GRC Analyst AI Skill: Risk Registers & PCI DSS Scope

Name: Risk & Compliance Analyst AI Skill - Godfrey
Brand: KissMySkills
Price: 19 USD
Availability: InStock

Risk Compliance Analyst, Godfrey AI skill by KissMySkills, cover

Risk & Compliance Analyst AI Skill - Godfrey

Turn an outdated risk register and untested controls into a SOC 2-ready program with 90 days to the audit.

$19 this skill one payment yours forever

Claude skill package instant downloadgodfrey-risk-compliance-grc-analyst.skill

Library plan

Get this skill and 2,500+ others

$9/mo or $59 a year

Get Library · $9/moGet Library

Try this skill free for 7 daysTry this skill free

7-day free trial, no card
Cancel anytime
30-day money-back on your first payment

Nothing is charged. A −30% code for your first payment arrives 2 days before the trial ends.

Works inside Claude, ChatGPT, Claude Code, Codex and Cursor through one connector
Every skill, prompt pack and agent, plus AI CRM and tools during the trial
Cancel anytime

Why a subscription? How it works

Need just this skill?

One file, paid once. No updates, no connector.

Costs about the same as 2 months of Library.

$19

Pay once, keep foreverInstant download30-day money-back guarantee

As featured onProduct Hunt Fazier KittyLaunch

Works with

Secure checkout by Stripe

Trademarks of their respective owners. KissMySkills is not affiliated with or endorsed by them.

How it works

Ask it something hard.

📎 godfrey-risk-compliance-grc-analyst.skillLOADED ✓

SOC 2 Type II audit in 5 months, the risk register is a 2-year-old spreadsheet, and the 'access review' control exists on paper only.

CLAUDE · WITH THIS SKILL Paper controls are exactly what Type II fails on - the auditor samples the observation window, so your quarterly access review has to actually run, evidenced, before the window closes: named owner, ticket, revocations logged. Five months works if you sequence it: month 1, refresh the risk register against current systems (a 2-year-old register misses your newest SaaS sprawl); month 2, map controls to the Trust Services Criteria and find the other paper controls - there are always more; months 3-5, operate with evidence discipline. Auditors respect a managed gap list more than a perfect story. Where does access data live - Okta, Google, or somewhere worse?

Or have every skill inside your AI.

0:16 · no sound

Get all 2,500+ with Library · $9/mo →

Questions before you buy? A person answers, usually the same day: hello@kissmyskills.com

// the file itself

Read it before you buy it.

The first lines of the file your AI will read, exactly as delivered. Nothing rewritten for the page.

// the skill your AI runs on

You are Godfrey, a Senior Risk and Compliance Analyst who asks for evidence that a control actually operated. You have been activated to score risk, test controls and map gaps against SOC 2 or ISO 27001.

Drop Godfrey into Claude and get a Senior Risk & Compliance Analyst who treats a risk register as a living instrument, not a slide deck built once for a kickoff meeting and never opened again. Godfrey has sat through audits where half the "operating" controls turned out to be documented and nothing else, and he built his method around one belief: a control nobody tests is a hope, not a control. Godfrey is the person who sits across the other business-operations roles, the Scrum Master, Product Owner, Program Manager, Change Manager, Business Process Analyst, Procurement Manager, Supply Chain Planner, PMO Lead, Strategy Consultant, and RevOps Manager, and checks their plans against risk appetite and policy before they ship, not after something breaks. He is not a lawyer and does not pretend to be one: he handles process, control design, and risk methodology, and he routes anything that requires a binding legal or regulatory determination to a licensed attorney or certified auditor. Godfrey never starts with a framework checklist. He works in this order and

SKILL.md · 144 lines · instant download

// what's inside

What's inside this skill

Risk register with likelihood x impact scoring and a stated risk appetite
Control-testing plans that check whether controls actually operate
Policy gap analysis against the framework you're being audited on
Board-ready risk reporting that isn't a wall of red status dots

Risk and compliance leads preparing for an audit with a risk register nobody's updated since the kickoff meeting.

// two ways to get it

Use it inside your AI, or download it once.

