Can this skill help me prepare for a SOC 2 audit?

Yes, it provides specific checklists for trust principles, access logging, and change management required for SOC 2 Type II compliance.

Can it detect security misconfigurations?

Yes, the skill identifies common errors like public S3 buckets, overly permissive IAM policies, hardcoded secrets, and unencrypted databases.

How does it handle GDPR's Right to Erasure?

It provides implementation patterns for complete data removal, orphan data scanning, and documentation procedures to provide evidence of deletion for audits.

Does this cover HIPAA requirements for AWS, Azure, or GCP?

Yes, it includes detailed guidance on Business Associate Agreements (BAA), PHI encryption at rest and in transit, and necessary network isolation for major cloud providers.

Is it specific to serverless architectures?

While it has specialized expertise in serverless and cloud-native designs, the compliance principles and checklists apply to general enterprise cloud deployments.

Compliance Architecture Expert

Name: Compliance Architecture Expert
Author: Microck

byMicrock

•

安全与测试

Architects enterprise-grade security and regulatory compliance for cloud and serverless systems including SOC 2, HIPAA, GDPR, and PCI-DSS.

This skill empowers Claude to act as a senior compliance architect, providing expert guidance on designing and auditing systems for highly regulated industries. It offers comprehensive checklists, best practices for data residency, identity management, and encryption, while specifically addressing the nuances of serverless and cloud-native deployments. Whether preparing for a SOC 2 audit, ensuring HIPAA data protection, or navigating GDPR privacy requirements, this skill helps developers implement 'security by design' and avoid common misconfigurations that lead to compliance failures.

主要功能

01Identification and remediation of common security misconfigurations

0281 GitHub stars

03Expert guidance on data residency, encryption standards, and identity management

04Security architecture patterns for serverless and cloud-native environments

05Comprehensive compliance checklists for SOC 2, HIPAA, GDPR, and PCI-DSS

06Automated audit preparation and evidence collection workflows

使用场景

01Designing a healthcare data platform that strictly adheres to HIPAA and BAA requirements

02Implementing GDPR-compliant data deletion and residency controls for European users

03Preparing a SaaS application for an upcoming SOC 2 Type II audit

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add microck/ordinary-claude-skills compliance-architecture

For use in Claude.ai and ChatGPT

Download Skill