Compliance Audit Mapper
Map security controls to frameworks and close compliance gaps
What You Can Do
You can rapidly map your security controls to major regulatory frameworks (SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS), automatically identify compliance gaps, and generate audit-ready evidence packages. The skill analyzes your control inventory against framework requirements, flags missing or inadequate controls, and produces structured documentation that accelerates compliance reviews and audit preparation.
Features
Match controls to framework requirements across SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS, and custom frameworks
Automatically surface missing or inadequately documented controls with risk severity
Create audit-ready documentation bundles with control descriptions and evidence references
View compliance status across multiple frameworks simultaneously to optimize control investments
Generate ranked action plans based on risk level and implementation effort
Structured forms for documenting control implementations and evidence locations
Calculate compliance percentage by framework and identify critical gaps
Example Output
SOC 2 Mapping Example:
| Control | CC6.1 | CC7.2 | Evidence Gap |
|---|---|---|---|
| MFA for user accounts | ✓ Satisfied | ✓ Satisfied | Needs test evidence |
| Encrypted backups | ✓ Satisfied | ✗ Missing | Document encryption standard |
| Quarterly access reviews | ✓ Satisfied | — | Complete for CC6.1 only |
Gap Analysis:
- CC7.3 Restricted physical access: No current control → High priority
- CC9.2 Change management: Documented but not fully tested → Medium priority
Evidence Package Summary:
- 8/12 SOC 2 criteria have strong evidence
- 3 criteria need additional documentation
- 1 criterion requires new control implementation
What's Included
- SKILL.md: The core compliance mapping skill with decision logic
- Control Mapping Template: Pre-built frameworks (SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS) with requirement lists
- Gap Analysis Checklist: Structured questions to evaluate control sufficiency
- Evidence Package Template: Audit-ready documentation format with control descriptions and evidence references
- Remediation Prioritization Worksheet: Risk/effort matrix for planning compliance improvements
- Audit Readiness Workflow: Step-by-step guide for preparing controls for third-party review
Who It's For
- Compliance Officers — Map controls and prepare for regulatory audits or certifications
- Internal Auditors — Assess control effectiveness against framework requirements
- Security Risk Managers — Identify compliance gaps and prioritize remediation
- Audit Consultants — Help clients structure evidence for third-party reviews
- GRC Managers — Plan governance, risk, and compliance improvements
Best For
- Control-to-framework mapping — Quickly determine which existing controls satisfy specific regulatory requirements
- Audit preparation — Organize evidence and identify gaps before formal compliance reviews
- Gap analysis — Discover missing or inadequate controls across multiple frameworks
- Multi-framework compliance — Maintain SOC 2, ISO 27001, GDPR, and HIPAA simultaneously
- Remediation planning — Prioritize which gaps to close first based on risk and effort
You might also like
This skill evaluates industrial real estate deals by analyzing property fundamentals, comparable market data, risk factors, and investment metrics. You get detailed assessments of deal viability, market positioning, and potential returns—all structured to support your investment thesis with hard data. Whether you're analyzing a single property or comparing multiple deals, you'll receive an executive summary with a clear buy/hold/pass recommendation.
by nakano1122
You systematically analyze multi-layered enterprise architectures, identify critical trade-offs across scalability, cost, and risk, and generate documented decisions that align technical choices with business strategy. This skill produces comprehensive architecture reviews that expose hidden dependencies, quantify implementation trade-offs, and deliver prioritized, actionable recommendations backed by formal Architecture Decision Records.
by nakano1122
You can leverage Claude to conduct thorough code reviews, evaluate code quality, identify architectural issues, and provide actionable feedback to your frontend engineers. This skill helps you standardize code review practices across your team, catch bugs before production, and maintain consistent quality standards while scaling your engineering capacity.
by nakano1122
You get a structured decision-making framework tailored to scale-ups navigating rapid growth. Claude helps you evaluate technical architecture choices, plan team scaling with hiring rubrics, prioritize technical debt against velocity demands, and craft engineering strategy communications for leadership. The framework balances short-term velocity with long-term maintainability.
by nakano1122
This skill transforms complex lease agreements into clear, actionable analysis. It evaluates terms against market benchmarks, identifies negotiation leverage points, and generates professional recommendation letters that strengthen your position in lease discussions.
by nakano1122
You conduct systematic architecture reviews that identify technical risks, quantify their business impact, and prioritize technical debt for remediation. The framework generates risk matrices, compliance gap analyses, and actionable roadmaps with effort estimates—ideal for due diligence, modernization planning, or governance decision-making. You produce executive summaries that translate technical findings into business language for stakeholder alignment.
by nakano1122
You get immediate structured incident assessment and response coordination. Claude analyzes incident severity, impact scope, and escalation requirements—then generates decision trees, stakeholder communication templates, and post-incident review guides. This skill accelerates your response from triage through resolution to after-action review.
by nakano1122
This skill helps you analyze properties systematically, generate accurate comparative market analyses (CMAs), and develop tailored negotiation strategies that give you the edge in competitive markets. You receive data-driven valuations backed by comparable sales, neighborhood trends, and property-specific factors. With built-in negotiation frameworks and offer positioning strategies, you confidently identify leverage points and market conditions to close deals at the best possible price.
by nakano1122