/policy-lifecycle
Manages policy documents through their full lifecycle. Reviews policies for gaps, suggests updates based on framework changes, and tracks approval workflows.
$ npx -y skills add GRCEngClub/claude-grc-engineering --skill policy-lifecycle --agent claude-codeHow it fires
How this skill gets triggered: by you, by Claude, or both.
- Fires itselfAuto-invocation. Claude auto-loads it when your prompt matches the work.
- You can call itInvoke it directly when you want it.
- Slash command
/policy-lifecycle
Context preview
The summary Claude sees to decide when to auto-load this skill.
Manages policy documents through their full lifecycle. Reviews policies for gaps, suggests updates based on framework changes, and tracks approval workflows.
SKILL.md
policy-lifecycle.SKILL.mdname: policy-lifecycle description: Manages policy documents through their full lifecycle. Reviews policies for gaps, suggests updates based on framework changes, and tracks approval workflows. allowed-tools: Read, Write, Edit, Glob
Policy Lifecycle Manager
Manages policies from creation through retirement.
Capabilities
- **Policy Creation**: Draft new policies from templates
- **Gap Analysis**: Compare policies against framework requirements
- **Version Control**: Track changes between policy versions
- **Review Scheduling**: Manage annual policy review cycles
- **Approval Workflows**: Document approval chains
Policy Lifecycle Stages
1. **Draft**: Initial policy creation 2. **Review**: Stakeholder and legal review 3. **Approve**: Management approval 4. **Publish**: Release to organization 5. **Monitor**: Track compliance and effectiveness 6. **Update**: Periodic reviews and updates 7. **Retire**: End-of-life and archival
Policy Types Supported
- Information Security Policy
- Acceptable Use Policy
- Data Classification Policy
- Incident Response Policy
- Business Continuity Policy
- Access Control Policy
- Change Management Policy
- Vendor Management Policy
Output Formats
- Policy documents (Markdown, DOCX)
- Redlined change comparisons
- Policy inventory matrices
- Review schedule calendars
- Approval documentation
Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.
Repo: GRCEngClub/claude-grc-engineering
Other skills on trust-center.
- /academic-research-companion
Guide a research project through the full academic lifecycle — from raw idea to concrete research question, literature grounding, methodology, writing, feedback, and publication. Use this skill whenever the user shares a research idea, asks to "flesh out" a topic, wants sources
Open skill - /aws-inspector-expert
Expertise in evaluating AWS accounts for compliance — what checks are meaningful, which SCF controls they map to, and how to interpret aws CLI output.
Open skill - /azure-inspector-expert
Expertise in evaluating Azure subscription findings from azure-inspector and mapping them to SCF controls.
Open skill - /crowdstrike-inspector-expert
Interpret CrowdStrike Falcon findings for sensor coverage, policy visibility, and host group scoping.
Open skill - /datadog-inspector-expert
Interpret datadog-inspector findings and translate Datadog monitoring, audit, log-retention, SSO, and RBAC results into GRC evidence and remediation.
Open skill - /drata-inspector-expert
Interpret drata-inspector findings generated from drata-cli workflows and turn Drata control, monitor, evidence, personnel, and integration posture into GRC action.
Open skill