Can this skill help me prepare for a SOC 2 audit?

Yes, it provides specific checklists for trust principles, access logging, and change management required for SOC 2 Type II compliance.

Can it detect security misconfigurations?

Yes, the skill identifies common errors like public S3 buckets, overly permissive IAM policies, hardcoded secrets, and unencrypted databases.

How does it handle GDPR's Right to Erasure?

It provides implementation patterns for complete data removal, orphan data scanning, and documentation procedures to provide evidence of deletion for audits.

Does this cover HIPAA requirements for AWS, Azure, or GCP?

Yes, it includes detailed guidance on Business Associate Agreements (BAA), PHI encryption at rest and in transit, and necessary network isolation for major cloud providers.

Is it specific to serverless architectures?

While it has specialized expertise in serverless and cloud-native designs, the compliance principles and checklists apply to general enterprise cloud deployments.

Compliance Architecture Expert

Name: Compliance Architecture Expert
Author: Microck

byMicrock

•

安全与测试

Architects enterprise-grade security and regulatory compliance for cloud and serverless systems including SOC 2, HIPAA, GDPR, and PCI-DSS.

关于

This skill empowers Claude to act as a senior compliance architect, providing expert guidance on designing and auditing systems for highly regulated industries. It offers comprehensive checklists, best practices for data residency, identity management, and encryption, while specifically addressing the nuances of serverless and cloud-native deployments. Whether preparing for a SOC 2 audit, ensuring HIPAA data protection, or navigating GDPR privacy requirements, this skill helps developers implement 'security by design' and avoid common misconfigurations that lead to compliance failures.

主要功能

Identification and remediation of common security misconfigurations
81 GitHub stars
Expert guidance on data residency, encryption standards, and identity management
Security architecture patterns for serverless and cloud-native environments
Comprehensive compliance checklists for SOC 2, HIPAA, GDPR, and PCI-DSS
Automated audit preparation and evidence collection workflows

使用场景

Designing a healthcare data platform that strictly adheres to HIPAA and BAA requirements
Implementing GDPR-compliant data deletion and residency controls for European users
Preparing a SaaS application for an upcoming SOC 2 Type II audit

关于

主要功能

Identification and remediation of common security misconfigurations
81 GitHub stars
Expert guidance on data residency, encryption standards, and identity management
Security architecture patterns for serverless and cloud-native environments
Comprehensive compliance checklists for SOC 2, HIPAA, GDPR, and PCI-DSS
Automated audit preparation and evidence collection workflows

使用场景

Designing a healthcare data platform that strictly adheres to HIPAA and BAA requirements
Implementing GDPR-compliant data deletion and residency controls for European users
Preparing a SaaS application for an upcoming SOC 2 Type II audit