/roc-guidance
ROC (Report on Compliance) template guidance
$ npx -y skills add GRCEngClub/claude-grc-engineering --agent claude-codeHow it fires
How this command gets triggered: by you, by Claude, or both.
- Fires itselfClaude auto-loads it when your prompt matches the work.
- You can call itInvoke it directly when you want it.
- Slash command
/roc-guidance
Context preview
What this command does when you run it.
ROC (Report on Compliance) template guidance
Command definition
roc-guidance.mddescription: ROC (Report on Compliance) template guidance
ROC Guidance
Provides guidance for completing the PCI DSS Report on Compliance.
Arguments
- `$1` - ROC section or requirement number (optional)
- `$2` - Topic (optional: testing, evidence, findings)
ROC Template Sections
1. **Contact Information** - Assessor and entity details 2. **Executive Summary** - Assessment scope and results 3. **Scope of Assessment** - CDE, connected systems, segmentation 4. **Detailed PCI DSS Requirements** - Req 1-12 + Appendices 5. **Appendix A** - Additional requirements (A1, A2, A3) 6. **Appendix B** - Compensating Controls Worksheet 7. **Appendix C** - Customized Approach
Key ROC Elements
For Each Requirement
- Requirement description
- Testing procedures performed
- In-place / Not in-place / N/A status
- Evidence reviewed
- Findings and observations
- Compensating controls (if applicable)
Testing Methods
- **Interview** - Personnel discussions
- **Examine** - Document/configuration review
- **Observe** - Process observation
Example
/pci-dss:roc-guidance 3 testing /pci-dss:roc-guidance "executive summary"
Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.
Repo: GRCEngClub/claude-grc-engineering
Other commands on trust-center.
- /research
Start or resume an academic research project — idea through literature, methodology, writing, feedback, and publishing
Open command - /collect
Query AWS for compliance-relevant configuration across IAM, S3, CloudTrail, EBS, and emit findings conforming to the v1 contract.
Open command - /setup
Install the frdocx-to-froscal-ssp Python pipeline and verify its dependencies. Idempotent.
Open command - /status
Check the deployment status of the trust center.
Open command - /scan
Run testssl.sh against one or more HTTPS endpoints and emit v1 Findings mapped to SOC 2, NIST 800-53, PCI DSS 4.0.1, ISO 27001, and SCF controls.
Open command - /compliance-posture
Serve a localhost compliance posture dashboard from monitor-continuous JSON
Open command