Skill Packages
Browse ready-made AI workflow skills for document elaboration, review, and structuring.
ISO 20000-1 Configuration Management (Clause 9.1)
Establish configuration management and the CMDB for ISO/IEC 20000-1:2011 Clause 9.1. Define CI types, attributes, naming conventions, CMDB structure, CI lifecycle, and verification procedures.
Learn MoreISO 20000-1 Design and Transition of New or Changed Services (Clause 5)
Establish the design and transition process for new or changed services per ISO/IEC 20000-1:2011 Clause 5. Define service design lifecycle, acceptance criteria, transition planning, and process integrations.
Learn MoreISO 20000-1 Release and Deployment Management (Clause 9.3)
Establish release and deployment management for ISO/IEC 20000-1:2011 Clause 9.3. Define release types, deployment procedures, acceptance criteria, and rollback procedures.
Learn MoreISO 27001 Asset Inventory & Classification Register
Build and validate an Asset Inventory & Classification Register for ISO 27001:2022 Control A.5.9. Catalog information assets with Ownership and Classification (Public, Internal, Confidential, Restricted), suggest classification from sensitivity descriptions, and verify that every asset has a named Information Owner and that Confidential/Restricted assets have handling procedures.
Learn MoreISO 27001 Awareness and Training Plan
Create, validate, and maintain the ISO 27001:2022 awareness and training plan per Clauses 7.2 (Competence), 7.3 (Awareness), and Annex A control A.6.3. Defines target audiences with role-based training requirements, training modules, delivery methods, annual schedule with quarterly phishing simulations, and effectiveness evaluation metrics. Validates section completeness, audience coverage, and schedule gaps. Produces a standalone audit-ready training plan document.
Learn MoreISO 27001 Business Continuity & Disaster Recovery Plan
Create operationally detailed Business Continuity Plans (BCP) and Disaster Recovery Plans (DRP) with BIA-driven recovery sequences, RTO/RPO validation, failover procedures, and exercise records per ISO 27001 Controls A.5.29/A.5.30.
Learn MoreISO 27001 Confidentiality & NDA Agreements
Create and manage confidentiality and non-disclosure agreement templates with a tracking register per ISO 27001 Control A.6.6. Covers both employee and third-party scenarios.
Learn MoreISO 27001 Critical Supplier Register
Operational register of critical suppliers with data access, SLA thresholds, BCP dependencies, security assessment history, and internal ownership. The auditor-expected evidence document that proves supply chain operational knowledge per Clause 7.5.1(b) and Controls A.5.19–A.5.22.
Learn MoreISO 27001 Gap Assessment
Perform a structured gap assessment against ISO 27001:2022 clauses 4-10 and 93 Annex A controls. Mandatory artifact detector scans for missing ISMS documents; maturity rating tool suggests 0-5 maturity levels per clause area. Produces findings register and remediation roadmap.
Learn MoreISO 27001 ISMS Annual Maintenance & Surveillance Audit Prep
Prepare for annual ISO 27001 surveillance audits by reviewing and updating existing ISMS documents. Scans documents for freshness, assesses organizational changes, performs delta risk re-assessment, updates SoA, reconciles CAPAs from prior audits, assembles surveillance audit evidence pack, scores audit readiness across 10 dimensions, and produces a year-over-year ISMS health report. Designed for certified organizations maintaining their ISMS between recertification cycles.
Learn MoreISO 27001 Legal & Regulatory Requirements Register
Identify, document, and track all legal, statutory, regulatory, and contractual requirements relevant to information security per ISO 27001 Control A.5.31.
Learn MoreISO 27001 Management Review
Prepare, validate, and document the ISO 27001:2022 management review per Clause 9.3. Compiles input pack from workspace ISMS artifacts, validates all 10 mandatory input categories (Clause 9.3.2) and 3 required output decisions (Clause 9.3.3), and checks that every action has an owner, due date, and expected outcome. Produces review agenda, input pack, minutes, and action tracker.
Learn More