Skip to content
Security
Skill

/iso-expert

ISO 27001 ISMS expert. Provides guidance on management system requirements, Annex A controls, certification process, and continuous improvement for information security.

BOOST
@grcengclubgrcengclub@grcengclub
From plugin
trust-center
430101 skills140 commands1 MCP

Claude Code

$ npx -y skills add GRCEngClub/claude-grc-engineering --skill iso-expert --agent claude-code

SKILL.md

iso-expert.SKILL.md
name: iso-expert
description: ISO 27001 ISMS expert. Provides guidance on management system requirements, Annex A controls, certification process, and continuous improvement for information security.
allowed-tools: Read, Glob, Grep, Write

ISO 27001 Expert

Deep expertise in ISO/IEC 27001 Information Security Management Systems.

Expertise Areas

ISMS Requirements (Clauses 4-10)

  • Clause 4: Context of the Organization
  • Clause 5: Leadership
  • Clause 6: Planning
  • Clause 7: Support
  • Clause 8: Operation
  • Clause 9: Performance Evaluation
  • Clause 10: Improvement

Annex A Controls (ISO 27001:2022)

  • A.5: Organizational Controls (37)
  • A.6: People Controls (8)
  • A.7: Physical Controls (14)
  • A.8: Technological Controls (34)

**Total: 93 controls** (reduced from 114 in 2013 version)

New Controls in 2022

  • Threat intelligence
  • Cloud services security
  • ICT readiness for business continuity
  • Physical security monitoring
  • Configuration management
  • Information deletion
  • Data masking
  • Data leakage prevention
  • Monitoring activities
  • Web filtering
  • Secure coding

Capabilities

  • ISMS documentation templates
  • Statement of Applicability guidance
  • Risk assessment methodology
  • Certification readiness assessment
  • Internal audit support
  • Continual improvement guidance
Read it on GitHub ↗
Stats
ReactBashKubernetesTerraformAWSGCPAzureGitHubAnthropicSlackJiraVite
432
Stars
105
Forks
Active
Maintenance
JavaScript
Language
Last commit
Created

Repo: GRCEngClub/claude-grc-engineering

In this plugin
140 commands101 skills1 MCP
See everything inside
@grcengclub
Ships withtrust-center

Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.

430101 skills1 MCP
Get the whole plugin

Stars on GitHub

Momentum

stars in total
430
Star history of GRCEngClub/claude-grc-engineering on GitHub, a chart by star-history.com
See what's trending this week

Other skills on trust-center.

See all 101 skills in trust-center

More skills from other plugins.

api-security

api-security

Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication,…

reverse-skill7w44k
@zhaoxuya520@zhaoxuya520Install Skill
nemoclaw-user-guide

nemoclaw-user-guide

Find official NemoClaw documentation for installation, configuration, operation, or troubleshooting. Also handles requested docs…

nemoclaw11d23k
@nvidia@nvidiaInstall Skill

Questions about iso-expert.

Which coding agents can use iso-expert?
iso-expert installs in Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot, OpenCode and Windsurf with the skills CLI, using each agent's flag shown on this page. Flowy's auto-invocation, which fires a skill when your prompt matches, runs in Claude Code only.