Skip to content
Security
Command

/update-policy

Manage policy lifecycle and updates

From plugin
trust-center
430140 skills140 commands1 MCP
> /plugin marketplace add GRCEngClub/claude-grc-engineering

Command definition

update-policy.md
description: Manage policy lifecycle and updates

Update Policy

Manages policy documents through their lifecycle.

Arguments

  • `$1` - Policy file path or name (required)
  • `$2` - Action (optional: review, update, version, approve)

Actions

  • **review** - Analyze policy for gaps and needed updates
  • **update** - Suggest policy updates based on framework changes
  • **version** - Create new version with change tracking
  • **approve** - Generate approval workflow documentation

Policy Lifecycle

1. Draft → Review → Approve → Publish → Monitor → Retire

Instructions

1. Analyze current policy content 2. Compare against framework requirements 3. Identify needed updates 4. Generate redlined changes or new version 5. Create approval documentation

Examples

# Review general security policy
/grc-internal:update-policy "Information Security Policy.md" review

# Update policy for PCI-DSS March 2025 requirements
/grc-internal:update-policy "Access Control Policy.md" update

# Version control for compliance
/grc-internal:update-policy "Data Protection Policy.md" version

# Generate approval workflow
/grc-internal:update-policy "Incident Response Policy.md" approve
@grcengclub
Ships withtrust-center

Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.

430101 skills1 MCP
Get the whole plugin

Stars on GitHub

Momentum

stars in total
430
Star history of GRCEngClub/claude-grc-engineering on GitHub, a chart by star-history.com

Other commands on trust-center.

research

research

Command

Start or resume an academic research project — idea through literature, methodology, writing, feedback, and publishing

collect

collect

Command

Query AWS for compliance-relevant configuration across IAM, S3, CloudTrail, EBS, and emit findings conforming to the v1 contract.

setup

setup

Command

Install the frdocx-to-froscal-ssp Python pipeline and verify its dependencies. Idempotent.

retrieve

retrieve

Command

Retrieve a single AWS Secrets Manager secret value to stdout or a 0600-permission file. Opt-in retrieval mode — never writes to…

scan

scan

Command

Run testssl.sh against one or more HTTPS endpoints and emit v1 Findings mapped to SOC 2, NIST 800-53, PCI DSS 4.0.1, ISO 27001,…

More commands from other plugins.

deslop-reborn

deslop-reborn

Command

One iteration of the IronClaw Reborn de-slop loop — take ONE Reborn crate, fan out parallel review sub-agents (thermo-nuclear…

ironclaw13d13k
@nearai@nearaiInstall Command
audit

audit

Command

Audit a file, directory, or whole repo for insecure default configuration: fallback secrets, default credentials, fail-open…

@trailofbits@trailofbitsInstall Command
arsenal

arsenal

Command

Show which external bug-bounty tools are installed on this machine and print install hints for the missing ones. Curated from…

@awarexone@awarexoneInstall Command