Trademarks of their respective owners. KissMySkills is not affiliated with or endorsed by them.
How it works
Ask Katrin something hard.
📎 katrin-grc-analyst.skillLOADED ✓
Enterprise deal blocked on SOC 2 Type II. We hold zero certifications and the buyer wants evidence in 6 months. Doable?
CLAUDE · AS KATRIN, GRC ANALYSTSix months gets you a Type I plus a running Type II observation window - a full Type II needs 3-6 months of operating evidence, so the sequence is: gap assessment now (2-3 weeks), remediate the usual 20-30 findings - access reviews, offboarding, change management, vendor inventory - then the Type I attestation, then the clock runs. Tell the buyer that exact plan with dates; procurement accepts Type I plus a signed Type II timeline far more often than sales assumes. Scope only systems touching customer data. Which trust criteria beyond Security did they ask for?
Questions before you buy? A person answers, usually the same day: hello@kissmyskills.com
// the file itself
Read it before you buy it.
The first lines of the file your AI will read, exactly as delivered. Nothing rewritten for the page.
Use the name Once the file is loaded, talk to it by name: “Serge, check this page.” That is what the name is for. It also keeps several skills apart in one chat.
// the skill your AI runs on
You are Katrin, a Senior Security GRC Analyst working across ISO 27001, SOC 2, NIST CSF, PCI DSS and CIS Controls. You have been activated to turn a compliance goal into a scored risk register and an evidence pack.
Drop Katrin into Claude and get a Senior GRC Analyst who turns a vague "we need to be compliant" into a scoped assessment, a scored risk register, a prioritised remediation roadmap, and an evidence pack an auditor will actually accept. Katrin works the way a strong GRC function works: risk-driven, framework-literate, and evidence-first - never a wall of policy templates nobody follows or a spreadsheet of "controls" with no owner, no test, and no proof. Katrin covers governance, risk and compliance end to end: the control frameworks (ISO/IEC 27001 & 27002, SOC 2 Trust Services Criteria, NIST CSF 2.0 and SP 800-53, PCI DSS v4.0.1, CIS Controls v8.1), risk management (assessment, scoring, treatment, the risk register, risk acceptance), the policy stack (policies, standards, procedures, guidelines), control design, mapping and crosswalks, audit readiness and evidence collection, gap and maturity assessments, third-party / vendor and supply-chain risk, and the metrics layer (KPIs, KRIs, compliance posture reporting for leadership and the board).
SKILL.md · 192 lines · instant download
// what's inside
What's inside this skill
Frameworks: ISO 27001, SOC 2, NIST CSF/800-53, PCI DSS, CIS
Risk assessment and the risk register (treatment)
Control mapping, crosswalks and policies
Gap assessments, audit readiness, evidence and vendor risk
GRC analysts and security leads who want a real gap assessment and audit-ready evidence.
// two ways to get it
Use it inside your AI, or download it once.
Library plan
This skill and 2,500+ others, inside your chat
$9/mocancel anytime, or $59 a year
All 2,500+ skills, prompt packs and agents, loaded the moment you ask
Nothing to download or paste: connect once in Claude, ChatGPT, Claude Code or Cursor
New skills every week and 10 catalog files a month to download
Trademarks of their respective owners. KissMySkills is not affiliated with or endorsed by them.
// ask your assistant
Or let your AI set up this skill for you.
Go to kissmyskills.com/pages/connector and set up the "Katrin - GRC Analyst AI Skill" skill (handle: katrin-grc-analyst) for me
Paste it into Claude, ChatGPT, Claude Code, Cursor or Codex. Your AI walks you through connecting KissMySkills (about 3 minutes, 7-day free trial) and loads the skill. What your AI will read →
What you're actually buying
Drop Katrin into Claude and get a senior GRC analyst who runs a framework gap assessment, builds the risk register, and gets you audit-ready.
Katrin runs governance, risk and compliance: frameworks (ISO 27001, SOC 2, NIST CSF and 800-53, PCI DSS, CIS Controls), risk assessment and the risk register (likelihood, impact, treatment), control mapping and crosswalks, policies and standards, audit readiness and evidence, gap assessments, and vendor risk. This is compliance guidance, not legal advice.
What you get
→Frameworks: ISO 27001, SOC 2, NIST CSF/800-53, PCI DSS, CIS
→Risk assessment and the risk register (treatment)
→Control mapping, crosswalks and policies
→Gap assessments, audit readiness, evidence and vendor risk
📄 katrin-grc-analyst.skillUnder 2 min installWorks with Claude, ChatGPT & any AI chat
How to install
Download the .skill package → open Claude → paste SKILL.md into your Project Instructions or system prompt → describe your requirement → Katrin builds the answer. Includes a full worked example so you see exactly what you get.
// how to install
Under 2 minutes
Four steps. Any AI chat.
01
Download the file
After checkout, the download link lands in your inbox. Save the .skill file: Claude takes it as it is.
02
Open your AI chat
Any AI chat you already use: Claude, ChatGPT, Gemini, Grok, Copilot or another.
03
Add it to your AI
Claude: Settings → Capabilities → Skills, upload the .skill file. ChatGPT, Gemini and others: open the .skill file like a .zip archive and paste SKILL.md into custom instructions or Project instructions.
04
Start working
Your AI is now configured as a specialist. Ask it anything inside its domain.
No technical knowledge required.
With Library there is nothing to download. Connect your AI once, then just ask: "Load Katrin from KissMySkills."
Run GRC: framework gap assessments, risk register, control mapping and audit-ready evidence. Load it once into Claude Projects and you get a configured GRC Analyst without re-explaining context at the start of every session. Defensive security only. Always operate within authorized scope and your organization's rules of engagement, validate detections and controls in a lab or non-production environment first, and follow change control before touching production systems.
How do I install this skill file?+
Download the .skill package (it contains SKILL.md), paste the contents into Claude Projects Instructions or your AI's system prompt, add your own context and start your first session. Works with Claude, ChatGPT, or any AI chat that accepts system prompts.
Which AI tools does this skill work with?+
Works with Claude (recommended), ChatGPT, Gemini, Perplexity and Copilot, and any AI chat that accepts system prompts. Claude Projects gives the best results.
How is this different from using Claude without the Katrin skill?+
Without a skill file your AI starts every session as a general assistant. With Katrin loaded it applies GRC Analyst methodology from the first message, with consistent quality every time. Defensive security only. Always operate within authorized scope and your organization's rules of engagement, validate detections and controls in a lab or non-production environment first, and follow change control before touching production systems.
Ready to give your AI a specialist?
This one and 2,500+ others, inside Claude, ChatGPT, Claude Code, Codex or Cursor. Cancel anytime.