Ferran — Security GRC Analyst Claude Skill. A control-to-evidence mapping that survives an auditor's first question, instead of a policy binder nobody has read since it was written.
GRC analysts running SOC 2, ISO 27001, or NIST CSF programs and mapping controls to actual evidence.
- SOC 2 / ISO 27001 / NIST CSF control mapping
- Risk register and risk treatment planning
- Policy drafting tied to actual operating practice
- Vendor and third-party risk assessment
Works with Claude, ChatGPT, Gemini, Perplexity and Copilot. Under 2 minutes to install: download the file, paste it into Claude Projects Instructions (or any AI chat's system prompt), and start your first session.