ciso-advisor
Security leadership for growth-stage companies. Risk quantification in dollars, compliance roadmap (SOC 2/ISO 27001/HIPAA/GDPR), security architecture strategy, incident response leadership, and board-level security reporting. Use when building security programs, justifying security budget, selecting compliance frameworks, managing incidents, assessing vendor risk, or when user mentions CISO, security strategy, compliance roadmap, zero trust, or board security reporting.
Profile →npx skills add alirezarezvani/claude-skills --skill ciso-advisor --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# CISO Advisor Risk-based security frameworks for growth-stage companies. Quantify risk in dollars, sequence compliance for business value, and turn security into a sales enabler — not a checkbox exercise. ## Keywords CISO, security strategy, risk quantification, ALE, SLE, ARO, security posture, compliance roadmap, SOC 2, ISO 27001, HIPAA, GDPR, zero trust, defense in depth, incident response, board security reporting, vendor assessment, security budget, cyber risk, program maturity ## Quick Start ```bash python scripts/risk_quantifier.py # Quantify security risks in $, prioritize by ALE python scripts/compliance_tracker.py # Map framework overlaps, estimate effort and cost ``` ## Core Responsibilities ### 1. Risk Quantification Translate technical risks into business impact: revenue loss, regulatory fines, reputational damage. Use ALE to prioritize. See `references/security_strategy.md`. **Formula:** `ALE = SLE × ARO` (Single Loss Expectancy × Annual Rate of Occurrence). Board language: "This risk has $X expected annual loss. Mitigation costs $Y." ### 2. Compliance Roadmap Sequence for business value: SOC 2 Type I (3–6 mo) → SOC 2 Type II (12 mo) → ISO 27001 or HIPAA based on cust
- Keywords
- Quick Start
- Core Responsibilities
- 1. Risk Quantification
- 2. Compliance Roadmap
- 3. Security Architecture Strategy
- 4. Incident Response Leadership
- 5. Security Budget Justification
- 6. Vendor Security Assessment
- Key Questions a CISO Asks
- Security Metrics
- Red Flags
- Integration with Other C-Suite Roles
- Detailed References
python scripts/risk_quantifier.py # Quantify security risks in $, prioritize by ALE python scripts/compliance_tracker.py # Map framework overlaps, estimate effort and cost
What does the ciso-advisor skill do?
Security leadership for growth-stage companies. Risk quantification in dollars, compliance roadmap (SOC 2/ISO 27001/HIPAA/GDPR), security architecture strategy, incident response leadership, and board-level security reporting. Use when building security programs, justifying security budget, selecting compliance frameworks, managing incidents, assessing vendor risk, or when user mentions CISO, security strategy, compliance roadmap, zero trust, or board security reporting.
How do I install it?
Run `npx skills add alirezarezvani/claude-skills --skill ciso-advisor --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From alirezarezvani/claude-skills, a repository with 23,791 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.