/update-policy
Manage policy lifecycle and updates
$ npx -y skills add GRCEngClub/claude-grc-engineering --agent claude-codeHow it fires
How this command gets triggered: by you, by Claude, or both.
- Fires itselfClaude auto-loads it when your prompt matches the work.
- You can call itInvoke it directly when you want it.
- Slash command
/update-policy
Context preview
What this command does when you run it.
Manage policy lifecycle and updates
Command definition
update-policy.mddescription: Manage policy lifecycle and updates
Update Policy
Manages policy documents through their lifecycle.
Arguments
- `$1` - Policy file path or name (required)
- `$2` - Action (optional: review, update, version, approve)
Actions
- **review** - Analyze policy for gaps and needed updates
- **update** - Suggest policy updates based on framework changes
- **version** - Create new version with change tracking
- **approve** - Generate approval workflow documentation
Policy Lifecycle
1. Draft → Review → Approve → Publish → Monitor → Retire
Instructions
1. Analyze current policy content 2. Compare against framework requirements 3. Identify needed updates 4. Generate redlined changes or new version 5. Create approval documentation
Examples
# Review general security policy /grc-internal:update-policy "Information Security Policy.md" review # Update policy for PCI-DSS March 2025 requirements /grc-internal:update-policy "Access Control Policy.md" update # Version control for compliance /grc-internal:update-policy "Data Protection Policy.md" version # Generate approval workflow /grc-internal:update-policy "Incident Response Policy.md" approve
Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.
Repo: GRCEngClub/claude-grc-engineering
Other commands on trust-center.
- /research
Start or resume an academic research project — idea through literature, methodology, writing, feedback, and publishing
Open command - /collect
Query AWS for compliance-relevant configuration across IAM, S3, CloudTrail, EBS, and emit findings conforming to the v1 contract.
Open command - /setup
Install the frdocx-to-froscal-ssp Python pipeline and verify its dependencies. Idempotent.
Open command - /status
Check the deployment status of the trust center.
Open command - /scan
Run testssl.sh against one or more HTTPS endpoints and emit v1 Findings mapped to SOC 2, NIST 800-53, PCI DSS 4.0.1, ISO 27001, and SCF controls.
Open command - /compliance-posture
Serve a localhost compliance posture dashboard from monitor-continuous JSON
Open command