworks simultaneously to optimize control investments
Generate ranked action plans based on risk level and implementation effort
Structured forms for documenting control implementations and evidence locations
Calculate compliance percentage by framework and identify critical gaps
Example Output
SOC 2 Mapping Example:
| Control | CC6.1 | CC7.2 | Evidence Gap |
|---|---|---|---|
| MFA for user accounts | ✓ Satisfied | ✓ Satisfied | Needs test evidence |
| Encrypted backups | ✓ Satisfied | ✗ Missing | Document encryption standard |
| Quarterly access reviews | ✓ Satisfied | — | Complete for CC6.1 only |
Gap Analysis:
- CC7.3 Restricted physical access: No current control → High priority
- CC9.2 Change management: Documented but not fully tested → Medium priority
Evidence Package Summary:
- 8/12 SOC 2 criteria have strong evidence
- 3 criteria need additional documentation
- 1 criterion requires new control implementation
What's Included
- SKILL.md: The core compliance mapping skill with decision logic
- Control Mapping Template: Pre-built frameworks (SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS) with requirement lists
- Gap Analysis Checklist: Structured questions to evaluate control sufficiency
- Evidence Package Template: Audit-ready documentation format with control descriptions and evidence references
- Remediation Prioritization Worksheet: Risk/effort matrix for planning compliance improvements
- Audit Readiness Workflow: Step-by-step guide for preparing controls for third-party review
Who It's For
- Compliance Officers — Map controls and prepare for regulatory audits or certifications
- Internal Auditors — Assess control effectiveness against framework requirements
- Security Risk Managers — Identify compliance gaps and prioritize remediation
- Audit Consultants — Help clients structure evidence for third-party reviews
- GRC Managers — Plan governance, risk, and compliance improvements
Best For
- Control-to-framework mapping — Quickly determine which existing controls satisfy specific regulatory requirements
- Audit preparation — Organize evidence and identify gaps before formal compliance reviews
- Gap analysis — Discover missing or inadequate controls across multiple frameworks
- Multi-framework compliance — Maintain SOC 2, ISO 27001, GDPR, and HIPAA simultaneously
- Remediation planning — Prioritize which gaps to close first based on risk and effort
You might also like
You can systematically identify performance bottlenecks in your frontend application across React, Vue, and Angular frameworks. This skill analyzes your codebase for common anti-patterns, runtime behavior, and bundle metrics to pinpoint the slowest components and queries. You'll receive a data-driven optimization roadmap prioritized by impact and implementation effort, complete with specific code examples and effort estimates your team can execute immediately.
by nakano1122
This skill helps you create balanced quarterly roadmaps by systematically evaluating features against infrastructure needs, team capacity, and risk factors. You'll transform vague priorities into a prioritized roadmap with clear trade-offs documented and stakeholder buy-in achieved. The output includes dependency mapping, capacity forecasts, and a phased delivery plan that scales with your team's growth.
by nakano1122
You'll structure high-stakes architectural decisions using a proven enterprise framework that systematically evaluates options, assesses risks, aligns stakeholders, and documents trade-offs. This skill guides you through decision matrices, financial impact analysis, implementation planning, and post-decision reviews—ensuring your organization makes defensible architectural choices that scale.
by nakano1122
Compile market data, identify comparable retail properties, and create professional market analysis reports that clients can trust. This skill transforms raw market information into polished, client-ready documents that justify valuations, support investment decisions, and guide retail location strategy. You'll save hours of research and formatting while delivering expert-level analysis.
by nakano1122
Claude systematically analyzes production incidents to identify root causes, contributing factors, and systemic vulnerabilities in your infrastructure. You'll receive structured postmortems that guide your team through incident timelines, pinpoint what actually failed, and prioritize infrastructure improvements that prevent recurrence. The skill also detects patterns across your incident history—revealing repeated failures that point to deeper architectural weaknesses.
by nakano1122
This skill generates comprehensive, personalized buyer education and real-time guidance tailored to each client's experience level and concerns. You'll handle objections with empathy and data-backed responses, guide clients through every transaction stage with clear next steps, and build buyer confidence that turns hesitation into action. It creates customized scripts, educational resources, and FAQ compilations that work across real estate, automotive, insurance, and B2B sales.
by nakano1122
Perform comprehensive financial analysis on multifamily acquisitions, from pro forma development to underwriting memoranda. Generate sensitivity analyses, cash flow projections, and investment metrics (IRR, CoC, NOI) that help you evaluate deal quality and portfolio performance. Create institutional-grade reports with rent rolls, expense breakdowns, and risk assessments for due diligence, lender presentations, or investor pitch decks.
by nakano1122
You can evaluate vendors comprehensively across security, financial stability, operations, and compliance using structured scoring matrices. Claude generates detailed risk assessments, produces vendor comparison reports, and recommends approval/rejection decisions backed by quantified scores.
by nakano1122