isms-compliance-checking

What problem does it solve?

The ISMS compliance skill helps teams verify that every code change aligns with Hack23 ISMS policies and global security frameworks, ensuring consistent security governance across the development lifecycle.

Core Features & Use Cases

• Enforces ISO 27001:2022, NIST CSF 2.0, and CIS Controls v8.1 mapping for all changes.
• Checks GDPR/NIS2/EU CRA compliance, and tracks supply chain security (OSSF Scorecard, SBOM generation, SBOM provenance, and SBOM verification) and SLSA provenance.
• Generates a comprehensive compliance traceability matrix and architecture documentation updates as part of PR checks.
• Use Case: When you modify authentication logic or change third-party dependencies, this skill validates policy references, generates evidence, and flags any gaps.

Quick Start

To apply ISMS compliance validation, reference Hack23 ISMS policies in your PR description and ensure architecture docs are updated. Then run the compliance checks as part of your CI/CD workflow.