ISO 27001 Security & Compliance Manager

关于

This skill serves as a comprehensive expert-level guide for designing, implementing, and maintaining an Information Security Management System (ISMS) aligned with ISO 27001 and ISO 27002:2022 standards. It provides specialized logic for HealthTech and MedTech sectors, covering critical areas such as HIPAA technical safeguards, FDA medical device cybersecurity guidance, and clinical data protection. By integrating automated scripts for risk assessment, compliance tracking, and incident response, this skill enables organizations to streamline their path to certification while ensuring robust governance and continuous security improvement.

主要功能

• Specialized HealthTech compliance (HIPAA, FDA, and IEC 62304)
• 1 GitHub stars
• Automated ISMS performance dashboards and incident response scripts
• ISO 27001:2022 ISMS implementation framework and planning
• ISO 27002:2022 security controls mapping and selection
• Systematic cybersecurity risk assessment (ISO 27001 Clause 6.1.2)

使用场景

• Automating ongoing security compliance monitoring and internal auditing processes
• Preparing a HealthTech startup for its initial ISO 27001 certification audit
• Conducting technical security assessments for connected medical devices