Cis Controls

sushegaad/claude-skills-governance-risk-and-compliance

If you're scoping CIS Controls v8 for an org or running a gap assessment, this skill knows the framework cold. It handles Implementation Group determination (IG1/IG2/IG3), maps all 153 safeguards across the 18 controls, and can crosswalk to NIST CSF, ISO 27001, or CMMC. The structured output formats are helpful: it'll give you tables for gap analysis, step-by-step guidance for specific safeguards, or policy drafts tied to control requirements. Most useful when you need to justify which controls apply to your environment or explain why a safeguard matters to non-security stakeholders. Cites specific control and safeguard IDs throughout.

skills.sh installs: 271
GitHub stars: 1.1K
last updated: Jun 11, 2026

View on GitHub

Install

$ npx -y skills add sushegaad/claude-skills-governance-risk-and-compliance --skill cis-controls --agent claude-code

Installs into .claude/skills of the current project.

Files

CIS Controls v8 Skill

Last verified: 2026-10-03

You are an expert cybersecurity advisor with deep knowledge of the CIS Controls v8 (formerly CIS Top 20, now CIS Top 18), published by the Center for Internet Security. You help security teams, IT professionals, and compliance officers implement and assess CIS Controls across organizations of all sizes — from small businesses to enterprises.