Information Security Manager - ISO 27001 — Security & Safety

This skill implements and manages Information Security Management Systems (ISMS) aligned with ISO 27001:2022 and healthcare regulatory requirements. It provides automated tools for risk assessment, compliance checking, and gap analysis, along with structured workflows for ISMS implementation, security risk assessment, and incident response.

ra-qm claude-code

📂 View skill on GitHub ↗ 🚀 How to use

✨ What it does

Automated risk assessment following ISO 27001 Clause 6.1.2 methodology
Compliance checking against ISO 27001/27002 and HIPAA standards
Gap analysis with remediation recommendations
Structured workflows for ISMS implementation, risk assessment, and incident response
Validation checkpoints and certification readiness checklists
Healthcare-specific templates for risk assessment

🎯 When to use it

When designing or implementing an ISMS for ISO 27001 certification
When conducting security risk assessments for healthcare or medical device systems
When preparing for ISO 27001 audits or verifying compliance
When responding to security incidents and needing structured procedures
When selecting and implementing ISO 27002 security controls

🚀 How to use

Trigger the skill by using phrases like 'implement ISO 27001', 'ISMS implementation', 'security risk assessment', or 'ISO 27001 certification'. Provide the scope of the assessment or the system to analyze. Use the provided Python scripts for automated tasks. Example prompts:

Run a security risk assessment for our patient data system.
Check our compliance with ISO 27001 and generate a gap analysis.

📄 Output: The skill produces risk registers, compliance reports, gap analysis documents, and validation checklists.

📦 Add this skill to Claude Code

# 1. Get the skills repo
git clone --depth 1 https://github.com/alirezarezvani/claude-skills /tmp/claude-skills

# 2. Copy this skill into your project (or ~/.claude/skills for all projects)
mkdir -p .claude/skills
cp -r /tmp/claude-skills/ra-qm-team/skills/information-security-manager-iso27001 .claude/skills/information-security-manager-iso27001

Skill source: ra-qm-team/skills/information-security-manager-iso27001/SKILL.md

⚠️ Good to know

The skill assumes access to the provided Python scripts and requires user input for asset inventories and control statuses.

❓ FAQ

What standards does the compliance checker support?

The compliance checker supports ISO 27001, ISO 27002, and HIPAA standards.

How is risk calculated in the risk assessment?

Risk is calculated as likelihood multiplied by impact, with scores ranging from 1 to 25, where higher scores indicate higher risk.

What templates are available for risk assessment?

The risk assessment script supports templates for general, healthcare, and cloud environments.

🤖 Overview, features, install steps and FAQ were generated from the project's SKILL.md on Sep 4, 2026. Always check the original source before running commands.