iso27001-audit-prep
/cs:iso27001-audit-prep <scope> — ISO 27001 ISMS audit readiness 6-question forcing interrogation. Use before annual Clause 9.2 internal audit, surveillance audit prep, or stage 1 certification readiness.
Profile →npx skills add alirezarezvani/claude-skills --skill iso27001-audit-prep --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# /cs:iso27001-audit-prep — ISO 27001 ISMS Audit Forcing Questions **Command:** `/cs:iso27001-audit-prep <scope>` The ISO 27001 ISMS auditor pressure-tests any ISMS work. Six sample-driven questions before any internal audit, stage 1 readiness, or surveillance audit. ## When to Run - Before annual Clause 9.2 internal audit - Before stage 1 / stage 2 ISO 27001 certification audit - Before surveillance audit (year 2 / year 3) - After material change to ISMS scope (new business unit, new product line, new SaaS adoption) - Post-incident (breach triggers ad-hoc ISMS audit) - Quarterly during high-growth phase ## The Six ISMS Questions ### 1. What's the audit scope, and is rolling 3-year coverage on track? **No 3-year coverage discipline, no defensible programme.** - Every Clause 4-10 + every applicable Annex A control must be audited at least once per 3-year cycle - Run `isms_audit_scheduler.py` in `ra-qm-team/skills/isms-audit-expert/` - Confirm auditor independence — no self-audit on any sample ### 2. When was the risk register last refreshed, and are treatments linked to Annex A controls? **Stale risk register = certification finding.** - Quarterly refresh expected; annual minimum -
- When to Run
- The Six ISMS Questions
- 1. What's the audit scope, and is rolling 3-year coverage on track?
- 3. Show me the access review records — quarterly cadence, the last 4 quarters.
- 4. What's the supplier inventory + last review evidence?
- 5. Where's the incident response evidence + post-incident review?
- 6. What's the management review cadence + inputs?
- Workflow
- Output Format
- Routing
- Related
python ra-qm-team/skills/isms-audit-expert/scripts/isms_audit_scheduler.py audit_scope.json python ../../skills/compliance-os/scripts/audit_simulator.py iso27001_scope.json python ../../skills/compliance-os/scripts/cross_framework_mapper.py program.json
What does the iso27001-audit-prep skill do?
/cs:iso27001-audit-prep <scope> — ISO 27001 ISMS audit readiness 6-question forcing interrogation. Use before annual Clause 9.2 internal audit, surveillance audit prep, or stage 1 certification readiness.
How do I install it?
Run `npx skills add alirezarezvani/claude-skills --skill iso27001-audit-prep --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From alirezarezvani/claude-skills, a repository with 23,791 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.