/map-control
Map infrastructure code to compliance framework controls
$ npx -y skills add GRCEngClub/claude-grc-engineering --agent claude-codeHow it fires
How this command gets triggered: by you, by Claude, or both.
- Fires itselfClaude auto-loads it when your prompt matches the work.
- You can call itInvoke it directly when you want it.
- Slash command
/map-control
Context preview
What this command does when you run it.
Map infrastructure code to compliance framework controls
Command definition
map-control.mddescription: Map infrastructure code to compliance framework controls
Map Control
Maps infrastructure-as-code (IaC) files to specific compliance framework controls.
Arguments
- `$1` - IaC file path (required)
- `$2` - Framework name (optional, defaults to SOC2)
Supported Frameworks
- SOC2
- ISO27001
- NIST80053
- PCIDSS
- HIPAA
- GDPR
- CMMC
- HITRUST
- CIS
- CSA-CCM
- NYDFS
- DORA
- STATERAMP
- ESSENTIAL8
- GLBA
Instructions
1. Run the map-control script:
node plugins/grc-engineer/scripts/map-control.js $ARGUMENTS
2. The script analyzes the IaC file and generates a compliance mapping report.
3. Review the generated markdown report showing which controls are satisfied.
4. Use the report for audit documentation and compliance tracking.
Examples
# Map to SOC 2 controls /grc-engineer:map-control main.tf SOC2 # Map to PCI-DSS requirements /grc-engineer:map-control main.tf PCIDSS # Map to ISO 27001 controls /grc-engineer:map-control terraform/ ISO27001 # Map to NIST 800-53 controls /grc-engineer:map-control infrastructure/ NIST80053
Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.
Repo: GRCEngClub/claude-grc-engineering
Other commands on trust-center.
- /research
Start or resume an academic research project — idea through literature, methodology, writing, feedback, and publishing
Open command - /collect
Query AWS for compliance-relevant configuration across IAM, S3, CloudTrail, EBS, and emit findings conforming to the v1 contract.
Open command - /setup
Install the frdocx-to-froscal-ssp Python pipeline and verify its dependencies. Idempotent.
Open command - /status
Check the deployment status of the trust center.
Open command - /scan
Run testssl.sh against one or more HTTPS endpoints and emit v1 Findings mapped to SOC 2, NIST 800-53, PCI DSS 4.0.1, ISO 27001, and SCF controls.
Open command - /compliance-posture
Serve a localhost compliance posture dashboard from monitor-continuous JSON
Open command