「audit-prep」の検索結果

ISO 27001の監査前に、監査範囲、リスク、権限管理、委託先、事故対応、経営層のレビューを6つの質問で点検し、準備状況と優先対応を整理するスキル。

• 年次内部監査の証拠を準備したいとき
• 認証審査や維持審査の準備状況確認
• 事業やシステム変更後の監査範囲見直し

医療機器の品質マネジメント体制を6つの質問で点検し、設計記録、是正措置、市販後監視などの証拠の不足と、監査前に取り組む改善事項を整理するスキル。

• ISO 13485内部監査の準備
• 新製品発売前の設計記録を点検したいとき
• 是正措置の有効性を確認したいとき

GDPR監査に向け、処理記録、法的根拠、リスク評価、本人からの請求、域外移転、漏えい対応を6つの質問で点検し、条文付きの指摘と優先対応を整理します。

• 年次のGDPR内部監査に備えたいとき
• 漏えい後の保護体制を点検したいとき
• データ保護当局の調査に備えたいとき

SOC 2 Type IIの監査準備を、観察期間中の運用実績に沿った6つの質問で点検します。証拠の不足や統制の変更、例外を整理し、次に取るべき対応をまとめます。

• 観察期間の開始前に準備状況を確認したいとき
• 観察期間の途中で統制の運用を点検したいとき
• 監査の実地確認前に証拠不足を探したいとき

米国向け医療機器の品質監査に備え、苦情処理、工程の妥当性確認、製造記録、是正措置などを6つの質問で点検し、証拠の不足と次の対応を整理するスキル。

• 年次の内部品質監査を準備したいとき
• FDA査察前の準備状況確認
• Form 483への回答資料の整理

Prepare for insurance audits. TRIGGERS - Use when user needs help with insurance-audit-preparation related tasks.

日本語の概要は準備中です。原文の説明を表示しています。

監査に必要な書類の対象期間、依頼・受領日、担当者、照会や修正を追跡する台帳を設計し、必要に応じてCSVなどの空のテンプレートを作成します。

• 期末監査の必要書類一覧の準備
• 書類の依頼・受領状況の管理設計
• 監査の照会と修正をまとめたいとき

外部のセキュリティ監査に向け、レビュー目標や対象範囲を整理し、静的解析、テストの補強、不要コードの整理、ビルド手順や説明資料の作成を進めるスキル。

• 外部セキュリティ監査の事前準備
• 監査前の修正と不足テストの整理
• 監査範囲と安定版を決めたいとき

Execute automate SOC 2 audit preparation including evidence gathering, control assessment, and compliance gap identification. Use when you need to prepare for SOC 2 audits, assess Trust Service Criteria compliance, document security controls, or generate readiness reports. Trigger with phrases like "SOC 2 audit preparation", "SOC 2 readiness assessment", "collect SOC 2 evidence", or "Trust Service Criteria compliance".

日本語の概要は準備中です。原文の説明を表示しています。

Audit preparation register: required document, period covered, request and receipt dates, preparer and reviewer, auditor queries and adjustments. Use for assembling an audit file.

日本語の概要は準備中です。原文の説明を表示しています。

Prepare your codebase for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis tools, increases test coverage, removes dead code, ensures accessibility, and generates comprehensive documentation (flowcharts, user stories, inline comments). (project, gitignored)

日本語の概要は準備中です。原文の説明を表示しています。

Use this skill when process owners, engineers or executives will be interviewed in an external or internal audit and need to be ready, or when someone asks "prepare the team for the auditor interviews", "what will the auditor ask our CTO", "interview briefing for the audit", "how should people answer the auditor", "mock audit interviews" or "our engineers are nervous about the audit". Builds a one-page brief per role: what the auditor is likely to ask, the records that person should be able to open, the honest way to answer what they do not know, and a short mock interview, plus an interview schedule with the evidence each session needs.

日本語の概要は準備中です。原文の説明を表示しています。

Use this skill when an existing risk register needs a check before an audit, a management review or a new owner takes it over, or when someone asks "clean up our risk register", "is our risk register any good", "review the risk register before the audit", "our risks have not been updated", "find duplicate risks", "who owns these risks" or "the scores look wrong". Reads the register read-only and finds stale, duplicated, unowned, orphaned and mis-scored entries, risks missing given the company's own incidents and findings, and expired acceptances, then writes a findings file with a proposed fix per line for the owners to decide.

日本語の概要は準備中です。原文の説明を表示しています。

Turns a control list and an audit scope into draft evidence requests grouped by control owner, each with the control as stated, the audit period, evidence examples (commonly requested) and a proposed due date derived from the fieldwork dates. Never judges whether evidence is sufficient, never selects the sample and never sends a request; the auditor decides. Use when the user asks to "prepare the evidence requests", "draft the PBC list", "build the evidence request pack for the audit" or "what do we need to ask each control owner for". Do not use for document requests and interview questions built from an audit plan, use audit-prep-pack instead; to check claims in a report against sources, use claims-evidence-map. Drafts for human review; never approves, authorises or signs off.

日本語の概要は準備中です。原文の説明を表示しています。

Prepares a DRAFT internal audit pack from the audit plan: scope as stated, criteria with clauses quoted from the documents provided, document requests per auditee with due dates, open interview questions per process and role, previous findings to follow up and a readiness checklist. Never pre-judges conformity, writes findings or selects the sample; the lead auditor decides. Use when the user asks to "prepare the internal audit", "build the audit pack from this plan", "draft the document requests and interview questions" or "get us ready for the supplier audit". Do not use for evidence requests built from a control list, use control-evidence-request-pack instead; to chase actions from earlier audits, use corrective-action-tracker. Drafts for human review; never approves, authorises or signs off.

日本語の概要は準備中です。原文の説明を表示しています。

Automates SOC 2 Type II audit preparation including gap assessment against AICPA Trust Services Criteria (CC1-CC9), evidence collection from cloud providers and identity systems, control testing validation, remediation tracking, and continuous compliance monitoring. Covers all five TSC categories (Security, Availability, Processing Integrity, Confidentiality, Privacy) with automated evidence gathering from AWS, Azure, GCP, Okta, GitHub, and Jira. Use when preparing for or maintaining SOC 2 Ty...

日本語の概要は準備中です。原文の説明を表示しています。

Use this skill when your carrier is selected for an IFTA audit. Covers what records to produce, how the audit is conducted, and common findings.

日本語の概要は準備中です。原文の説明を表示しています。

Use this skill when the user asks specifically about preparing for the New Entrant Safety Audit (NESA) under 49 CFR 385 Subpart D — different from a Compliance Review. Covers what auditors look at, the 18-month window, automatic failure conditions, the 60-day fix window, what to NOT do, and how to convert from "new entrant" to permanent authority. Cite 49 CFR 385.301-321.

日本語の概要は準備中です。原文の説明を表示しています。

Use this skill if you're a new motor carrier expecting your first FMCSA safety audit. Covers what to expect, focus areas, and common findings.

日本語の概要は準備中です。原文の説明を表示しています。