grcengclub/claude-grc-engineering

grcengclub/claude-grc-engineering · AGENTS.md

grcengclub/claude-grc-engineering · CLAUDE.md

grcengclub/claude-grc-engineering · plugins/academic-research-companion/skills/academic-research-companion/SKILL.md · Guide a research project through the full academic lifecycle — from raw idea to concrete research question, literature…

grcengclub/claude-grc-engineering · plugins/connectors/aws-inspector/skills/aws-inspector-expert/SKILL.md · Expertise in evaluating AWS accounts for compliance — what checks are meaningful, which SCF controls they map to, and…

grcengclub/claude-grc-engineering · plugins/connectors/aws-secrets-inspector/skills/aws-secrets-inspector-expert/SKILL.md · Use when interpreting AWS Secrets Manager connector output, deciding between inspector and retrieve modes, drafting…

grcengclub/claude-grc-engineering · plugins/connectors/azure-inspector/skills/azure-inspector-expert/SKILL.md · Expertise in evaluating Azure subscription findings from azure-inspector and mapping them to SCF controls.

grcengclub/claude-grc-engineering · plugins/connectors/crowdstrike-inspector/skills/crowdstrike-inspector-expert/SKILL.md · Interpret CrowdStrike Falcon findings for sensor coverage, policy visibility, and host group scoping.

grcengclub/claude-grc-engineering · plugins/connectors/datadog-inspector/skills/datadog-inspector-expert/SKILL.md · Interpret datadog-inspector findings and translate Datadog monitoring, audit, log-retention, SSO, and RBAC results into…

grcengclub/claude-grc-engineering · plugins/connectors/drata-inspector/skills/drata-inspector-expert/SKILL.md · Interpret drata-inspector findings generated from drata-cli workflows and turn Drata control, monitor, evidence…

grcengclub/claude-grc-engineering · plugins/connectors/gcp-inspector/skills/gcp-inspector-expert/SKILL.md · Expertise in evaluating GCP projects for compliance — what checks are meaningful, which SCF controls they map to, and…

grcengclub/claude-grc-engineering · plugins/connectors/github-inspector/skills/github-inspector-expert/SKILL.md · Expertise in evaluating GitHub repositories for compliance — what checks are meaningful, which SCF controls they map…

grcengclub/claude-grc-engineering · plugins/connectors/okta-inspector/skills/okta-inspector-expert/SKILL.md · Expertise in evaluating Okta configurations for compliance — policies, MFA, session management, admin accounts…

grcengclub/claude-grc-engineering · plugins/connectors/poam-automation/skills/poam-automation-expert/SKILL.md · Expertise in FedRAMP POA&M lifecycle management, FedRAMP 20x VDR generation, and vulnerability classification using…

grcengclub/claude-grc-engineering · plugins/connectors/slack-inspector/skills/slack-inspector-expert/SKILL.md · Interpret slack-inspector findings, explain Slack API coverage limits, and turn Slack workspace posture results into…

grcengclub/claude-grc-engineering · plugins/connectors/snowflake-inspector/skills/snowflake-inspector-expert/SKILL.md · Interpret Snowflake account usage findings for MFA, network policies, masking/row access policies, session timeout, and…

grcengclub/claude-grc-engineering · plugins/connectors/splunk-inspector/skills/splunk-inspector-expert/SKILL.md · Interpret splunk-inspector findings and translate Splunk retention, RBAC, audit, search ACL, and auth posture into…

grcengclub/claude-grc-engineering · plugins/connectors/tenable-inspector/skills/tenable-inspector-expert/SKILL.md · Interpret Tenable vulnerability-management findings for scan coverage, credentialed scans, vulnerability age, and scan…

grcengclub/claude-grc-engineering · plugins/connectors/testssl-inspector/skills/testssl-inspector-expert/SKILL.md · Interpret testssl-inspector normalized findings, recommend remediations, and tie evidence back to SCF anchor controls…

