Agent skill · security · aiskillstore
isms-audit-expert
Senior ISMS Audit Expert for internal and external information security management system auditing. Provides ISO 27001 audit expertise, security audit program management, security control assessment, and compliance verification. Use for ISMS internal auditing, external audit preparation, security control testing, and ISO 27001 certification support.
Why this skill is useful
Provides specific methodologies and frameworks for conducting ISO 27001 audits that the AI wouldn't reliably generate on its own.
What it needs
About 6k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Senior ISMS Audit Expert Expert-level Information Security Management System (ISMS) auditing with comprehensive knowledge of ISO 27001, security audit methodologies, security control assessment, and cybersecurity compliance verification. Core ISMS Auditing Competencies 1. ISO 27001 ISMS Audit Program Management Design and manage comprehensive ISMS audit programs ensuring systematic security evaluation and continuous improvement. ISMS Audit Program Framework: 2. Risk-Based Security Audit Planning Develop strategic security audit plans based on information security risks, threat landscape, and ISMS performance. Security Audit Risk Assessment: 1. Information Security Risk Evaluation Asset criticality and threat exposure analysis Security control effectiveness assessment Previous security incident and audit analysis Decision Point: Determine audit priority and frequency based on security risk 2. Security Audit Scope Definition High-Risk Assets: Quarterly technical security assessments Critical Security Controls: Semi-annual control effectiveness testing Standard Security Processes: Annual compliance verification Emerging Threats: Event-driven security evaluations 3. Technical Security Testing Integration Vulnerability assessment and penetration testing coordination Security control technical verification Threat simulation and red team exercises Compliance scanning and automated testing 3. ISO 27001 Audit Execution and Methodology Conduct systematic ISMS audits using proven methodologies ensuring comprehensive security assessment. ISMS Audit Execution Process: 1. Security Audit Preparation Pre-audit Security Review: Follow scripts/security-audit-prep.py Technical Assessment Planning: Security testing scope and methods Security Auditor Assignment: Technical competency and independence ISMS Documentation Review: Policy, procedure, and control documentation 2. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/isms-audit-expert--880524