Industry-Specific Compliance Gap Analysis
Identify compliance gaps and build remediation roadmaps for your industry
What You Can Do
This skill performs a comprehensive compliance gap analysis tailored to your industry's specific regulations. You provide your current control environment, and Claude maps applicable regulations, identifies control deficiencies, and creates a prioritized remediation roadmap with timelines, resource requirements, and success metrics. The result is an audit-ready compliance strategy that addresses your highest-risk gaps first.
Features
Maps all applicable regulations, standards, and requirements for your specific industry to your operations and business processes
Evaluates your existing controls against regulatory requirements and identifies gaps, weaknesses, and missing controls
Ranks compliance gaps by regulatory risk exposure, likelihood of audit findings, and potential business impact
Creates a phased implementation plan with timelines, dependencies, resource needs, and go-live milestones
Generates audit-ready documentation templates for each remediation item, including evidence requirements and testing procedures
Develops key performance indicators to track remediation progress, control effectiveness, and ongoing compliance posture
Identifies compliance knowledge gaps and creates a targeted training plan for teams responsible for control execution
Evaluates third-party compliance obligations, contractual requirements, and monitoring strategies
Example Output
Compliance Gap Analysis Report — Financial Services
Executive Summary Identified 12 compliance gaps across regulatory domains. High-risk gaps: AML/KYC controls (timeline: 3 months), data privacy encryption (2 months). Medium-risk: audit trail enhancement (4 months). Current compliance maturity: 62%. Target maturity post-remediation: 94%.
Gap Summary by Risk Level
- High Risk (5 gaps): AML/KYC customer verification, transaction monitoring thresholds, beneficial ownership records, data residency compliance, incident response playbook
- Medium Risk (4 gaps): Segregation of duties documentation, change management controls, vendor SLA audits, employee background check frequency
- Low Risk (3 gaps): Policy version control, training sign-off automation, log retention labeling
Remediation Roadmap — Q1 2027
| Gap | Owner | Timeline | Resources | Success Metric |
|---|---|---|---|---|
| KYC Verification | Compliance | Jan–Feb | 2 FTE + vendor | 100% new customer verification |
| AML Monitoring | Risk | Jan–Mar | 1 FTE + $50K tool | Daily alert review + 0 missed alerts |
| Data Encryption | IT | Feb–Mar | 1 architect + 1 engineer | 100% data-at-rest encrypted |
| SOD Review | Internal Audit | Feb–Apr | 1 auditor + finance | Segregation policy finalized + approved |
Compliance Metrics Dashboard
- Gap Closure Rate: 0% → Target 50% (Q1) → 100% (Q2 2027)
- Control Testing Pass Rate: Current 78% → Target 95%
- Audit Finding Trend: 8 open → 2 by Q2 2027
- Staff Certification Rate: Current 65% → Target 100% by Q1 2027
What's Included
- Regulatory Framework Checklist: Complete mapping of industry regulations (HIPAA, SOX, GDPR, PCI-DSS, etc.) applicable to your business model and operations
- Gap Analysis Report: Detailed assessment of current control deficiencies, risk ratings, business impact, and regulatory exposure for each gap
- Prioritized Remediation Roadmap: Phased implementation plan with timelines, resource allocation, dependencies, cost estimates, and success metrics
- Control Documentation Templates: Audit-ready templates for control procedures, evidence collection, testing protocols, and sign-off documentation
- Compliance Metrics Dashboard: KPI framework and dashboard template to track remediation progress, control effectiveness, and ongoing compliance posture
- Stakeholder Communication Plan: Executive summary template, board reporting format, and cross-functional communication timeline for remediation execution
Who It's For
- Compliance Officers
- Risk Managers
- Internal Audit Directors
- Audit Committee Members
- General Counsels
Best For
- Annual compliance audits and assessments
- Implementing new regulations or industry standards
- Post-audit remediation planning
- Control environment redesign and strengthening
- Board-level compliance reporting and strategy
You might also like
Analyze your organization's corruption exposure across vendors, business units, and geographies to identify risk hotspots. Generate customized anti-corruption policies, due diligence procedures, and compliance frameworks aligned to FCPA and UK Bribery Act standards. Evaluate third-party compliance profiles and detect red flags in vendor questionnaires and regulatory filings.
by joabgonzalez
You can systematically design, audit, and strengthen your corporate whistleblower programs using structured frameworks that ensure legal compliance, protect reporters from retaliation, and reduce organizational risk. This skill generates comprehensive compliance checklists, policy templates, and risk assessments tailored to your industry and regulatory environment. You'll produce documentation that leadership, legal, and compliance teams can immediately implement to create safer, more effective reporting channels.
by joabgonzalez
You can design comprehensive data collection protocols that reduce errors, ensure consistency across multiple sites or staff, and produce trustworthy evaluation data. This skill helps you build scalable systems with built-in quality checks, staff training materials, and bias mitigation—enabling your team to collect clean, reliable data even with high turnover or complex populations.
by joabgonzalez
You extract powerful qualitative and quantitative evidence from your evaluation datasets and construct narrative arcs that connect program logic (activities → outputs → outcomes → impact). Claude systematically synthesizes survey responses, interview transcripts, program metrics, and participant feedback into compelling case studies, impact stories, and donor-ready reports that prove program effectiveness without overstating results.
by joabgonzalezYou'll transform your idea into a professionally formatted, market-ready ebook that's ready to sell on Amazon, your website, or anywhere else in just two days. This skill walks you through a battle-tested system that handles everything from manuscript structure to cover design to launch strategy, eliminating all the confusion that usually stretches ebook creation into months. You'll have a completed, polished product and a live sales page by Monday morning.
by joabgonzalez
You can take raw input from coalition members—surveys, one-on-ones, working group notes—and synthesize it into unified strategy documents, position statements, and action plans that reflect genuine consensus rather than tokenistic agreement. The skill surfaces alignment gaps and disagreements early so you can facilitate resolution before publishing, building authentic buy-in and accountability across all partners.
by joabgonzalez
Organize disparate data streams from surveys, interviews, admin records, and observations into a cohesive analysis framework. Cross-validate findings across quantitative and qualitative methods to identify robust patterns and surface anomalies. Generate documented, bias-checked conclusions aligned to your theory of change that stakeholders can confidently act on.
by joabgonzalez
You can rapidly analyze dozens or hundreds of qualitative responses—interviews, focus groups, open-ended survey answers, and participant feedback—to extract themes, patterns, and evidence of program impact. Claude codes responses against your logic model or emergent themes, flags anomalies where outcomes diverge from expectations, and generates frequency tables and quote libraries that substantiate your evaluation reports with real participant data.
by joabgonzalez