Claude Skill MartBrowse skillsQuick linesLearn by videoTerminal guideWhat is a Skill?
 
← Back to list

CIS Controls v8 Advisor

A security-compliance skill that scopes Implementation Groups, runs CIS Controls v8 gap assessments, gives safeguard-level implementation guidance, and maps to NIST CSF, ISO 27001, CMMC and SOC 2.

Security & ReviewIntermediate★ 927⑂ 183AI score 8/10Last updated: Sep 15, 2026

What it does

  • Implementation Group scoping: profiles org size, data sensitivity and IT capability to determine IG1/IG2/IG3 and the applicable safeguard set (56 / 130 / 153).
  • Gap assessments: outputs a Control | Safeguard | Current State | Gap | Priority | Action table and a remediation roadmap that fixes IG1 hygiene gaps first.
  • Safeguard-level guidance across all 18 controls — asset and software inventory, data protection, secure configuration, account and access management, vulnerability management, audit logs, malware defenses, network monitoring, incident response, penetration testing.
  • Framework mapping tables to NIST CSF 2.0, ISO 27001:2022 Annex A, CMMC 2.0 and SOC 2.
  • Policy and procedure drafting with purpose, scope, requirements and responsibilities.
  • Every answer cites the control number and safeguard ID (e.g. "CIS Control 1, Safeguard 1.1").

Who it's for

  • IT generalists at small businesses establishing a first security baseline
  • Compliance leads preparing for ISO 27001, SOC 2 or CMMC assessments
  • Security consultants producing repeatable maturity assessment reports
  • Security teams that want an attack-data-driven, prioritized defense roadmap

Example uses

  1. "We have 60 employees, two IT staff, and we store customer payment data — are we IG1 or IG2? List the safeguards that apply."
  2. "We only have MDM and EDR today. Build an IG1 gap assessment across all 56 safeguards plus a 90-day remediation plan."
  3. "Produce a CIS Control 8 (audit logging) to ISO 27001 Annex A mapping table and a draft log management policy for our certification audit."

· · · Install guide · · ·

Try it now, no install

Paste this into Claude to use the skill without installing anything.

Read the instructions in this file and follow them to help me:
https://raw.githubusercontent.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance/HEAD/plugins/cis-controls/skills/cis-controls/SKILL.md

What I want: (describe your task here)

If Claude can't open the link, open it yourself and paste the contents instead.

↓ If it works for you, download the ZIP below and install it. Then it runs on its own — no pasting each time.

Install in the Claude app (no terminal)
  1. Download the ZIP with the button below.
  2. In Claude, open Settings → Capabilities and turn on 'Code execution and file creation'. (one time)
  3. Go to Customize → Skills → + → 'Upload a skill' and upload the ZIP.
↓ Download ZIP
Install in Claude Code

Let Claude do it — paste this into Claude Code

Install the skill I found on Claude Skill Mart.
Copy the plugins/cis-controls/skills/cis-controls folder from the GitHub repo Sushegaad/Claude-Skills-Governance-Risk-and-Compliance into my ~/.claude/skills/cis-controls/.
When it's done, tell me in one line what this skill can do.

Install with a command instead

git clone https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance.git /tmp/grc-skills && mkdir -p ~/.claude/skills && cp -r /tmp/grc-skills/plugins/cis-controls/skills/cis-controls ~/.claude/skills/

⚠ This is a third-party skill. Check the source repository before installing.

  1. Open a terminal.
  2. Clone the repository into a temp folder: git clone https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance.git /tmp/grc-skills
  3. Create the skills directory: mkdir -p ~/.claude/skills
  4. Copy the skill in: cp -r /tmp/grc-skills/plugins/cis-controls/skills/cis-controls ~/.claude/skills/
  5. Verify with ls ~/.claude/skills/cis-controls — you should see SKILL.md and a references/ folder.
  6. Restart Claude Code, then try "Determine our CIS Controls Implementation Group" and the skill will trigger automatically.
View source on GitHub ↗License: MIT