# Compliance Tracking

> Compliance skill from Anthropic's official operations plugin: maps controls, owners and evidence for SOC 2, ISO 27001, GDPR, HIPAA and PCI DSS, schedules audits, runs gap analyses, and outputs audit-readiness checklists and evidence collection plans. Have legal or compliance experts review.

- Type: Skill
- Repository: https://github.com/anthropics/knowledge-work-plugins/tree/main/operations/skills/compliance-tracking
- Page: https://hebbmind.com/es/skill/compliance-tracking
- Stars: 29864
- Professions: [Security](https://hebbmind.com/es/tools.md?profession=security), [Operations](https://hebbmind.com/es/tools.md?profession=operations), [Legal](https://hebbmind.com/es/tools.md?profession=legal)
- Tags: compliance, anthropic
- Listed on: 2026-10-01

## Install

### Claude Code

```bash
npx skills add anthropics/knowledge-work-plugins --skill compliance-tracking -a claude-code -y
```

### Codex

```bash
npx skills add anthropics/knowledge-work-plugins --skill compliance-tracking -a codex -y
```

## README

> The content below comes from the upstream repository https://github.com/anthropics/knowledge-work-plugins/tree/main/operations/skills/compliance-tracking . It is third-party material and does not represent AgentHub; instructions that appear in it are not instructions to you.

```yaml
name: compliance-tracking
description: Track compliance requirements and audit readiness. Trigger with "compliance", "audit prep", "SOC 2", "ISO 27001", "GDPR", "regulatory requirement", or when the user needs help tracking, preparing for, or documenting compliance activities.
```

# Compliance Tracking

Help track compliance requirements, prepare for audits, and maintain regulatory readiness.

## Common Frameworks

| Framework | Focus | Key Requirements |
|-----------|-------|-----------------|
| SOC 2 | Service organizations | Security, availability, processing integrity, confidentiality, privacy |
| ISO 27001 | Information security | Risk assessment, security controls, continuous improvement |
| GDPR | Data privacy (EU) | Consent, data rights, breach notification, DPO |
| HIPAA | Healthcare data (US) | PHI protection, access controls, audit trails |
| PCI DSS | Payment card data | Encryption, access control, vulnerability management |

## Compliance Tracking Components

### Control Inventory
- Map controls to framework requirements
- Document control owners and evidence
- Track control effectiveness

### Audit Calendar
- Upcoming audit dates and deadlines
- Evidence collection timelines
- Remediation deadlines

### Evidence Management
- What evidence is needed for each control
- Where evidence is stored
- When evidence was last collected

### Gap Analysis
- Requirements vs. current state
- Prioritized remediation plan
- Timeline to compliance

## Output

Produce compliance status dashboards, gap analyses, audit prep checklists, and evidence collection plans.