research
Start or resume an academic research project — idea through literature, methodology, writing, feedback, and publishing
Track compliance status across frameworks and controls
> /plugin marketplace add GRCEngClub/claude-grc-engineeringHow it fires
How this command gets triggered: by you, by Claude, or both.
/track-complianceContext preview
What this command does when you run it.
Track compliance status across frameworks and controls
description: Track compliance status across frameworks and controls
Monitors and reports on compliance status across multiple frameworks.
Trend data belongs in `./grc-data/metrics/` and should follow [`docs/GRC-DATA.md`](../../../docs/GRC-DATA.md) plus `schemas/metric.schema.json`.
Use `/grc-engineer:record-automation-metrics` when you want to seed automation trend lines instead of hand-authoring JSON rows.
1. Review current compliance posture across frameworks 2. Identify gaps and upcoming requirements 3. Generate compliance tracking report with:
# Track SOC 2 compliance /grc-internal:track-compliance SOC2 detailed # Track PCI-DSS compliance /grc-internal:track-compliance PCIDSS summary # Track all frameworks /grc-internal:track-compliance all dashboard # Track ISO 27001 compliance /grc-internal:track-compliance ISO27001 detailed
Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.
Repo: GRCEngClub/claude-grc-engineering
Start or resume an academic research project — idea through literature, methodology, writing, feedback, and publishing
Query AWS for compliance-relevant configuration across IAM, S3, CloudTrail, EBS, and emit findings conforming to the v1 contract.
Install the frdocx-to-froscal-ssp Python pipeline and verify its dependencies. Idempotent.
Retrieve a single AWS Secrets Manager secret value to stdout or a 0600-permission file. Opt-in retrieval mode — never writes to the findings cache.
Run testssl.sh against one or more HTTPS endpoints and emit v1 Findings mapped to SOC 2, NIST 800-53, PCI DSS 4.0.1, ISO 27001, and SCF controls.