grcengclub/claude-grc-engineering · plugins/connectors/wiz-inspector/skills/wiz-inspector-expert/SKILL.md

grcengclub/claude-grc-engineering · plugins/fedramp-ssp/skills/fedramp-ssp-expert/SKILL.md · Expertise on FedRAMP SSP authoring — what the DOCX templates contain, what OSCAL 1.2.0 SSP looks like for FedRAMP, how…

grcengclub/claude-grc-engineering · plugins/frameworks/au-apra-cps-234/skills/au-apra-cps-234-expert/SKILL.md · APRA CPS 234 expert for Australian prudential information security. Reference-depth framework plugin with scope…

grcengclub/claude-grc-engineering · plugins/frameworks/ch-fadp/skills/ch-fadp-expert/SKILL.md · Swiss Federal Act on Data Protection (nFADP) expert. Deep knowledge of the revised 2023 Swiss FADP including voluntary…

grcengclub/claude-grc-engineering · plugins/frameworks/cis-controls/skills/cis-expert/SKILL.md · CIS Controls v8 expert for baseline security. Deep knowledge of 18 controls, 153 safeguards, Implementation Groups…

grcengclub/claude-grc-engineering · plugins/frameworks/cmmc/skills/cmmc-assessment-objectives/SKILL.md · Verbatim reference for all 320 NIST 800-171A Rev 2 assessment objectives, plus the Rev 2 → Rev 3 control crosswalk. Use…

grcengclub/claude-grc-engineering · plugins/frameworks/cmmc/skills/cmmc-expert/SKILL.md · CMMC v2.0 expert for DoD contractors. Covers NIST 800-171 Rev 2 (14 families, 110 controls), SPRS scoring, POA&M rules…

grcengclub/claude-grc-engineering · plugins/frameworks/csa-ccm/skills/ccm-expert/SKILL.md · CSA CCM expert for cloud security. Deep knowledge of Cloud Security Alliance Cloud Controls Matrix including 197…

grcengclub/claude-grc-engineering · plugins/frameworks/cyber-essentials-plus/skills/cyber-essentials-plus-expert/SKILL.md · UK NCSC Cyber Essentials Plus (CE+) v3.3 Danzell expert. Reference-depth framework plugin with assessment, scope…

grcengclub/claude-grc-engineering · plugins/frameworks/dora/skills/dora-expert/SKILL.md · DORA expert for EU financial entities. Deep knowledge of Digital Operational Resilience Act including 5 pillars, ICT…

grcengclub/claude-grc-engineering · plugins/frameworks/essential8/skills/essential8-expert/SKILL.md · Essential 8 expert for Australian cyber security. Deep knowledge of ACSC Essential Eight mitigation strategies…

grcengclub/claude-grc-engineering · plugins/frameworks/eu-nis2/skills/eu-nis2-expert/SKILL.md · EU NIS2 Directive (Directive (EU) 2022/2555) expert. Reference-depth knowledge of essential vs important entity…

grcengclub/claude-grc-engineering · plugins/frameworks/fedramp-20x/skills/fedramp-20x-expert/SKILL.md · FedRAMP 20X modernization expert. Provides guidance on Key Security Indicators (KSIs), continuous monitoring…

grcengclub/claude-grc-engineering · plugins/frameworks/fedramp-rev5/skills/fedramp-rev5-expert/SKILL.md · FedRAMP Rev 5 authorization expert. Provides guidance on traditional authorization paths, SSP/SAP/SAR/POA&M…

grcengclub/claude-grc-engineering · plugins/frameworks/gdpr/skills/gdpr-expert/SKILL.md · GDPR expert for EU privacy compliance. Deep knowledge of General Data Protection Regulation including 99 articles, 7…

grcengclub/claude-grc-engineering · plugins/frameworks/glba/skills/glba-expert/SKILL.md · GLBA expert for financial institutions. Deep knowledge of Gramm-Leach-Bliley Act including Safeguards Rule (16 CFR Part…

