Industry-Specific Compliance Gap Analysis
Identify compliance gaps and build remediation roadmaps for your industry
What You Can Do
This skill performs a comprehensive compliance gap analysis tailored to your industry's specific regulations. You provide your current control environment, and Claude maps applicable regulations, identifies control deficiencies, and creates a prioritized remediation roadmap with timelines, resource requirements, and success metrics. The result is an audit-ready compliance strategy that addresses your highest-risk gaps first.
Features
Maps all applicable regulations, standards, and requirements for your specific industry to your operations and business processes
Evaluates your existing controls against regulatory requirements and identifies gaps, weaknesses, and missing controls
Ranks compliance gaps by regulatory risk exposure, likelihood of audit findings, and potential business impact
Creates a phased implementation plan with timelines, dependencies, resource needs, and go-live milestones
Generates audit-ready documentation templates for each remediation item, including evidence requirements and testing procedures
Develops key performance indicators to track remediation progress, control effectiveness, and ongoing compliance posture
Identifies compliance knowledge gaps and creates a targeted training plan for teams responsible for control execution
Evaluates third-party compliance obligations, contractual requirements, and monitoring strategies
Example Output
Compliance Gap Analysis Report — Financial Services
Executive Summary Identified 12 compliance gaps across regulatory domains. High-risk gaps: AML/KYC controls (timeline: 3 months), data privacy encryption (2 months). Medium-risk: audit trail enhancement (4 months). Current compliance maturity: 62%. Target maturity post-remediation: 94%.
Gap Summary by Risk Level
- High Risk (5 gaps): AML/KYC customer verification, transaction monitoring thresholds, beneficial ownership records, data residency compliance, incident response playbook
- Medium Risk (4 gaps): Segregation of duties documentation, change management controls, vendor SLA audits, employee background check frequency
- Low Risk (3 gaps): Policy version control, training sign-off automation, log retention labeling
Remediation Roadmap — Q1 2027
| Gap | Owner | Timeline | Resources | Success Metric |
|---|---|---|---|---|
| KYC Verification | Compliance | Jan–Feb | 2 FTE + vendor | 100% new customer verification |
| AML Monitoring | Risk | Jan–Mar | 1 FTE + $50K tool | Daily alert review + 0 missed alerts |
| Data Encryption | IT | Feb–Mar | 1 architect + 1 engineer | 100% data-at-rest encrypted |
| SOD Review | Internal Audit | Feb–Apr | 1 auditor + finance | Segregation policy finalized + approved |
Compliance Metrics Dashboard
- Gap Closure Rate: 0% → Target 50% (Q1) → 100% (Q2 2027)
- Control Testing Pass Rate: Current 78% → Target 95%
- Audit Finding Trend: 8 open → 2 by Q2 2027
- Staff Certification Rate: Current 65% → Target 100% by Q1 2027
What's Included
- Regulatory Framework Checklist: Complete mapping of industry regulations (HIPAA, SOX, GDPR, PCI-DSS, etc.) applicable to your business model and operations
- Gap Analysis Report: Detailed assessment of current control deficiencies, risk ratings, business impact, and regulatory exposure for each gap
- Prioritized Remediation Roadmap: Phased implementation plan with timelines, resource allocation, dependencies, cost estimates, and success metrics
- Control Documentation Templates: Audit-ready templates for control procedures, evidence collection, testing protocols, and sign-off documentation
- Compliance Metrics Dashboard: KPI framework and dashboard template to track remediation progress, control effectiveness, and ongoing compliance posture
- Stakeholder Communication Plan: Executive summary template, board reporting format, and cross-functional communication timeline for remediation execution
Who It's For
- Compliance Officers
- Risk Managers
- Internal Audit Directors
- Audit Committee Members
- General Counsels
Best For
- Annual compliance audits and assessments
- Implementing new regulations or industry standards
- Post-audit remediation planning
- Control environment redesign and strengthening
- Board-level compliance reporting and strategy
You might also like
You can design comprehensive data collection protocols that reduce errors, ensure consistency across multiple sites or staff, and produce trustworthy evaluation data. This skill helps you build scalable systems with built-in quality checks, staff training materials, and bias mitigation—enabling your team to collect clean, reliable data even with high turnover or complex populations.
by joabgonzalez
Analyze your board's practices, policies, and documentation to identify governance compliance gaps and fiduciary duty risks. You receive expert-level legal review findings with prioritized recommendations for liability mitigation. The skill evaluates your governance framework against industry best practices and regulatory requirements.
by joabgonzalez
You can design complete campaign architectures that escalate strategically from education through direct action, with tailored messaging for different audiences (allies, decision-makers, public). Map power dynamics to identify leverage points, build coalition strategies across organizations, and diagnose why campaigns stall so you can adjust tactics without abandoning strategy.
by joabgonzalez
Generate privacy impact assessments, data processing agreements, and breach notification templates tailored to your organization's specific data flows and regulatory obligations. You'll produce audit-ready compliance documentation, identify data handling risks, and streamline responses to regulatory requirements and data subject requests.
by joabgonzalez
You can systematically structure complex corporate ethics investigations, analyze violations against consistent standards, and develop legally defensible enforcement decisions. This skill provides investigation protocols, violation assessment frameworks, and decision documentation templates that help you document findings objectively and justify enforcement actions through structured reasoning.
by joabgonzalezYou'll transform your idea into a professionally formatted, market-ready ebook that's ready to sell on Amazon, your website, or anywhere else in just two days. This skill walks you through a battle-tested system that handles everything from manuscript structure to cover design to launch strategy, eliminating all the confusion that usually stretches ebook creation into months. You'll have a completed, polished product and a live sales page by Monday morning.
by joabgonzalez
You can rapidly analyze dozens or hundreds of qualitative responses—interviews, focus groups, open-ended survey answers, and participant feedback—to extract themes, patterns, and evidence of program impact. Claude codes responses against your logic model or emergent themes, flags anomalies where outcomes diverge from expectations, and generates frequency tables and quote libraries that substantiate your evaluation reports with real participant data.
by joabgonzalez
Generate SEC-compliant board materials, governance documentation, and risk disclosures that meet Delaware corporate law standards and best practices. You can prepare meeting agendas, board resolutions, committee charters, conflict disclosures, and minutes templates—all with embedded compliance logic and audit trails. This skill streamlines board administration by automating routine documentation while ensuring every template meets regulatory requirements.
by joabgonzalez