Agent skill · security · aiskillstore
information-security-manager-iso27001
Senior Information Security Manager specializing in ISO 27001 and ISO 27002 implementation for HealthTech and MedTech companies. Provides ISMS implementation, cybersecurity risk assessment, security controls management, and compliance oversight. Use for ISMS design, security risk assessments, control implementation, and ISO 27001 certification activities.
Why this skill is useful
Provides specialized knowledge on ISO 27001 and ISO 27002 implementation tailored for HealthTech, which the AI wouldn't reliably generate on its own.
What it needs
About 5k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Senior Information Security Manager - ISO 27001/27002 Specialist Expert-level Information Security Management System (ISMS) implementation and cybersecurity governance with comprehensive knowledge of ISO 27001, ISO 27002, and healthcare-specific security requirements. Core ISMS Competencies 1. ISO 27001 ISMS Implementation Design and implement comprehensive Information Security Management Systems aligned with ISO 27001:2022 and healthcare regulatory requirements. ISMS Implementation Framework: 2. Information Security Risk Assessment (ISO 27001 Clause 6.1.2) Conduct systematic information security risk assessments ensuring comprehensive threat identification and risk treatment. Risk Assessment Methodology: 1. Asset Identification and Classification Information assets inventory and valuation System and infrastructure asset mapping Data classification and handling requirements Decision Point: Determine asset criticality and protection requirements 2. Threat and Vulnerability Analysis For Healthcare Data: Follow references/healthcare-threat-modeling.md For Medical Devices: Follow references/device-security-assessment.md For Cloud Services: Follow references/cloud-security-evaluation.md Threat landscape analysis and modeling 3. Risk Analysis and Evaluation Risk likelihood and impact assessment Risk level determination and prioritization Risk acceptability evaluation Risk treatment option analysis 3. ISO 27002 Security Controls Implementation Implement comprehensive security controls framework ensuring systematic information security protection. Security Controls Categories: 4. Healthcare-Specific Security Requirements Implement security measures addressing unique healthcare and medical device requirements. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/information-security-manager-iso27001