Skip to content
Get packs

ISO 27001 Audit Prep

Pressure-tests your ISMS work with six auditor-style questions before an ISO 27001 audit

Source Download skill
Repository
alirezarezvani/claude-skills
Stars
29,149
Licence
MIT
Files
1 file

What it does

When installed, the agent interrogates your information security management system (ISMS) the way an ISO 27001 auditor would. It asks six pointed questions covering audit scheduling, risk register freshness, access review records, supplier reviews, incident response, and management review, then produces a readiness report with a green, amber, or red verdict and three prioritised actions. The skill refers to companion scripts and playbooks in the wider repository, so it is aimed at people already running or preparing an ISMS rather than at general security advice.

Great for

  • Compliance or security staff preparing for an internal audit, surveillance audit, or stage 1 certification audit
  • Small teams getting a first ISO 27001 certification who want a structured gap check
  • Consultants wanting a repeatable checklist to run against client ISMS evidence

Skip it if

  • Anyone wanting a certification or legal guarantee: the output is a self-assessment and does not replace an accredited certification body or qualified auditor
  • Organisations without an existing ISMS: the questions assume policies, risk registers and audit records already exist
  • Teams without access to the referenced scripts and playbook files, since the workflow depends on them being installed alongside this skill

Try asking

  • “Run /compliance-os:iso27001-audit-prep for our SaaS platform before the annual internal audit”
  • “Before stage 1 certification, check our access review evidence against Annex A.5.15 and A.8.2”
  • “Assess our supplier inventory and incident response records and give me a READY, CLOSE-CRITICALS-FIRST or NOT-READY verdict”
Step-by-step guide: how to use ISO 27001 Audit PrepInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the MIT licence and an attribution note.

    iso27001-audit-prep.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip iso27001-audit-prep.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip iso27001-audit-prep.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Provide real evidence files (exports, logs, signed risk acceptances) rather than summaries, since the skill is designed to sample actual records
  • Review the referenced scripts before running them, as the workflow executes Python files from the plugin directory
  • Treat the verdict as a prioritisation aid and confirm findings with your certification body or a qualified ISO 27001 lead auditor

What's inside

  • SKILL.md

Redistributed unmodified from alirezarezvani/claude-skills under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.