trust-center
Turns raw evidence from cloud accounts, SaaS tools and code into framework-aligned findings, gap reports and remediation steps, so compliance checks become repeatable and easier to audit.
101 skills430
@grcengclub- 430Stars earned
- 1Plugin
- 101Skills
- 140Commands
- 1MCP server
Plugins
1@grcengclubSkills
101academic-research-comp…
Guide a research project through the full academic lifecycle — from raw idea to concrete research question, literature grounding,…
@grcengclubaccess-review-triage
Helps you triage a quarterly user access review from an Okta, Azure AD, AWS IAM, GitHub, or generic CSV/JSON export. For each…
@grcengclubau-apra-cps-234-expert
APRA CPS 234 expert for Australian prudential information security. Reference-depth framework plugin with scope determination,…
@grcengclubaudit-ready-pr-reviewe…
Reviews pull requests for compliance regressions. Scans code diffs for security and compliance violations, flags issues, and…
@grcengclubautomation-coverage-an…
Composes week-over-week automation coverage narratives. Use when /report:automation-coverage is running. Frames the delta for…
@grcengclubaws-inspector-expert
Expertise in evaluating AWS accounts for compliance — what checks are meaningful, which SCF controls they map to, and how to…
@grcengclubaws-secrets-inspector-…
Use when interpreting AWS Secrets Manager connector output, deciding between inspector and retrieve modes, drafting SCF-mapped…
@grcengclubazure-inspector-expert
Expertise in evaluating Azure subscription findings from azure-inspector and mapping them to SCF controls.
@grcengclubccm-expert
CSA CCM expert for cloud security. Deep knowledge of Cloud Security Alliance Cloud Controls Matrix including 197 controls, 17…
@grcengclubch-fadp-expert
Swiss Federal Act on Data Protection (nFADP) expert. Deep knowledge of the revised 2023 Swiss FADP including voluntary DSO,…
@grcengclubcis-expert
CIS Controls v8 expert for baseline security. Deep knowledge of 18 controls, 153 safeguards, Implementation Groups (IG1/IG2/IG3),…
@grcengclubcmmc-assessment-object…
Verbatim reference for all 320 NIST 800-171A Rev 2 assessment objectives, plus the Rev 2 → Rev 3 control crosswalk. Use for…
@grcengclubCommands
140add-document
CommandAdd a compliance document to the trust center.
@grcengclubanalyze-questionnaire
CommandAnalyze vendor security questionnaire responses
@grcengclubannex-a-deep-dive
CommandDeep dive analysis of ISO 27001 Annex A control domains with implementation guidance
@grcengclubaudit-workflow
CommandCreate an editable draw.io grc audit workflow diagram for GRC professionals
@grcengclubautomation-coverage
CommandWeek-over-week automation coverage analysis with ROI narrative
@grcengclubbaseline-select
CommandSelect and tailor FedRAMP Rev 5 baseline
@grcengclubboard-brief
CommandQuarterly audit-committee or board-ready narrative from findings, incidents, and residual risk
@grcengclubbreach-process
CommandGDPR breach notification procedures and 72-hour requirement
@grcengclubbuild
CommandScaffold a production-ready React/Vite portfolio website from site-config.json, with components populated from your GRC…
@grcengclubcaiq-generate
CommandGenerate CAIQ (Consensus Assessments Initiative Questionnaire) responses
@grcengclubMCP server
1linear-grc-club
MCPShips with trust-center: Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from…
@grcengclubIs this you? Claim your profilePut a plugin at the top of Plugins, from $9