Industry-Specific Compliance Gap Analysis
Identify compliance gaps and build remediation roadmaps for your industry
What You Can Do
This skill performs a comprehensive compliance gap analysis tailored to your industry's specific regulations. You provide your current control environment, and Claude maps applicable regulations, identifies control deficiencies, and creates a prioritized remediation roadmap with timelines, resource requirements, and success metrics. The result is an audit-ready compliance strategy that addresses your highest-risk gaps first.
Features
Maps all applicable regulations, standards, and requirements for your specific industry to your operations and business processes
Evaluates your existing controls against regulatory requirements and identifies gaps, weaknesses, and missing controls
Ranks compliance gaps by regulatory risk exposure, likelihood of audit findings, and potential business impact
Creates a phased implementation plan with timelines, dependencies, resource needs, and go-live milestones
Generates audit-ready documentation templates for each remediation item, including evidence requirements and testing procedures
Develops key performance indicators to track remediation progress, control effectiveness, and ongoing compliance posture
Identifies compliance knowledge gaps and creates a targeted training plan for teams responsible for control execution
Evaluates third-party compliance obligations, contractual requirements, and monitoring strategies
Example Output
Compliance Gap Analysis Report — Financial Services
Executive Summary Identified 12 compliance gaps across regulatory domains. High-risk gaps: AML/KYC controls (timeline: 3 months), data privacy encryption (2 months). Medium-risk: audit trail enhancement (4 months). Current compliance maturity: 62%. Target maturity post-remediation: 94%.
Gap Summary by Risk Level
- High Risk (5 gaps): AML/KYC customer verification, transaction monitoring thresholds, beneficial ownership records, data residency compliance, incident response playbook
- Medium Risk (4 gaps): Segregation of duties documentation, change management controls, vendor SLA audits, employee background check frequency
- Low Risk (3 gaps): Policy version control, training sign-off automation, log retention labeling
Remediation Roadmap — Q1 2027
| Gap | Owner | Timeline | Resources | Success Metric |
|---|---|---|---|---|
| KYC Verification | Compliance | Jan–Feb | 2 FTE + vendor | 100% new customer verification |
| AML Monitoring | Risk | Jan–Mar | 1 FTE + $50K tool | Daily alert review + 0 missed alerts |
| Data Encryption | IT | Feb–Mar | 1 architect + 1 engineer | 100% data-at-rest encrypted |
| SOD Review | Internal Audit | Feb–Apr | 1 auditor + finance | Segregation policy finalized + approved |
Compliance Metrics Dashboard
- Gap Closure Rate: 0% → Target 50% (Q1) → 100% (Q2 2027)
- Control Testing Pass Rate: Current 78% → Target 95%
- Audit Finding Trend: 8 open → 2 by Q2 2027
- Staff Certification Rate: Current 65% → Target 100% by Q1 2027
What's Included
- Regulatory Framework Checklist: Complete mapping of industry regulations (HIPAA, SOX, GDPR, PCI-DSS, etc.) applicable to your business model and operations
- Gap Analysis Report: Detailed assessment of current control deficiencies, risk ratings, business impact, and regulatory exposure for each gap
- Prioritized Remediation Roadmap: Phased implementation plan with timelines, resource allocation, dependencies, cost estimates, and success metrics
- Control Documentation Templates: Audit-ready templates for control procedures, evidence collection, testing protocols, and sign-off documentation
- Compliance Metrics Dashboard: KPI framework and dashboard template to track remediation progress, control effectiveness, and ongoing compliance posture
- Stakeholder Communication Plan: Executive summary template, board reporting format, and cross-functional communication timeline for remediation execution
Who It's For
- Compliance Officers
- Risk Managers
- Internal Audit Directors
- Audit Committee Members
- General Counsels
Best For
- Annual compliance audits and assessments
- Implementing new regulations or industry standards
- Post-audit remediation planning
- Control environment redesign and strengthening
- Board-level compliance reporting and strategy
You might also like
You structure complex evaluation data into evidence-based narratives that satisfy donors, boards, and regulators simultaneously. The skill synthesizes quantitative metrics and qualitative findings into compliant reports, generates multi-level summaries for different audiences, identifies evidence gaps before submission, and adapts findings across funder-specific templates—cutting your reporting cycle from weeks to days.
by joabgonzalezYou'll transform your idea into a professionally formatted, market-ready ebook that's ready to sell on Amazon, your website, or anywhere else in just two days. This skill walks you through a battle-tested system that handles everything from manuscript structure to cover design to launch strategy, eliminating all the confusion that usually stretches ebook creation into months. You'll have a completed, polished product and a live sales page by Monday morning.
by joabgonzalez
You can transform raw program data—quantitative metrics, qualitative feedback, and contextual factors—into coherent, evidence-based impact reports tailored to different stakeholder audiences. The skill synthesizes mixed-method data, identifies key findings and anomalies, structures reports using nonprofit best practices (theory of change alignment, outcome hierarchy, attribution frameworks), and generates data-grounded recommendations without manual compilation work.
by joabgonzalez
You can take raw input from coalition members—surveys, one-on-ones, working group notes—and synthesize it into unified strategy documents, position statements, and action plans that reflect genuine consensus rather than tokenistic agreement. The skill surfaces alignment gaps and disagreements early so you can facilitate resolution before publishing, building authentic buy-in and accountability across all partners.
by joabgonzalez
You can systematically investigate corporate ethics violations, generate comprehensive compliance policies, and document risk assessments with professional frameworks. The skill produces investigation plans with evidence tracking, policy frameworks aligned to legal standards, and risk matrices that prioritize remediation actions. You'll get reproducible documentation that stands up to audit review and demonstrates your organization's commitment to ethics compliance.
by joabgonzalez
You can rapidly develop evidence-based campaign strategies that move policy and systems change with limited resources. This skill helps you map power structures to identify decision-makers and gatekeepers, analyze opposition interests and vulnerabilities, pinpoint leverage points where organized pressure creates accountability, develop audience-specific messaging, and sequence tactics across campaign phases. You'll move beyond generic action lists to build campaigns with a clear theory of change grounded in who holds power and how to create measurable impact.
by joabgonzalez
You can quickly analyze proposed federal, state, or local regulations to identify compliance requirements, competitive impacts, and business risks. The skill helps you draft substantive regulatory comments that reflect your organization's position, synthesize stakeholder viewpoints into coordinated responses, and evaluate the feasibility and costs of regulatory compliance.
by joabgonzalez
You can systematically structure complex corporate ethics investigations, analyze violations against consistent standards, and develop legally defensible enforcement decisions. This skill provides investigation protocols, violation assessment frameworks, and decision documentation templates that help you document findings objectively and justify enforcement actions through structured reasoning.
by joabgonzalez