Provides a framework for achieving and maintaining ISO 27001 compliance for information security.
Install
mkdir -p .claude/skills/iso-27001 && curl -L -o skill.zip "https://agentskills.codes/api/skills/download/10496" && unzip -o skill.zip -d .claude/skills/iso-27001 && rm skill.zipInstalls to .claude/skills/iso-27001
Activation
This is the description your AI agent reads to decide when to run this skill — the better it matches your request, the more reliably it fires.
ISO 27001:2022 requirements, control implementation, documentation requirements, and audit preparationKey capabilities
- →Review security controls
- →Prepare audit evidence
- →Implement cryptographic policies
- →Manage incident response
How it works
Provides requirements and control implementation guidance for ISO 27001:2022 information security management.
Inputs & outputs
When to use iso-27001
- →Review ISO 27001 security controls
- →Prepare for compliance audit
- →Implement cryptographic policy
About this skill
ISO 27001 Compliance Skill
Purpose
Ensures systems and processes comply with ISO 27001:2022 Information Security Management System (ISMS) requirements.
Rules
Key Controls for Web Applications
A.8.24 Use of Cryptography:
- TLS 1.2+ for all communications
- AES-256 for data at rest
- Secure key management
A.8.25 Secure Development Life Cycle:
- Security requirements in design
- Code review processes
- Security testing (SAST/DAST)
A.8.26 Application Security Requirements:
- Input validation
- Output encoding
- Authentication and authorization
- Session management
A.8.16 Monitoring Activities:
- Security event logging
- Log retention (90 days minimum)
- Monitoring for anomalies
A.5.7 Threat Intelligence:
- Vulnerability scanning
- Threat intelligence feeds
- Incident tracking
Documentation Requirements
MUST MAINTAIN:
- Information Security Policy
- Risk Assessment and Treatment Plan
- Statement of Applicability (SoA)
- Access Control Policy
- Cryptographic Controls Policy
- Incident Response Plan
- Business Continuity Plan
- Acceptable Use Policy
- Data Classification Policy
Audit Preparation
MUST PROVIDE:
- Evidence of control implementation
- Logs and monitoring records
- Incident records
- Change management records
- Risk assessments
- Management review minutes
Related Policies
All ISMS policies at: https://github.com/Hack23/ISMS-PUBLIC
When not to use it
- →When the project is not subject to ISO 27001
- →For non-web applications
Prerequisites
Limitations
- →Requires extensive documentation
- →Audit preparation is a continuous process
How it compares
Focuses on specific ISO 27001 controls and audit preparation rather than general security advice.
Compared to similar skills
iso-27001 side by side with the closest alternatives in the catalog.
| Skill | Installs | Updated | Safety | Difficulty |
|---|---|---|---|---|
| iso-27001 (this skill) | 0 | 6mo | No flags | Advanced |
| reverse-engineering-tools | 73 | 4mo | No flags | Advanced |
| game-hacking-techniques | 42 | 2mo | No flags | Advanced |
| solidity-security | 15 | 2mo | No flags | Intermediate |
Try saying
Example prompts that trigger this skill in your AI assistant.
More by Hack23
View all by Hack23 →You might also like
reverse-engineering-tools
gmh5225
Guide for reverse engineering tools and techniques used in game security research. Use this skill when working with debuggers, disassemblers, memory analysis tools, binary analysis, or decompilers for game security research.
game-hacking-techniques
gmh5225
Guide for game hacking techniques and cheat development. Use this skill when researching memory manipulation, code injection, ESP/aimbot development, overlay rendering, or game exploitation methodologies.
solidity-security
wshobson
Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementing security measures for blockchain applications.
1password
openclaw
Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.
senior-security
davila7
Comprehensive security engineering skill for application security, penetration testing, security architecture, and compliance auditing. Includes security assessment tools, threat modeling, crypto implementation, and security automation. Use when designing security architecture, conducting penetration tests, implementing cryptography, or performing security audits.
ghidra
mitsuhiko
Reverse engineer binaries using Ghidra's headless analyzer. Decompile executables, extract functions, strings, symbols, and analyze call graphs without GUI.