grcengclub/claude-grc-engineering · plugins/frameworks/hitrust/skills/hitrust-expert/SKILL.md · HITRUST CSF expert for healthcare security. Implementation guidance, assessment workflow, and mapping to…

grcengclub/claude-grc-engineering · plugins/frameworks/ind-dpdpa/skills/ind-dpdpa-expert/SKILL.md · India DPDPA expert for the Digital Personal Data Protection Act 2023 and the DPDP Rules 2025. Covers Data Fiduciary…

grcengclub/claude-grc-engineering · plugins/frameworks/irap/skills/irap-expert/SKILL.md · Australian IRAP (Information Security Registered Assessors Program) expert. Provides guidance on ISM controls…

grcengclub/claude-grc-engineering · plugins/frameworks/ismap/skills/ismap-expert/SKILL.md · Japanese ISMAP (Information System Security Management and Assessment Program) expert. Provides guidance on ISO…

grcengclub/claude-grc-engineering · plugins/frameworks/iso27001/skills/iso-expert/SKILL.md · ISO 27001 ISMS expert. Provides guidance on management system requirements, Annex A controls, certification process…

grcengclub/claude-grc-engineering · plugins/frameworks/jp-appi/skills/jp-appi-expert/SKILL.md · Japan APPI expert for the Act on the Protection of Personal Information. Reference-depth framework plugin with scope…

grcengclub/claude-grc-engineering · plugins/frameworks/nist-800-53/skills/nist-expert/SKILL.md · NIST 800-53 control framework expert. Provides guidance on control families, baseline selection, tailoring, and federal…

grcengclub/claude-grc-engineering · plugins/frameworks/nist-ai-rmf/skills/nist-ai-rmf-expert/SKILL.md · NIST AI 100-1 (AI RMF 1.0) expert. Stub-depth framework plugin that routes to the SCF crosswalk. Level up by adding…

grcengclub/claude-grc-engineering · plugins/frameworks/nist-csf-20/skills/nist-csf-20-expert/SKILL.md · NIST Cybersecurity Framework v2.0 expert. Reference-depth knowledge of the six Functions (Govern, Identify, Protect…

grcengclub/claude-grc-engineering · plugins/frameworks/nydfs/skills/nydfs-expert/SKILL.md · NYDFS 23 NYCRR 500 expert for financial services. Deep knowledge of New York Department of Financial Services…

grcengclub/claude-grc-engineering · plugins/frameworks/pbmm/skills/pbmm-expert/SKILL.md · Canadian PBMM (Protected B, Medium Integrity, Medium Availability) expert. Provides comprehensive guidance on ITSG-33…

grcengclub/claude-grc-engineering · plugins/frameworks/pci-dss/skills/pci-dss-expert/SKILL.md · PCI DSS v4.0.1 compliance expert. Provides guidance on payment card industry security, ROC completion, SAQ selection…

grcengclub/claude-grc-engineering · plugins/frameworks/sg-mas-trm/skills/sg-mas-trm-expert/SKILL.md · Singapore MAS Technology Risk Management Guidelines expert. Reference-depth framework plugin with scope determination…

grcengclub/claude-grc-engineering · plugins/frameworks/singapore-pdpa/skills/singapore-pdpa-expert/SKILL.md · Singapore - Personal Data Protection Ac (PDPA) (2012) expert. Reference-depth framework plugin with assessment, scope…

grcengclub/claude-grc-engineering · plugins/frameworks/soc2/skills/soc2-expert/SKILL.md · SOC 2 Trust Service Criteria expert. Provides guidance on Type I/II audits, control mapping, evidence requirements, and…

grcengclub/claude-grc-engineering · plugins/frameworks/stateramp/skills/stateramp-expert/SKILL.md · StateRAMP expert for state and local government cloud services. Deep knowledge of State Risk and Authorization…