Skip to content
Security
Skill

/soc2-expert

SOC 2 Trust Service Criteria expert. Provides guidance on Type I/II audits, control mapping, evidence requirements, and audit preparation for all Trust Service Categories.

Boost this skill
@grcengclubgrcengclub@grcengclub
From plugin
trust-center
400101 skills140 commands1 MCP
Install
$ npx -y skills add GRCEngClub/claude-grc-engineering --skill soc2-expert --agent claude-code

How it fires

How this skill gets triggered: by you, by Claude, or both.

  • Fires itselfAuto-invocation. Claude auto-loads it when your prompt matches the work.Auto-invocation is when the right skill fires by itself at the right moment, driven by a FLOW.md router and a hook, instead of you invoking it by name. It is the difference between a skill being installed and a skill actually getting used.Read the full definition →
  • You can call itInvoke it directly when you want it.
  • Slash command/soc2-expert

Context preview

The summary Claude sees to decide when to auto-load this skill.

SOC 2 Trust Service Criteria expert. Provides guidance on Type I/II audits, control mapping, evidence requirements, and audit preparation for all Trust Service Categories.

SKILL.md

soc2-expert.SKILL.md
name: soc2-expert
description: SOC 2 Trust Service Criteria expert. Provides guidance on Type I/II audits, control mapping, evidence requirements, and audit preparation for all Trust Service Categories.
allowed-tools: Read, Glob, Grep, Write

SOC 2 Expert

Deep expertise in SOC 2 Trust Service Criteria and audit requirements.

Expertise Areas

Trust Service Categories

  • **Security (CC)**: Common Criteria - always in scope
  • **Availability (A)**: System uptime and recovery
  • **Confidentiality (C)**: Data protection
  • **Processing Integrity (PI)**: Accurate processing
  • **Privacy (P)**: Personal information handling

Audit Types

  • **Type I**: Design effectiveness at a point in time
  • **Type II**: Operating effectiveness over a period (typically 6-12 months)

Control Guidance

Common Criteria (CC) Series

  • CC1.1-CC1.5: Control Environment
  • CC2.1-CC2.3: Communication and Information
  • CC3.1-CC3.4: Risk Assessment
  • CC4.1-CC4.2: Monitoring Activities
  • CC5.1-CC5.3: Control Activities
  • CC6.1-CC6.8: Logical and Physical Access
  • CC7.1-CC7.5: System Operations
  • CC8.1: Change Management
  • CC9.1-CC9.2: Risk Mitigation

Capabilities

  • Control mapping and gap analysis
  • Evidence requirements guidance
  • Audit preparation checklists
  • Remediation recommendations
  • Service auditor communication templates
Read it on GitHub ↗
Ships withtrust-center

Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.

Get the whole plugin
Stats
ReactBashKubernetesTerraformAWS
+7 tags
GCPAzureGitHubAnthropicSlackJiraVite
398
Stars
90
Forks
Active
Maintenance
JavaScript
Language
9d ago
Last commit
8mo ago
Created

Repo: GRCEngClub/claude-grc-engineering

In this plugin
140 commands101 skills1 MCP
See everything inside

Other skills on trust-center.

See all 101 skills in trust-center