Compliance Officer Forcing Questions — Security & Safety

This skill runs a six-question forcing interrogation on any compliance program, covering framework selection, cross-framework overlap, evidence ownership, audit calendar, mock audit results, and management review cadence. It produces a structured readiness report with a verdict and top actions.

compliance-os claude-code

📂 View skill on GitHub ↗ 🚀 How to use

✨ What it does

Checks that all applicable frameworks are named via framework_selector.py
Identifies cross-framework overlap and reuse leverage via cross_framework_mapper.py
Generates evidence pool inventory with ownership and leverage scores via evidence_pool_generator.py
Evaluates audit calendar for auditor independence and scheduling conflicts
Runs mock audits via audit_simulator.py and checks severity distribution health
Recommends integrated management review cadence across frameworks

🎯 When to use it

Before adopting a new compliance framework
Before finalizing the annual audit calendar
Before certification stage 1 readiness sign-off
When evidence-collection effort has grown 50%+ year-over-year
When an audit produced > 15% critical findings

🚀 How to use

Trigger: /cs:compliance-readiness

Trigger with the slash command /cs:compliance-readiness <program> where <program> is the name of the compliance program. The skill expects a company profile or program JSON for the scripts. Example prompts:

/cs:compliance-readiness acme-corp

Run compliance readiness for our ISO 27001 and SOC 2 program.

📄 Output: A markdown readiness report with framework set, overlap analysis, evidence pool stats, audit calendar, mock audit results, verdict, and top 3 actions.

📦 Add this skill to Claude Code

# 1. Get the skills repo
git clone --depth 1 https://github.com/alirezarezvani/claude-skills /tmp/claude-skills

# 2. Copy this skill into your project (or ~/.claude/skills for all projects)
mkdir -p .claude/skills
cp -r /tmp/claude-skills/compliance-os/skills/compliance-readiness .claude/skills/compliance-readiness

Skill source: compliance-os/skills/compliance-readiness/SKILL.md

⚠️ Good to know

Requires the referenced Python scripts (framework_selector.py, cross_framework_mapper.py, evidence_pool_generator.py, audit_simulator.py) to be available in the compliance-os scripts directory.

❓ FAQ

What is a healthy mock audit severity distribution?

A healthy distribution has at least 40% observations and at most 15% critical findings.

Why is auditor independence important?

An auditor cannot audit their own work (Clause 9.2 across ISO standards); for small teams, rotate auditors and occasionally use an external auditor.

What does the skill do about management review?

It recommends scheduling one quarterly cross-framework review covering all enabled frameworks' Clause 9.3 inputs, saving executive time.

🤖 Overview, features, install steps and FAQ were generated from the project's SKILL.md on Sep 4, 2026. Always check the original source before running commands.