Skip to content
Security
Skill

/policy-lifecycle

Manages policy documents through their full lifecycle. Reviews policies for gaps, suggests updates based on framework changes, and tracks approval workflows.

Boost this skill
@grcengclubgrcengclub@grcengclub
From plugin
trust-center
402101 skills140 commands1 MCP
Install
$ npx -y skills add GRCEngClub/claude-grc-engineering --skill policy-lifecycle --agent claude-code

How it fires

How this skill gets triggered: by you, by Claude, or both.

  • Fires itselfAuto-invocation. Claude auto-loads it when your prompt matches the work.Auto-invocation is when the right skill fires by itself at the right moment, driven by a FLOW.md router and a hook, instead of you invoking it by name. It is the difference between a skill being installed and a skill actually getting used.Read the full definition →
  • You can call itInvoke it directly when you want it.
  • Slash command/policy-lifecycle

Context preview

The summary Claude sees to decide when to auto-load this skill.

Manages policy documents through their full lifecycle. Reviews policies for gaps, suggests updates based on framework changes, and tracks approval workflows.

SKILL.md

policy-lifecycle.SKILL.md
name: policy-lifecycle
description: Manages policy documents through their full lifecycle. Reviews policies for gaps, suggests updates based on framework changes, and tracks approval workflows.
allowed-tools: Read, Write, Edit, Glob

Policy Lifecycle Manager

Manages policies from creation through retirement.

Capabilities

  • **Policy Creation**: Draft new policies from templates
  • **Gap Analysis**: Compare policies against framework requirements
  • **Version Control**: Track changes between policy versions
  • **Review Scheduling**: Manage annual policy review cycles
  • **Approval Workflows**: Document approval chains

Policy Lifecycle Stages

1. **Draft**: Initial policy creation 2. **Review**: Stakeholder and legal review 3. **Approve**: Management approval 4. **Publish**: Release to organization 5. **Monitor**: Track compliance and effectiveness 6. **Update**: Periodic reviews and updates 7. **Retire**: End-of-life and archival

Policy Types Supported

  • Information Security Policy
  • Acceptable Use Policy
  • Data Classification Policy
  • Incident Response Policy
  • Business Continuity Policy
  • Access Control Policy
  • Change Management Policy
  • Vendor Management Policy

Output Formats

  • Policy documents (Markdown, DOCX)
  • Redlined change comparisons
  • Policy inventory matrices
  • Review schedule calendars
  • Approval documentation
Read it on GitHub ↗
Ships withtrust-center

Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.

Get the whole plugin
Stats
ReactBashKubernetesTerraformAWS
+7 tags
GCPAzureGitHubAnthropicSlackJiraVite
398
Stars
90
Forks
Active
Maintenance
JavaScript
Language
9d ago
Last commit
8mo ago
Created

Repo: GRCEngClub/claude-grc-engineering

In this plugin
140 commands101 skills1 MCP
See everything inside

Other skills on trust-center.

See all 101 skills in trust-center