Browse Skills

EU AI Act advises on AI system classification, prohibited practices, high-risk obligations, GPAI duties, transparency, and conformity assessment under Regulation (EU) 2024/1689. Use it when assessing whether an AI system can be deployed in the EU and what compliance steps apply.

FedRAMP provides guidance for FedRAMP authorization, documentation, and continuous monitoring. Use it for readiness, ATO packages, control mapping, and federal cloud compliance questions.

HIPAA Compliance helps review healthcare documents, workflows, and software for HIPAA issues and drafts related policies, notices, BAAs, and breach materials. It also explains privacy, security, and technical safeguard requirements in plain language.

ISM advises Australian government entities and supply chains on ASD Information Security Manual controls, gap analysis, authorisation, and IRAP preparation. It is used for compliance questions, security documentation, and classification-specific control selection.

ISO 27001 helps with gap analysis, audits, policy writing, risk registers, and certification readiness for ISO/IEC 27001 and ISMS work. Use it when a team needs control guidance or documentation aligned to 2013 or 2022 requirements.

ISO 27701 Privacy helps with ISO/IEC 27701 PIMS compliance, gap analysis, and control guidance for privacy teams. Use it for GDPR alignment, DPIAs, RoPA, data subject rights, and controller or processor obligations.

ISO 42001 AIMS helps with ISO/IEC 42001:2023 compliance, AI risk and impact assessments, control selection, and certification readiness. Use it when implementing or auditing an AI management system or answering specific clause and Annex A questions.

ITAR Compliance advises on 22 CFR Parts 120–130 for defense articles, technical data, registration, licensing, TAAs/MLAs, and enforcement. Use it for jurisdiction, USML scoping, deemed exports, and voluntary disclosure questions.

LGPD Compliance answers questions about Brazil’s data protection law, ANPD guidance, and obligations for processing personal data in Brazil. Use it for legal bases, data subject rights, breach notices, DPIAs, privacy policies, and LGPD vs GDPR comparisons.

New Zealand Information Security Manual advises New Zealand government agencies and their supply chains on NZISM control requirements, classification, risk, certification, and compliance. Use it for gap analysis, policy guidance, and security obligations under GCSB/NCSC NZ.

NIST 800-53 Compliance Advisor guides FIPS 199 categorization, baseline selection, control tailoring, and RMF steps for federal systems. It is used for SSP narratives, gap assessments, privacy controls, and mapping to FedRAMP, FISMA, CMMC 2.0, and ISO 27001.

NIST AI RMF helps organizations assess and manage AI risks using the GOVERN, MAP, MEASURE, and MANAGE functions. Use it for AI governance, trustworthiness, risk profiles, and mappings to frameworks like the EU AI Act or ISO 42001.