Ism

If you're building systems for Australian government or their supply chains, this is your ISM compliance copilot. It walks you through gap analysis, IRAP assessment prep, system authorisation pathways, and security documentation against the March 2026 ISM edition. The control applicability logic is baked in (NC/OS/PROTECTED/SECRET/TS markers), and it knows the six-step risk management cycle cold. Best for CISOs and security architects who need structured outputs like control tables with evidence requirements or full System Security Plans. It defaults to OFFICIAL: Sensitive scoping if you don't specify otherwise, which is sensible. The Essential Eight mapping is here too, since that's always the first question.

Install to Claude Code

npx -y skills add sushegaad/claude-skills-governance-risk-and-compliance --skill ism --agent claude-code