IT Procurement Compliance & Risk Analyzer
Screen IT procurement proposals against FAR, NIST, FedRAMP, and Section 508 compliance
What You Can Do
You can rapidly screen IT procurement proposals and contract language against multiple compliance frameworks simultaneously—FAR, NIST, FedRAMP, Section 508, and agency-specific policies. The skill identifies missing security clauses, accessibility gaps, data protection violations, and regulatory risks, surfacing issues for legal review and flagging non-compliant bids early in source evaluation. This reduces review cycles, prevents non-compliant awards, and protects your agency from regulatory exposure.
Features
flags violations of acquisition regulations and procurement rules specific to IT services
checks vendor certifications against NIST standards, FedRAMP requirements, and FISMA compliance claims
identifies Section 508 gaps and missing accessibility commitments in technical proposals
surfaces missing standard clauses (IP rights, data handling, breach notification, audit rights)
evaluates compliance posture across competing proposals on a standardized matrix
flags high-risk compliance deviations that require formal exception justification
rates proposals by compliance risk level to inform source selection
adapts analysis to your agency's supplemental procurement policies and security requirements
Example Output
Vendor A Proposal Analysis:
- ✅ FedRAMP certification verified (submitted JAB letter)
- ⚠️ MISSING: Section 508 accessibility commitment language
- ❌ RISK: Data residency clause contradicts agency cloud policy
- ⚠️ MISSING: Incident notification timeline (FAR 52.239-1 requirement)
- Compliance Risk Score: Medium (1 missing clause, 1 policy conflict)
Vendor B Proposal Analysis:
- ✅ NIST SP 800-171 controls fully addressed
- ✅ Section 508 accessibility plan included with measurable milestones
- ✅ Data handling aligns with agency FISMA requirements
- ⚠️ MISSING: Formal dispute resolution clause
- Compliance Risk Score: Low (1 minor gap)
Recommendation: Vendor B cleared for source selection. Vendor A requires exception for Section 508 gap and policy conflict before legal review.
What's Included
- SKILL.md instruction file with compliance framework definitions:
- FAR/NIST compliance checklist: required clauses and standards by contract type (SaaS, cloud infrastructure, custom development)
- Section 508 accessibility matrix: technical and contractual requirements for government IT acquisitions
- Compliance risk scoring template: quantifies deviations and exception documentation needs
- Multi-vendor comparison framework: side-by-side compliance analysis for source selection support
Who It's For
- IT Procurement Officers — screening vendor proposals before legal team involvement
- Government Contract Specialists — validating compliance before source selection meetings
- Agency IT Security Teams — reviewing vendor security claims against NIST/FedRAMP standards
- Small Agency Procurement Staff — rapidly evaluating proposals without dedicated legal resources
- Federal IT Program Managers — identifying compliance risks in technology implementation agreements
Best For
- Pre-award compliance screening of software licenses and SaaS contracts
- Cloud infrastructure procurement (AWS GovCloud, Azure Government, etc.)
- Vendor proposal risk assessment before legal review
- Compliance exception documentation for non-standard acquisitions
- Multi-vendor comparison on security and regulatory dimensions
- Section 508 accessibility requirement validation in technical proposals
You might also like
You can map vendor proposals against pre-established scoring criteria, identify compliance violations and anomalies, calculate weighted scores transparently, and generate contemporaneous evaluation documentation that demonstrates fair competition and legal defensibility. This skill helps procurement officers create audit trails that protect jurisdictions from bid protests and regulatory challenges.
by garrytan
You can generate structured federal compliance documents that automatically incorporate correct OMB circulars, Federal Acquisition Regulation (FAR) citations, statutory references, and agency-specific language. Specify the document type, target regulation, and key parameters, and Claude produces a compliant draft ready for review and approval without manual citation hunting or structural rework.
by garrytan
You can conduct comprehensive impact assessments of domestic policy proposals by applying a structured five-domain framework that examines economic implications, implementation barriers, affected populations, regulatory alignment, and second-order effects. The skill helps you identify stakeholder opposition risks, implementation vulnerabilities, and downstream consequences that preliminary analyses often miss, enabling evidence-based policy recommendations to decision-makers.
by garrytan
You can upload contract documents, SOWs, RFPs, and clause language to Claude, which analyzes them against Federal Acquisition Regulation (FAR) and Defense Federal Acquisition Regulation Supplement (DFARS) requirements. The skill identifies missing or misconfigured clauses, socioeconomic compliance issues, and pricing documentation gaps, then provides prioritized remediation actions with specific regulatory citations. You'll receive documented compliance analysis suitable for legal review and protest defense.
by garrytan
You can systematically decompose complex environmental policies into assessable components, evaluate them across regulatory, economic, and stakeholder dimensions, and identify implementation barriers and unintended consequences. This skill helps you produce evidence-based policy recommendations that withstand scrutiny from agency leadership, elected officials, and public stakeholders by applying structured assessment frameworks that integrate environmental science, legal requirements, economic analysis, and administrative capacity.
by garrytan
You can conduct comprehensive compliance audits of state agency operations by cross-referencing your policies, procedures, and practices against applicable regulatory frameworks, statutory requirements, and policy standards. The skill helps you identify compliance gaps systematically, document findings professionally, and develop remediation strategies with measurable timelines—enabling you to address issues proactively before external audits occur and demonstrate organizational commitment to regulatory adherence.
by garrytan
You can systematically organize complex health research findings, epidemiological data, and regulatory frameworks into coherent policy narratives. This skill helps you categorize evidence by strength, identify funding bias, weigh stakeholder testimony against research, surface unintended policy consequences, and draft compelling briefs that persuade government decision-makers—cutting through the noise to deliver decision-ready analysis instead of comprehensive literature reviews.
by garrytan
Analyze any dataset to identify the optimal chart type for your data's structure and story. Claude generates complete, production-ready code in your chosen library (Chart.js, Recharts, Matplotlib, or Plotly) with accessibility features built-in—ARIA labels, semantic markup, high-contrast color palettes, and proper legend placement. You get working visualizations you can paste into your projects immediately, not mockups or design suggestions.
by garrytan