Automates ISO 27001 compliance auditing, security control assessments, and certification readiness workflows.
The ISMS Audit Expert skill provides a comprehensive framework for managing Information Security Management System (ISMS) audits directly within Claude Code. It streamlines the entire ISO 27001 compliance lifecycle, from generating risk-based audit plans and evidence collection checklists to finding classification and Stage 2 certification support. By providing domain-specific guidance on Annex A controls and nonconformity management, it enables security teams to efficiently document audit findings, map controls to requirements, and maintain a rigorous, certification-ready security posture.
Key Features
01Standardized finding classification for nonconformity management
020 GitHub stars
03ISO 27001 Annex A control verification and technical assessment
04Stage 1 and Stage 2 certification audit preparation checklists
05Risk-based audit planning and automated scheduling
06Corrective action workflows with root cause analysis templates
Use Cases
01Managing and documenting findings during surveillance and recertification audit cycles
02Conducting internal ISMS audits to identify compliance gaps before official certification
03Mapping organizational security controls to ISO 27001:2022 Annex A requirements
