Delegate independent tasks to specialized agents working concurrently with isolated context.
295.4K 206.3K
View 
📋 Compliance Analyst
compliance_analyst
Sertifikasyon, uyumluluk gereksinimleri ve regulatory pathway araştırma rehberi.
SKILL.md
Full skill instructions
📋 Compliance Analyst
Sertifikasyon ve uyumluluk araştırma rehberi.
📋 Compliance Areas
| Area | Standards | Examples |
|---|---|---|
| Security | ISO 27001, SOC 2 | Data protection |
| Privacy | GDPR, KVKK, CCPA | Personal data |
| Accessibility | WCAG, ADA | Web access |
| Industry | HIPAA, PCI-DSS | Healthcare, payments |
🔧 Compliance Checklist
GDPR
- [ ] Consent management
- [ ] Right to deletion
- [ ] Data portability
- [ ] Privacy policy
- [ ] DPO appointed
- [ ] Breach notification
SOC 2
- [ ] Security controls
- [ ] Availability SLA
- [ ] Processing integrity
- [ ] Confidentiality
- [ ] Privacy practices
📊 Gap Analysis Template
# Compliance Gap Analysis: [Standard]
## Current State
| Control | Required | Current | Gap |
|---------|----------|---------|-----|
| Access Control | Yes | Partial | ⚠️ |
| Encryption | Yes | Yes | ✅ |
| Logging | Yes | No | ❌ |
## Remediation Plan
| Gap | Action | Owner | Deadline |
|-----|--------|-------|----------|
| Logging | Implement audit logs | DevOps | Q1 |
## Timeline to Compliance
- Gap remediation: 3 months
- Audit prep: 1 month
- Certification: 2 months
🎯 Certification Path
Assessment → Gap Analysis → Remediation → Audit → Certification
└─────────────────────────────────────────────┘
6-12 months
🔄 Workflow
Kaynak: Compliance-As-Code (SCAP) & EU AI Act Compliance Framework
Aşama 1: Regulatory Scoping & DORA/AI Act
- Inventory: Sistemin hangi düzenlemelere (DORA, NIS2, EU AI Act) tabi olduğunu belirle.
- Risk Categorization: AI sistemlerini risk seviyelerine (Unacceptable, High, Limited, Minimal) göre sınıflandır.
- Standard Alignment: ISO 27001 veya NIST framework'leri ile mevcut süreçleri eşleştir.
Aşama 2: Audit & Gap Assessment
- Evidence Collection: Politika belgeleri, log kayıtları ve sistem konfigürasyonlarını topla.
- Gap Analysis: Standart ile gerçek arasındaki farkları (Checklist tabanlı) raporla.
- Impact Assessment: Yeni yasal düzenlemelerin iş süreçleri üzerindeki finansal ve operasyonel etkisini analiz et.
Aşama 3: Remediation & Continuous Compliance
- Mitigation Plan: Eksikleri gidermek için aksiyon planı oluştur (Örn: MFA zorunluluğu).
- Monitoring: Uyumluluk durumunu otomatik dashboard'lar (SIEM/GRC araçları) ile izle.
- Certification Prep: Bağımsız denetçiler için "Audit-Ready" dosyasını hazırla.
Kontrol Noktaları
| Aşama | Doğrulama |
|---|---|
| 1 | Yeni çıkan "EU AI Act" kriterleri göz önünde bulunduruldu mu? |
| 2 | Veri işleme envanteri (ROPA) güncel mi? |
| 3 | Tedarikçi (Third-party) riski analiz edildi mi? |
Compliance Analyst v1.5 - With Workflow
More Other skills
Other
brand-guidelines
Applies Anthropic's official brand colors and typography to any sort of artifact that may benefit from having Anthropic's look-and-feel. Use it when brand colors or style guidelines, visual formatting, or company design standards apply.
179.7K 100.1K
View Other
theme-factory
Toolkit for styling artifacts with a theme. These artifacts can be slides, docs, reportings, HTML landing pages, etc. There are 10 pre-set themes with colors/fonts that you can apply to any artifact that has been creating, or can generate a new theme on-the-fly.
179.7K 89.5K
View Other
internal-comms
A set of resources to help me write all kinds of internal communications, using the formats that my company likes to use. Claude should use this skill whenever asked to write some sort of internal communications (status reports, leadership updates, 3P updates, company newsletters, FAQs, incident reports, project updates, etc.).
179.7K 76.1K
View Fundamental design principles for writing maintainable, testable Python code.
40.2K 21.9K
View 
Other
responsive-design
Modern responsive layouts using container queries, fluid typography, CSS Grid, and mobile-first strategies.
40.2K 20K
View Generate Playwright tests from scenarios using interactive browser exploration and validation.
39.7K 18.2K
View Automated website exploration and test case generation using Playwright.
39.7K 14.9K
View Modern React state management with Redux Toolkit, Zustand, Jotai, and React Query for every state category.
40.2K 14.7K
View Other
gdpr-data-handling
GDPR-compliant data handling with consent management, data subject rights, and privacy controls.
40.2K 14.3K
View Python error handling patterns including input validation, exception hierarchies, and partial failure handling. Use when implementing validation logic, designing exception strategies, handling batch processing failures, or building robust APIs.
40.2K 13.5K
View 
Other
refactor-plan
Detailed multi-file refactor planning with safety checks and rollback guidance.
39.7K 13K
View