/ksi-check
Check FedRAMP 20X Key Security Indicators compliance
$ npx -y skills add GRCEngClub/claude-grc-engineering --agent claude-codeHow it fires
How this command gets triggered: by you, by Claude, or both.
- Fires itselfClaude auto-loads it when your prompt matches the work.
- You can call itInvoke it directly when you want it.
- Slash command
/ksi-check
Context preview
What this command does when you run it.
Check FedRAMP 20X Key Security Indicators compliance
Command definition
ksi-check.mddescription: Check FedRAMP 20X Key Security Indicators compliance
KSI Check
Evaluates compliance with FedRAMP 20X Key Security Indicators.
Arguments
- `$1` - KSI category (optional, defaults to all)
- `$2` - Evidence path (optional)
KSI Categories
| Code | Category | Focus | |------|----------|-------| | AFR | Access and Flow Restriction | Network segmentation, access controls | | CED | Configuration and Event Data | Logging, monitoring, SIEM | | CMT | Configuration Management and Tracking | Asset inventory, baselines | | CNA | Cloud Native Architecture | Container security, orchestration | | IAM | Identity and Access Management | Authentication, authorization | | INR | Incident Notification and Reporting | Incident response, communication | | MLA | Malware Analysis | Endpoint protection, threat detection | | PIY | Physical and Infrastructure Security | Data center, physical controls |
20X Approach
FedRAMP 20X emphasizes:
- **Automated validation** over manual assessment
- **Continuous monitoring** over point-in-time audits
- **Machine-readable policies** over PDF documents
- **Evidence automation** over manual collection
Output
- KSI compliance status by category
- Automation readiness assessment
- Gap analysis against 20X requirements
- Integration recommendations
Example
/fedramp-20x:ksi-check IAM
/fedramp-20x:ksi-check all ./evidence/
Read more
description: Check FedRAMP 20X Key Security Indicators compliance
KSI Check
Evaluates compliance with FedRAMP 20X Key Security Indicators.
Arguments
- `$1` - KSI category (optional, defaults to all)
- `$2` - Evidence path (optional)
KSI Categories
| Code | Category | Focus | |------|----------|-------| | AFR | Access and Flow Restriction | Network segmentation, access controls | | CED | Configuration and Event Data | Logging, monitoring, SIEM | | CMT | Configuration Management and Tracking | Asset inventory, baselines | | CNA | Cloud Native Architecture | Container security, orchestration | | IAM | Identity and Access Management | Authentication, authorization | | INR | Incident Notification and Reporting | Incident response, communication | | MLA | Malware Analysis | Endpoint protection, threat detection | | PIY | Physical and Infrastructure Security | Data center, physical controls |
20X Approach
FedRAMP 20X emphasizes:
- **Automated validation** over manual assessment
- **Continuous monitoring** over point-in-time audits
- **Machine-readable policies** over PDF documents
- **Evidence automation** over manual collection
Output
- KSI compliance status by category
- Automation readiness assessment
- Gap analysis against 20X requirements
- Integration recommendations
Example
/fedramp-20x:ksi-check IAM /fedramp-20x:ksi-check all ./evidence/
Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.
Repo: GRCEngClub/claude-grc-engineering
Other commands on trust-center.
- /research
Start or resume an academic research project — idea through literature, methodology, writing, feedback, and publishing
Open command - /collect
Query AWS for compliance-relevant configuration across IAM, S3, CloudTrail, EBS, and emit findings conforming to the v1 contract.
Open command - /setup
Install the frdocx-to-froscal-ssp Python pipeline and verify its dependencies. Idempotent.
Open command - /status
Check the deployment status of the trust center.
Open command - /scan
Run testssl.sh against one or more HTTPS endpoints and emit v1 Findings mapped to SOC 2, NIST 800-53, PCI DSS 4.0.1, ISO 27001, and SCF controls.
Open command - /compliance-posture
Serve a localhost compliance posture dashboard from monitor-continuous JSON
Open command