Results for “ssm”

Drafts a BSA/AML Risk Assessment for U.S. financial institutions per FinCEN, FFIEC, and OCC standards. Evaluates inherent risks (customer, product, geographic, transaction, third-party), control adequacy, and residual risk. Use when preparing annual BSA compliance assessments, post-acquisition integration reviews, or when business changes trigger reassessment under 31 U.S.C. § 5318(h).

The English summary is being prepared. Showing the original description.

ESG(環境・社会・ガバナンス)レポート作成支援スキル。GRI、SASB、TCFD、CDP等の国際基準に準拠した サステナビリティレポート作成、マテリアリティ分析、KPI設定、データ収集・開示をサポート。 Use when creating sustainability reports, conducting materiality assessments, setting ESG targets, or preparing disclosures aligned with GRI, SASB, TCFD, CDP, or CSRD standards. Triggers: "ESG report", "sustainability report", "TCFD", "GRI", "SASB", "CDP", "materiality assessment", "carbon footprint".

The English summary is being prepared. Showing the original description.

Prepare a defense-contractor environment for CMMC Level 2 certification: scope CUI and FCI, implement the 110 NIST SP 800-171 Rev 2 security requirements across 14 families, compute the SPRS score with the DoD Assessment Methodology, manage a compliant POA&M, and ready the organization for a C3PAO assessment. Use when an organization handles Controlled Unclassified Information (CUI) under a DoD contract, when a contract carries DFARS clause 252.204-7012/7019/7020/7021, when preparing for or responding to a CMMC assessment, when computing or improving an SPRS score, when building a System Security Plan or POA&M for 800-171, or when scoping which systems are in the CUI boundary. Keywords: CMMC, CMMC Level 2, NIST 800-171, SP 800-171 Rev 2, CUI, FCI, SPRS, DFARS 7012, C3PAO, POA&M, System Security Plan, DoD Assessment Methodology, 110 controls, defense industrial base, DIB, FedRAMP equivalency.

The English summary is being prepared. Showing the original description.

Explore a country's security, economy, energy, trade, and resilience through WorldMonitor's country interface. Review dated observations and evidence by topic, or request an AI-generated text assessment when a written brief is needed.

• Reviewing a country's security and economic situation
• Exploring energy and trade information by country
• Requesting a written assessment with a specific focus

Review papers, drafts, and research ideas with evidence-linked feedback focused on improvement. Audit low-stakes assessment rubrics, trace supporting evidence, and check rater agreement and uncertainty without ranking people or recommending consequential decisions.

• Prepare evidence-linked feedback on a paper draft
• Review strengths and limitations of a research idea
• Check assessment criteria and evidence traceability

Guide authorized API security assessments from endpoint discovery to documented findings. Use a staged workflow to examine authentication, access permissions, input handling, data exposure, and request limits across REST, GraphQL, WebSocket, and SOAP APIs.

• Planning an authorized API security assessment
• Reviewing JWT and OAuth 2.0 authentication
• Checking permissions across users and roles

Assess your Claude Code experience with a quick checklist or a deeper review across 10 feature areas. Receive a skill profile, identified gaps, and a personalized learning path with priorities, estimated study time, and practice exercises.

• Find a starting point for learning Claude Code
• Review experience across feature areas
• Prioritize topics to learn next

Assess a repository’s readiness for AI agents with AgentRC and generate a standalone HTML dashboard. Review scores across nine areas, see prioritized improvements, and optionally apply scoring policies tailored to an organization.

• Assessing a repository’s readiness for AI agents
• Prioritizing improvements from assessment results
• Reviewing scores under an organization’s own policy

Plan authorized voice phishing assessments to evaluate how employees verify callers and report suspicious calls. Organize approved scenarios, record assessment outcomes, and summarize disclosure, verification, and reporting rates to review security awareness training.

• Planning an authorized voice phishing assessment
• Evaluating caller verification and security reporting
• Reviewing the effectiveness of security awareness training

Review personal data handling against GDPR requirements, covering processing records, legal grounds, individual rights, breach procedures, and international transfers. Produce findings by article and a prioritized improvement roadmap with responsibilities, estimated costs, and timelines.

• Preparing evidence for a regulatory audit
• Reviewing privacy requirements for a new system
• Assessing GDPR gaps during acquisition due diligence

Review code for privacy risks, prepare data protection impact assessments, and track personal data requests and deadlines. The skill supports GDPR and German privacy compliance work, with final compliance decisions referred to a data protection officer or legal counsel.

• Checking a service's code for privacy risks
• Preparing a data protection impact assessment
• Tracking deadlines for access and erasure requests

Triage proposed personal data uses to determine whether they can proceed, need a privacy impact assessment, require a legally mandated assessment, or must stop. Results explain policy conflicts, applicable triggers, and conditions to address before proceeding.

• Checking whether a new feature needs a privacy assessment
• Reviewing proposed data uses involving a vendor
• Finding conflicts with privacy policy commitments

Update an existing AI governance profile through guided changes. Adjust risk posture, escalation contacts, registered use cases, vendor positions, or assessment formats, while checking downstream effects and inconsistencies before saving each change.