Library plan

This skill and 2,500+ others, inside your chat

$9/mo cancel anytime, or $59 a year

All 2,500+ skills, prompt packs and agents, loaded the moment you ask
Nothing to download or paste: connect once in Claude, ChatGPT, Claude Code or Cursor
New skills every week and 10 catalog files a month to download

Get Library · $9/mo Try it free for 7 days

Compare Library, AI CRM and Both

Buy once

Just this skill, as a file

$19 one payment

Download after checkout and paste it into any AI chat
One file, no updates, no connector
30-day money-back guarantee

Already on Library or Both? This one is included, no need to buy the file.

Works with

Trademarks of their respective owners. KissMySkills is not affiliated with or endorsed by them.

// ask your assistant

Or let your AI set up this skill for you.

Go to kissmyskills.com/pages/connector and set up the "Risk & Compliance Analyst AI Skill - Godfrey" skill (handle: godfrey-risk-compliance-grc-analyst) for me

Paste it into Claude, ChatGPT, Claude Code, Cursor or Codex. Your AI walks you through connecting KissMySkills (about 3 minutes, 7-day free trial) and loads the skill. What your AI will read →

What you're actually buying

Drop Godfrey into Claude and get a Senior Risk & Compliance Analyst who tests whether controls actually operate, not just whether they're documented.

Godfrey covers risk register design, control testing, policy gap analysis, vendor risk, and board-ready risk reporting, and is explicit about routing anything requiring a licensed attorney or certified auditor to that professional.

What you get

→Risk register with likelihood x impact scoring and a stated risk appetite
→Control-testing plans that check whether controls actually operate
→Policy gap analysis against the framework you're being audited on
→Board-ready risk reporting that isn't a wall of red status dots

PCI DSS Scoping Checklist

Godfrey includes a PCI DSS scoping checklist that turns your payment channels into a dated scoping memo your acquirer and QSA can review.

Card data flows: every payment channel traced, plus a data-discovery pass for card numbers in email, tickets, call recordings and logs
System classification: CDE, connected-to or security-impacting, and out of scope, each with the evidence behind it
Scope-reduction claims tested: segmentation, tokenization, P2PE and outsourced payment pages checked for evidence, not assumed
Service providers: compliance evidence and a responsibility matrix, with the SAQ or ROC route confirmed by your acquirer

📄 godfrey-risk-compliance-grc-analyst.skill Under 2 min install Works with Claude, ChatGPT & any AI chat

How to install

Download the .skill package → open Claude → paste SKILL.md into your Project Instructions or system prompt → describe your requirement → Godfrey builds the answer. Includes a full worked example so you see exactly what you get.

// how to install Under 2 minutes

Four steps. Any AI chat.

01
Download the file
After checkout, the download link lands in your inbox. Save the .skill file: Claude takes it as it is.
02
Open your AI chat
Any AI chat you already use: Claude, ChatGPT, Gemini, Grok, Copilot or another.
03
Add it to your AI
Claude: Settings → Capabilities → Skills, upload the .skill file. ChatGPT, Gemini and others: open the .skill file like a .zip archive and paste SKILL.md into custom instructions or Project instructions.
04
Start working
Your AI is now configured as a specialist. Ask it anything inside its domain.

No technical knowledge required.

With Library there is nothing to download. Connect your AI once, then just ask: "Load Risk & Compliance Analyst AI Skill from KissMySkills."

Setup guide → Library · $9/mo →

// faq

Questions about this product

What does the Godfrey skill do?+

Turn an outdated risk register and untested controls into a SOC 2-ready program with 90 days to the audit. Load it once into Claude Projects and you get a configured Risk & Compliance Analyst without re-explaining context at the start of every session. Verify every number, process, and recommendation against your real data before acting, and route anything requiring licensed legal, audit, or financial advice to the appropriate professional.

Can Godfrey help with PCI DSS compliance scoping?+

Yes. Godfrey runs a PCI DSS scoping checklist: card data flows, data discovery, classifying systems as CDE, connected-to or out of scope, checking segmentation and other scope-reduction claims, and a service-provider responsibility matrix, ending in a scoping memo. He does not certify compliance, assign your SAQ type or quote requirement numbers from memory: confirm the current PCI DSS version and final scope with your acquirer and QSA.

How do I install this skill file?+

Download the .skill package (it contains SKILL.md), paste the contents into Claude Projects Instructions or your AI's system prompt, add your own context and start your first session. Works with Claude, ChatGPT, or any AI chat that accepts system prompts.

Which AI tools does this skill work with?+

Works with Claude (recommended), ChatGPT, Gemini, Perplexity and Copilot, and any AI chat that accepts system prompts. Claude Projects gives the best results.