# Cybersecurity & Information Security — United States

Cybersecurity and information security as a practice — NIS2/DORA/CRA, NYDFS 23 NYCRR 500, CMMC, SOC 2 / ISO 27001, ANSSI/EBIOS/PSSI, incident-response and operational-resilience programs, and security-control evidence.

Jurisdiction: `us` · Practice: `cybersecurity` · Skill language varies per skill.

## Skills (6)

| Skill | Practice |
|---|---|
| [`cmmc`](skills/cmmc/) | `cybersecurity` |
| [`incident-response-plan`](skills/incident-response-plan/) | `cybersecurity` |
| [`incident-response-playbook`](skills/incident-response-playbook/) | `cybersecurity` |
| [`nydfs-expert`](skills/nydfs-expert/) | `cybersecurity` |
| [`nydfs-infosec-program`](skills/nydfs-infosec-program/) | `cybersecurity` |
| [`wisp`](skills/wisp/) | `cybersecurity` |

## Cold-start context

See [`CLAUDE.md`](CLAUDE.md) — scope, forums, sources of law, citation discipline, and when this plugin does NOT apply.

## Provenance & license

Skills relocated here during practice-area expansion. See each `SKILL.md` for `author`/`author_url` and `license`.

## Disclaimer

These skills produce informational drafts and analyses, not legal advice. Verify against current law before use.
