Compliance Tracking
SkillCompliance skill from Anthropic's official operations plugin: maps controls, owners and evidence for SOC 2, ISO 27001, GDPR, HIPAA and PCI DSS, schedules audits, runs gap analyses, and outputs audit-readiness checklists and evidence collection plans. Have legal or compliance experts review.
name: compliance-tracking
description: Track compliance requirements and audit readiness. Trigger with "compliance", "audit prep", "SOC 2", "ISO 27001", "GDPR", "regulatory requirement", or when the user needs help tracking, preparing for, or documenting compliance activities.
Compliance Tracking
Help track compliance requirements, prepare for audits, and maintain regulatory readiness.
Common Frameworks
| Framework | Focus | Key Requirements |
|---|---|---|
| SOC 2 | Service organizations | Security, availability, processing integrity, confidentiality, privacy |
| ISO 27001 | Information security | Risk assessment, security controls, continuous improvement |
| GDPR | Data privacy (EU) | Consent, data rights, breach notification, DPO |
| HIPAA | Healthcare data (US) | PHI protection, access controls, audit trails |
| PCI DSS | Payment card data | Encryption, access control, vulnerability management |
Compliance Tracking Components
Control Inventory
- Map controls to framework requirements
- Document control owners and evidence
- Track control effectiveness
Audit Calendar
- Upcoming audit dates and deadlines
- Evidence collection timelines
- Remediation deadlines
Evidence Management
- What evidence is needed for each control
- Where evidence is stored
- When evidence was last collected
Gap Analysis
- Requirements vs. current state
- Prioritized remediation plan
- Timeline to compliance
Output
Produce compliance status dashboards, gap analyses, audit prep checklists, and evidence collection plans.
Ähnliche Ressourcen
vendor-check
SkillGathers all agreements with a vendor from your CLM, CRM, email and drive, lists signed and missing MSAs, DPAs and SOWs, and flags upcoming expirations, auto-renewal notice windows and surviving obligations. Needs those connectors. From Anthropic's legal plugin; verify against originals.
anthropics/knowledge-work-plugins29.9kAI Governance Legal
PluginAnthropic's official AI governance plugin: tiers AI use cases against your internal register, runs impact assessments across applicable laws such as the EU AI Act, reviews vendor AI terms for training-data and liability risk, and periodically checks for drift between AI policy and practice.
anthropics/claude-for-legal9.7kPrivacy Legal
PluginPrivacy compliance plugin: decides whether processing activities need a PIA or DPIA, generates privacy impact assessments, reviews DPAs from the controller or processor side, and drafts DSAR responses within statutory deadlines. Official from Anthropic.
anthropics/claude-for-legal9.7kAudit Support
SkillMethodology reference for US SOX 404 internal control audits: scoping significant accounts, sampling methods, workpaper and evidence standards, and classifying deficiencies, significant deficiencies and material weaknesses. Not audit or legal advice; needs professional review. By Anthropic.
anthropics/knowledge-work-plugins29.9ktriage-nda
SkillQuickly pre-screens incoming NDAs and sorts them green, yellow or red into standard approval, legal review or full review, focusing on non-competes, non-solicitation and missing carve-outs. Part of Anthropic's official legal plugin.
anthropics/knowledge-work-plugins29.9klegal-response
SkillDrafts common legal replies from templates: data subject requests, litigation hold notices, vendor legal inquiries, NDA requests and subpoenas, first checking for regulatory or litigation issues that templates should not handle. From Anthropic's legal plugin; have a lawyer review.
anthropics/knowledge-work-plugins29.9k