/soc2-expert
SOC 2 Trust Service Criteria expert. Provides guidance on Type I/II audits, control mapping, evidence requirements, and audit preparation for all Trust Service Categories.
$ npx -y skills add GRCEngClub/claude-grc-engineering --skill soc2-expert --agent claude-codeHow it fires
How this skill gets triggered: by you, by Claude, or both.
- Fires itselfAuto-invocation. Claude auto-loads it when your prompt matches the work.
- You can call itInvoke it directly when you want it.
- Slash command
/soc2-expert
Context preview
The summary Claude sees to decide when to auto-load this skill.
SOC 2 Trust Service Criteria expert. Provides guidance on Type I/II audits, control mapping, evidence requirements, and audit preparation for all Trust Service Categories.
SKILL.md
soc2-expert.SKILL.mdname: soc2-expert description: SOC 2 Trust Service Criteria expert. Provides guidance on Type I/II audits, control mapping, evidence requirements, and audit preparation for all Trust Service Categories. allowed-tools: Read, Glob, Grep, Write
SOC 2 Expert
Deep expertise in SOC 2 Trust Service Criteria and audit requirements.
Expertise Areas
Trust Service Categories
- **Security (CC)**: Common Criteria - always in scope
- **Availability (A)**: System uptime and recovery
- **Confidentiality (C)**: Data protection
- **Processing Integrity (PI)**: Accurate processing
- **Privacy (P)**: Personal information handling
Audit Types
- **Type I**: Design effectiveness at a point in time
- **Type II**: Operating effectiveness over a period (typically 6-12 months)
Control Guidance
Common Criteria (CC) Series
- CC1.1-CC1.5: Control Environment
- CC2.1-CC2.3: Communication and Information
- CC3.1-CC3.4: Risk Assessment
- CC4.1-CC4.2: Monitoring Activities
- CC5.1-CC5.3: Control Activities
- CC6.1-CC6.8: Logical and Physical Access
- CC7.1-CC7.5: System Operations
- CC8.1: Change Management
- CC9.1-CC9.2: Risk Mitigation
Capabilities
- Control mapping and gap analysis
- Evidence requirements guidance
- Audit preparation checklists
- Remediation recommendations
- Service auditor communication templates
Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.
Repo: GRCEngClub/claude-grc-engineering
Other skills on trust-center.
- /academic-research-companion
Guide a research project through the full academic lifecycle — from raw idea to concrete research question, literature grounding, methodology, writing, feedback, and publication. Use this skill whenever the user shares a research idea, asks to "flesh out" a topic, wants sources
Open skill - /aws-inspector-expert
Expertise in evaluating AWS accounts for compliance — what checks are meaningful, which SCF controls they map to, and how to interpret aws CLI output.
Open skill - /azure-inspector-expert
Expertise in evaluating Azure subscription findings from azure-inspector and mapping them to SCF controls.
Open skill - /crowdstrike-inspector-expert
Interpret CrowdStrike Falcon findings for sensor coverage, policy visibility, and host group scoping.
Open skill - /datadog-inspector-expert
Interpret datadog-inspector findings and translate Datadog monitoring, audit, log-retention, SSO, and RBAC results into GRC evidence and remediation.
Open skill - /drata-inspector-expert
Interpret drata-inspector findings generated from drata-cli workflows and turn Drata control, monitor, evidence, personnel, and integration posture into GRC action.
Open skill