CISO Advisor
CISO Advisor provides security leadership for growth-stage companies, translating technical risks into dollar-based business impact, sequencing compliance roadmaps (SOC 2, ISO 27001, HIPAA, GDPR), and guiding security architecture, incident response, and board reporting. It produces risk registers, compliance plans, gap analyses, and communication templates.
✨ What it does
- Quantifies risks using ALE = SLE × ARO to prioritize by expected annual loss.
- Provides compliance roadmap with timelines, costs, and framework overlap mapping.
- Offers zero trust and defense-in-depth architecture sequencing guidance.
- Includes incident response playbook and communication templates.
- Defines vendor tiering and assessment frequency based on data access.
- Tracks security metrics with targets (e.g., MTTD, MTTR, patch SLA).
🎯 When to use it
- When building or maturing a security program and needing to justify budget in business terms.
- When selecting compliance frameworks (SOC 2, ISO 27001, HIPAA, GDPR) and sequencing them for business value.
- When managing a security incident and needing executive-level response coordination.
- When assessing vendor security risk or preparing for security audits.
- When preparing board-level security reporting or security sections for investor updates.
🚀 How to use
Trigger by asking for security posture assessment, compliance roadmap, incident response support, or board security reporting. Provide company context (e.g., industry, customer requirements, current security state). Example prompts:
Assess our security posture and quantify top risks in dollars.
We need SOC 2 – create a compliance roadmap with timeline and cost.
📄 Output: Delivers risk registers, compliance roadmaps, gap analyses, IR plans, and board-ready summaries.
📦 Add this skill to Claude Code
# 1. Get the skills repo
git clone --depth 1 https://github.com/alirezarezvani/claude-skills /tmp/claude-skills
# 2. Copy this skill into your project (or ~/.claude/skills for all projects)
mkdir -p .claude/skills
cp -r /tmp/claude-skills/c-level-advisor/skills/ciso-advisor .claude/skills/ciso-advisorSkill source: c-level-advisor/skills/ciso-advisor/SKILL.md
⚠️ Good to know
Requires company context (company-context.md) and assumes access to risk_quantifier.py and compliance_tracker.py scripts; outputs are advisory and should be validated by the founder.
❓ FAQ
How does CISO Advisor quantify risk?
It uses ALE = SLE × ARO to express risk in dollars, prioritizing by expected annual loss.
What compliance frameworks does it cover?
It covers SOC 2, ISO 27001, HIPAA, and GDPR, with sequencing guidance.
What does it produce for a security audit?
It produces a gap analysis against the target framework with a remediation plan.
🤖 Overview, features, install steps and FAQ were generated from the project's SKILL.md on Sep 4, 2026. Always check the original source before running commands.