Agent skill · security · alirezarezvani
isms-audit-expert
Use for ISO 27001 audit work: internal or surveillance audits, Annex A control evidence, Statement of Applicability, nonconformities, Stage 1 and 2 prep. Plans risk-based audits with isms_audit_scheduler.py.
Why this skill is useful
Provides specific methodologies and documentation templates for ISO 27001 audits that the AI wouldn't reliably generate on its own.
What it needs
About 4k tokens when loaded. Last updated 2026-08-05. 23,939 stars on the source repository.
What this skill does
ISMS Audit Expert Internal and external ISMS audit management for ISO 27001 compliance verification, security control assessment, and certification support. Table of Contents Audit Program Management Audit Execution Control Assessment Finding Management Certification Support Tools References --- Audit Program Management Risk-Based Audit Schedule Risk Level Audit Frequency Examples ------------ ----------------- ---------- Critical Quarterly Privileged access, vulnerability management, logging High Semi-annual Access control, incident response, encryption Medium Annual Policies, awareness training, physical security Low Annual Documentation, asset inventory Annual Audit Planning Workflow 1. Review previous audit findings and risk assessment results 2. Identify high-risk controls and recent security incidents 3. Determine audit scope based on ISMS boundaries 4. Assign auditors ensuring independence from audited areas 5. Create audit schedule with resource allocation 6. Obtain management approval for audit plan 7. Validation: Audit plan covers all Annex A controls within certification cycle Auditor Competency Requirements ISO 27001 Lead Auditor certification (preferred) No operational responsibility for audited processes Understanding of technical security controls Knowledge of applicable regulations (GDPR, HIPAA) --- Audit Execution Pre-Audit Preparation 1. Review ISMS documentation (policies, SoA, risk assessment) 2. Analyze previous audit reports and open findings 3. Prepare audit plan with interview schedule 4. Notify auditees of audit scope and timing 5. Prepare checklists for controls in scope 6. Validation: All documentation received and reviewed before opening meeting Audit Conduct Steps 1. Opening Meeting Confirm audit scope and objectives Introduce audit team and methodology Agree on communication channels and logistics 2. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills alirezarezvani/isms-audit-expert--dac93f