
Compliance Training Audit & Gap Analysis Generator
Audit compliance training programs and identify regulatory gaps with risk ratings
What You Can Do
This skill enables you to systematically evaluate your organization's compliance training programs against regulatory standards, industry benchmarks, and organizational policies. You'll receive detailed gap analysis reports with risk ratings, evidence documentation requirements, and prioritized remediation actions that transform scattered training records into defensible compliance documentation. It reduces audit preparation time from weeks to days while ensuring you address the highest-risk training gaps first.
Features
cross-references your training programs against SOX, HIPAA, GDPR, and industry-specific regulatory requirements
categorizes training deficiencies by compliance risk level (critical, high, medium, low)
identifies which mandatory training programs have the lowest non-completion rates and highest exposure
generates checklists for auditor-ready proof of training completion, comprehension verification, and policy acknowledgment
creates prioritized implementation timelines with resource requirements and success metrics
produces executive summaries showing compliance status, outstanding findings, and remediation progress
contextualizes your training program against industry standards and best practices
designs focused gap analysis following compliance failures or regulatory findings
Example Output
Example 1: HIPAA Training Gap Report
- Finding: Privacy & Security training completion at 73% (Gap: 27% below 95% requirement)
- Risk Rating: High — Non-compliant workforce increases breach exposure
- Remediation: Complete training for 18 staff members within 30 days; implement quarterly refresher
- Evidence Needed: Training roster, completion certificates, comprehension test scores
Example 2: SOX Compliance Audit Summary
- Controls Testing: 8/12 control procedures lack documented training evidence
- Critical Gap: Financial reporting team (12 people) missing mandatory controls training
- Risk Score: 8.5/10 — High likelihood of control deficiency finding
- Action Items: Deliver controls training, create attestation records, assign remediation owner
Example 3: Multi-Jurisdiction Readiness Assessment
- EU Operations: GDPR data handling training 91% complete (4-person gap)
- US Operations: State-specific privacy laws untrained in 3 states
- Recommended Training Queue: Prioritize EU team, then California/Texas/New York roles
What's Included
- SKILL.md instruction file with audit methodology and gap analysis framework:
- Compliance training audit template: regulatory requirements checklist by jurisdiction (SOX, HIPAA, GDPR, industry-specific)
- Gap analysis report template: structured format for documenting findings, risk ratings, and remediation priorities
- Evidence documentation checklist: auditor-ready proof requirements (completion records, comprehension verification, policy acknowledgment)
- Remediation action plan template: implementation timelines, resource assignments, and success metrics
Who It's For
- Instructional designers — auditing and improving compliance training effectiveness
- Compliance officers and risk managers — preparing for internal/external regulatory audits
- Training directors — demonstrating training program defensibility to auditors
- New compliance/training leadership — quickly assessing organizational training gaps and compliance posture
- Legal and audit teams — responding to regulatory findings that reference training inadequacies
Best For
- Pre-audit compliance training assessments and evidence documentation
- Gap analysis following compliance incidents, failed audits, or regulatory findings
- Annual compliance training effectiveness reviews and program updates
- Training program consolidation during mergers or organizational restructuring
- Remediation training design and implementation planning
- Auditor response packages and regulatory inquiry documentation