• Adjusting risk posture for AI use-case reviews
• Updating escalation contacts and approvers
• Changing approved or conditional AI use cases

Set up an AI governance plugin through an interview and shared documents. It records organizational roles, policy commitments, assessment conventions, and vendor requirements in a configuration file that other governance skills use.

• Setting up an AI governance plugin for the first time
• Turning AI policies and assessments into shared settings
• Revising governance settings after operational changes

Plan authorized internal network assessments covering traffic interception, spoofed network services, network separation, and access controls. The skill combines testing workflows with traffic analysis guidance and indicators defenders can use to detect suspicious activity.

• Planning an authorized internal network assessment
• Checking separation between VLANs
• Reviewing IPv6 and network access controls

Plan and carry out wireless security assessments, from surveying nearby networks to checking authentication weaknesses and recording findings. Covers personal and enterprise Wi-Fi, rogue access points, and testing considerations for Wi-Fi 6, 6E, and 7.

• Planning a corporate Wi-Fi security assessment
• Reviewing WPA2 and WPA3 authentication weaknesses
• Testing enterprise Wi-Fi against rogue access points

Assess study quality and risk of bias, meaning systematic distortions in research results. Choose assessment tools suited to the study and review purpose, document judgment rationales, and summarize evidence certainty and recommendations for use in further analysis.

• Appraising studies included in a systematic review
• Checking study quality before a meta-analysis
• Assessing evidence certainty with GRADE

Assess a social science paper outline in a .qmd file for missing research questions, contributions, hypotheses, data, and analysis plans. Receive criterion ratings and concrete suggestions in a separate report, with causal assumptions assessed when relevant.

• Check whether a paper outline covers essential research elements
• Clarify contributions relative to previous studies
• Review causal assumptions in a research outline

Research a person's public profiles, posts, and development activity to produce a brief credibility assessment. Highlight up to three meaningful facts, distinguish personal claims from verified evidence, and note missing or private profiles.

• Check someone's public track record
• Compare profile claims with documented achievements
• Review development activity and recent posts

Performs a full AWS Well-Architected Framework review evaluating every framework question across all pillars discovered from the live AWS documentation by analyzing code, IaC, and configurations to produce evidence-backed findings with Eisenhower-prioritized remediation. Supports full reviews (every framework best practice with BP ID citations), quick reviews (question-level), pillar-scoped reviews, score-mode reviews (a maturity scorecard with per-pillar scores and filtered findings), and lens-specific reviews using lenses discovered from the live AWS documentation. Triggers on mentions of Well-Architected review, WA review, WAR, pillar assessment, architecture review across pillars, workload assessment, cloud readiness evaluation, or a Well-Architected score, grade, or scorecard request. Does not apply to single-pillar deep-dives, learning WA concepts, ADRs, or migration readiness assessments.

The English summary is being prepared. Showing the original description.

Builds questions and assessments that measure what they claim — matching item type to the thing being assessed, writing distractors that diagnose, and telling a question that measures learning from one that measures reading speed or test-taking. Use this to write or review assessment items, design a unit check or diagnostic, work out why scores do not match classroom performance, or decide how much evidence a claim about mastery actually needs.

The English summary is being prepared. Showing the original description.

Use when asked 数据出境要申报吗, 数据出境安全评估还是标准合同, 个人信息出境标准合同怎么备案, 我们把数据传到海外总部合规吗, or decide how to transfer data out of mainland China lawfully. Produces a data map of what leaves China, the route that applies (an exemption, the personal information export standard contract, certification, or a CAC security assessment) with the thresholds to confirm, the filing steps, and the documents to prepare, including the personal information protection impact assessment.

The English summary is being prepared. Showing the original description.

NIST Cybersecurity Framework 2.0 implementation, assessment, and compliance management. Use for CSF 2.0 gap analysis, cybersecurity risk management, maturity assessment, CSF profiles, and cross-framework compliance mapping.

The English summary is being prepared. Showing the original description.

Risk-based vendor assessment framework for IT service providers, technology vendors, and third-party partners under DORA, NIS2, GDPR. Provides three-phase process (Initial Screening / Detailed Assessment / Final Evaluation), six-dimension risk scoring (Financial/Operational/Compliance/Security/Reputational/Strategic) with weighted matrices, full DORA Art. 28-30 contractual checklist, NIS2 Art. 21(2) security measures enumeration, GDPR Art. 28 documentation checks, red flags per dimension, trigger-based review criteria, and document templates. Use when: (1) Evaluating new vendors or technology providers, (2) Conducting critical ICT third-party due diligence under DORA, (3) Performing supply chain security assessment under NIS2, (4) Creating vendor onboarding documentation, (5) Establishing ongoing vendor monitoring, (6) Assessing concentration risk, or (7) Generating executive vendor risk reports.

The English summary is being prepared. Showing the original description.