isms-audit-expert
Information Security Management System (ISMS) audit expert for ISO 27001 compliance verification, security control assessment, and certification support. Use when the user mentions ISO 27001, ISMS audit, Annex A controls, Statement of Applicability (SOA), gap analysis, nonconformity management, internal audit, surveillance audit, or security certification preparation. Helps review control implementation evidence, document audit findings, classify nonconformities, generate risk-based audit plans, map controls to Annex A requirements, prepare Stage 1 and Stage 2 audit documentation, and support
Profile →npx skills add alirezarezvani/claude-skills --skill isms-audit-expert --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# ISMS Audit Expert Internal and external ISMS audit management for ISO 27001 compliance verification, security control assessment, and certification support. ## Table of Contents - [Audit Program Management](#audit-program-management) - [Audit Execution](#audit-execution) - [Control Assessment](#control-assessment) - [Finding Management](#finding-management) - [Certification Support](#certification-support) - [Tools](#tools) - [References](#references) --- ## Audit Program Management ### Risk-Based Audit Schedule | Risk Level | Audit Frequency | Examples | |------------|-----------------|----------| | Critical | Quarterly | Privileged access, vulnerability management, logging | | High | Semi-annual | Access control, incident response, encryption | | Medium | Annual | Policies, awareness training, physical security | | Low | Annual | Documentation, asset inventory | ### Annual Audit Planning Workflow 1. Review previous audit findings and risk assessment results 2. Identify high-risk controls and recent security incidents 3. Determine audit scope based on ISMS boundaries 4. Assign auditors ensuring independence from audited areas 5. Create audit schedule with resource allocation 6.
- Table of Contents
- Audit Program Management
- Risk-Based Audit Schedule
- Annual Audit Planning Workflow
- Auditor Competency Requirements
- Audit Execution
- Pre-Audit Preparation
- Audit Conduct Steps
- Control Assessment
- Control Testing Approach
- Finding Management
- Finding Classification
- Finding Documentation Template
- Corrective Action Workflow
Generate annual audit plan python scripts/isms_audit_scheduler.py --year 2025 --output audit_plan.json With custom control risk ratings python scripts/isms_audit_scheduler.py --controls controls.csv --format markdown
What does the isms-audit-expert skill do?
Information Security Management System (ISMS) audit expert for ISO 27001 compliance verification, security control assessment, and certification support. Use when the user mentions ISO 27001, ISMS audit, Annex A controls, Statement of Applicability (SOA), gap analysis, nonconformity management, internal audit, surveillance audit, or security certification preparation. Helps review control implementation evidence, document audit findings, classify nonconformities, generate risk-based audit plans, map controls to Annex A requirements, prepare Stage 1 and Stage 2 audit documentation, and support
How do I install it?
Run `npx skills add alirezarezvani/claude-skills --skill isms-audit-expert --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From alirezarezvani/claude-skills, a repository with 23,791 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.