IT Procurement Compliance & Risk Analyzer
Screen IT procurement proposals against FAR, NIST, FedRAMP, and Section 508 compliance
What You Can Do
You can rapidly screen IT procurement proposals and contract language against multiple compliance frameworks simultaneously—FAR, NIST, FedRAMP, Section 508, and agency-specific policies. The skill identifies missing security clauses, accessibility gaps, data protection violations, and regulatory risks, surfacing issues for legal review and flagging non-compliant bids early in source evaluation. This reduces review cycles, prevents non-compliant awards, and protects your agency from regulatory exposure.
Features
flags violations of acquisition regulations and procurement rules specific to IT services
checks vendor certifications against NIST standards, FedRAMP requirements, and FISMA compliance claims
identifies Section 508 gaps and missing accessibility commitments in technical proposals
surfaces missing standard clauses (IP rights, data handling, breach notification, audit rights)
evaluates compliance posture across competing proposals on a standardized matrix
flags high-risk compliance deviations that require formal exception justification
rates proposals by compliance risk level to inform source selection
adapts analysis to your agency's supplemental procurement policies and security requirements
Example Output
Vendor A Proposal Analysis:
- ✅ FedRAMP certification verified (submitted JAB letter)
- ⚠️ MISSING: Section 508 accessibility commitment language
- ❌ RISK: Data residency clause contradicts agency cloud policy
- ⚠️ MISSING: Incident notification timeline (FAR 52.239-1 requirement)
- Compliance Risk Score: Medium (1 missing clause, 1 policy conflict)
Vendor B Proposal Analysis:
- ✅ NIST SP 800-171 controls fully addressed
- ✅ Section 508 accessibility plan included with measurable milestones
- ✅ Data handling aligns with agency FISMA requirements
- ⚠️ MISSING: Formal dispute resolution clause
- Compliance Risk Score: Low (1 minor gap)
Recommendation: Vendor B cleared for source selection. Vendor A requires exception for Section 508 gap and policy conflict before legal review.
What's Included
- SKILL.md instruction file with compliance framework definitions:
- FAR/NIST compliance checklist: required clauses and standards by contract type (SaaS, cloud infrastructure, custom development)
- Section 508 accessibility matrix: technical and contractual requirements for government IT acquisitions
- Compliance risk scoring template: quantifies deviations and exception documentation needs
- Multi-vendor comparison framework: side-by-side compliance analysis for source selection support
Who It's For
- IT Procurement Officers — screening vendor proposals before legal team involvement
- Government Contract Specialists — validating compliance before source selection meetings
- Agency IT Security Teams — reviewing vendor security claims against NIST/FedRAMP standards
- Small Agency Procurement Staff — rapidly evaluating proposals without dedicated legal resources
- Federal IT Program Managers — identifying compliance risks in technology implementation agreements
Best For
- Pre-award compliance screening of software licenses and SaaS contracts
- Cloud infrastructure procurement (AWS GovCloud, Azure Government, etc.)
- Vendor proposal risk assessment before legal review
- Compliance exception documentation for non-standard acquisitions
- Multi-vendor comparison on security and regulatory dimensions
- Section 508 accessibility requirement validation in technical proposals
You might also like
You can process complex, conflicting intelligence streams and diplomatic communications to produce coherent situation assessments that identify non-obvious alliance pressure points, map each party's actual red lines versus public demands, and surface hidden assumptions driving different actors' positions. The skill generates actionable policy briefs within hours that senior officials can use to make strategic decisions in multilateral negotiations, regional conflicts, trade discussions, and crisis situations.
by garrytan
You can conduct comprehensive policy impact analyses that reveal second and third-order effects across multiple constituencies and sectors. The framework helps you quantify costs and benefits, map temporal impacts, identify equity consequences, and forecast implementation challenges—enabling you to produce defensible policy briefs and fiscal notes that inform legislative and executive decision-making.
by garrytan
Analyze any dataset to identify the optimal chart type for your data's structure and story. Claude generates complete, production-ready code in your chosen library (Chart.js, Recharts, Matplotlib, or Plotly) with accessibility features built-in—ARIA labels, semantic markup, high-contrast color palettes, and proper legend placement. You get working visualizations you can paste into your projects immediately, not mockups or design suggestions.
by garrytan
You systematically analyze construction bids against project specifications, budgets, and risk criteria to support defensible procurement decisions. This skill structures bid completeness verification, cost reasonableness benchmarking, contractor qualification validation, and scope-gap identification—producing evaluation matrices and protest-resistant documentation that meets public sector accountability requirements. You can assess multiple bids simultaneously and generate comparative rankings that combine cost, quality, and risk factors.
by garrytan
You can systematically organize complex health research findings, epidemiological data, and regulatory frameworks into coherent policy narratives. This skill helps you categorize evidence by strength, identify funding bias, weigh stakeholder testimony against research, surface unintended policy consequences, and draft compelling briefs that persuade government decision-makers—cutting through the noise to deliver decision-ready analysis instead of comprehensive literature reviews.
by garrytan
You can upload complex federal regulations, OMB guidance documents, agency directives, or interagency memoranda and receive structured compliance matrices that separate mandatory vs. discretionary requirements, identify responsible parties, map implementation deadlines, and flag ambiguities requiring legal review. This skill accelerates compliance planning, SOP drafting, and multi-office coordination by transforming dense regulatory language into actionable implementation frameworks.
by garrytan
You can conduct comprehensive policy audits across your municipality's ordinances, procedures, and fee schedules to uncover legal compliance gaps, conflicting requirements, and transparency blind spots. Claude maps policy hierarchies, cross-references state and federal regulations, flags inconsistencies between departments, and generates evidence-based audit reports you can present to elected bodies and department heads to justify policy updates.
by garrytan
You can upload contract documents, SOWs, RFPs, and clause language to Claude, which analyzes them against Federal Acquisition Regulation (FAR) and Defense Federal Acquisition Regulation Supplement (DFARS) requirements. The skill identifies missing or misconfigured clauses, socioeconomic compliance issues, and pricing documentation gaps, then provides prioritized remediation actions with specific regulatory citations. You'll receive documented compliance analysis suitable for legal review and protest defense.
by garrytan