Command
research
Start or resume an academic research project — idea through literature, methodology, writing, feedback, and publishing
@grcengclubView CommandSecurity
Command
/roc-guidance
ROC (Report on Compliance) template guidance
Install
> /plugin marketplace add GRCEngClub/claude-grc-engineeringHow it fires
How this command gets triggered: by you, by Claude, or both.
- Fires itselfClaude auto-loads it when your prompt matches the work.
- You can call itInvoke it directly when you want it.
- Slash command
/roc-guidance
Context preview
What this command does when you run it.
ROC (Report on Compliance) template guidance
Command definition
roc-guidance.mddescription: ROC (Report on Compliance) template guidance
ROC Guidance
Provides guidance for completing the PCI DSS Report on Compliance.
Arguments
- `$1` - ROC section or requirement number (optional)
- `$2` - Topic (optional: testing, evidence, findings)
ROC Template Sections
1. **Contact Information** - Assessor and entity details 2. **Executive Summary** - Assessment scope and results 3. **Scope of Assessment** - CDE, connected systems, segmentation 4. **Detailed PCI DSS Requirements** - Req 1-12 + Appendices 5. **Appendix A** - Additional requirements (A1, A2, A3) 6. **Appendix B** - Compensating Controls Worksheet 7. **Appendix C** - Customized Approach
Key ROC Elements
For Each Requirement
- Requirement description
- Testing procedures performed
- In-place / Not in-place / N/A status
- Evidence reviewed
- Findings and observations
- Compensating controls (if applicable)
Testing Methods
- **Interview** - Personnel discussions
- **Examine** - Document/configuration review
- **Observe** - Process observation
Example
/pci-dss:roc-guidance 3 testing /pci-dss:roc-guidance "executive summary"
Ships withtrust-center
Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.
Get the whole plugin
Stats
398
Stars
90
Forks
Active
Maintenance
JavaScript
Language
9d ago
Last commit
8mo ago
Created
Repo: GRCEngClub/claude-grc-engineering
Other commands on trust-center.
@grcengclubView CommandCommand
collect
Query AWS for compliance-relevant configuration across IAM, S3, CloudTrail, EBS, and emit findings conforming to the v1 contract.
@grcengclubView CommandCommand
setup
Install the frdocx-to-froscal-ssp Python pipeline and verify its dependencies. Idempotent.
@grcengclubView CommandCommand
Command
retrieve
Retrieve a single AWS Secrets Manager secret value to stdout or a 0600-permission file. Opt-in retrieval mode — never writes to the findings cache.
@grcengclubView CommandCommand
scan
Run testssl.sh against one or more HTTPS endpoints and emit v1 Findings mapped to SOC 2, NIST 800-53, PCI DSS 4.0.1, ISO 27001, and SCF controls.
@grcengclubView Command