ism

Featured

Expert Australian Information Security Manual (ISM) advisor for government entities and their supply chains. Use for ISM control selection, gap analysis, system authorisation, IRAP assessment preparation, security documentation, and ASD compliance. Triggers on: ISM controls, ASD compliance, IRAP assessment, PROTECTED system scoping, Essential Eight vs ISM, system authorisation, NC/OS/ PROTECTED/SECRET/TOP SECRET classification markings, security objectives, ISM guidelines or chapters, control applicability markings, cybersecurity documentation for Australian government, the June 2026 ISM update, ISM AI application controls (ISM-2112/2113/2114), and any question about the ASD Information Security Manual framework or Australian government cybersecurity obligations.

Data & Documents 890 stars 179 forks Updated 5 days ago MIT

Install

View on GitHub

Quality Score: 93/100

Stars 20%
98
Recency 20%
100
Frontmatter 20%
70
Documentation 15%
100
Issue Health 10%
50
License 10%
100
Description 5%
100

Skill Content

# Australian Information Security Manual (ISM) Skill > **Last verified:** 2026-09-05 You are an expert ISM compliance advisor assisting **Australian government entities, contractors, and their supply chains** in applying the ASD Information Security Manual (**June 2026 release** — ASD updates the ISM quarterly; always state which release an answer assumes) using a risk-based approach. Your primary audience is CISOs, CIOs, cybersecurity professionals, and IT managers. --- ## How to Respond Clarify the system's classification level and architecture context if not stated. Default to **OFFICIAL: Sensitive (OS)** for unspecified government systems. | Task | Output Format | |------|--------------| | Gap analysis | Table: Control ID \| Chapter \| Control Description \| Applicability \| Status \| Evidence Needed \| Gap Notes | | Control guidance | Structured: Purpose → Requirement → Implementation steps → Audit evidence | **Hardening answers always include patching**: OS and application patch timeframes and patch-status reporting are part of every system-hardening answer and its evidence list (patch reports sit alongside configuration baselines and scan results). | System authorisation | Step-by-step authorisation pathway with deliverables | | IRAP preparation | Checklist of artefacts, assessment scope, assessor criteria | | Security documentation | Full structured document with ISM references | | General question | Clear, concise prose with ISM control IDs cited | --- ## IS...

Details

Author
Sushegaad
Repository
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Created
5 months ago
Last Updated
5 days ago
Language
HTML
License
MIT

Similar Skills

Semantically similar based on skill content — not just same category

AI & Automation Featured

nzism

Expert New Zealand Information Security Manual (NZISM) advisor for NZ government agencies and their supply chains. Use for NZISM control guidance, gap analysis, agency security obligations, classification framework (Unclassified through Top Secret), security risk management, system certification, and GCSB/NCSC NZ compliance. Triggers on: NZISM controls, NZ government security, GCSB compliance, agency cybersecurity obligations, NZ classification markings, Restricted/Confidential/Secret system scoping, agency security policies, third-party supplier security, Certification and Accreditation (C&A), and any question about NZ government information security requirements or the NZISM framework.

890 Updated 5 days ago
Sushegaad
Data & Documents Featured

iso42001

Expert ISO 42001 AI Management System (AIMS) compliance advisor. Use this skill whenever a user asks about ISO/IEC 42001:2023, AI governance, AI management systems, AI risk assessment, AI system impact assessment, Annex A controls for AI, Statement of Applicability for AI systems, AI policy, responsible AI, AI lifecycle management, AI incident management, AI transparency, AI bias, AI certification readiness, or any topic related to implementing or auditing an AI Management System. Also trigger for questions like "how do I become ISO 42001 certified?", "what controls does ISO 42001 require?", "how do I assess AI risk under 42001?", "what is an AIMS?", or any request involving organisational governance of AI systems, responsible AI frameworks, or AI regulatory compliance aligned to an ISO standard.

890 Updated 5 days ago
Sushegaad
AI & Automation Featured

nist-800-53

NIST SP 800-53 Rev 5 compliance advisor — all 20 control families (AC, AT, AU, CA, CM, CP, IA, IR, MA, MP, PE, PL, PM, PS, PT, RA, SA, SC, SI, SR), Low/Moderate/High baseline selection, FIPS 199/200 system categorization, control tailoring and overlays, privacy controls (PT family), supply chain risk management (SR family), assessment procedures (SP 800-53A), OSCAL, RMF integration (SP 800-37), and mapping to FedRAMP, FISMA, CMMC 2.0, and ISO 27001. Use for any federal system security controls, FISMA compliance, RMF step guidance, control narrative writing, or baseline tailoring question.

890 Updated 5 days ago
Sushegaad