# Cybersecurity & Information Security — General (jurisdiction-agnostic)

Cybersecurity and information security as a practice — NIS2/DORA/CRA, NYDFS 23 NYCRR 500, CMMC, SOC 2 / ISO 27001, ANSSI/EBIOS/PSSI, incident-response and operational-resilience programs, and security-control evidence.

Jurisdiction: `general` · Practice: `cybersecurity` · Skill language varies per skill.

## Skills (9)

| Skill | What it does |
|---|---|
| [`Cybersecurity Breach Summary`](skills/breach-summary/) | Summarizes cybersecurity breach incidents into structured legal and compliance records. Trigger when synthesiz… |
| [`Compliance and Audit`](skills/compliance-and-audit/) | Use when a project requires a compliance framework mapping, when risks need formal documentation, when audit e… |
| [`Comply`](skills/comply/) | Regulatory compliance and audit agent. Maps business regulatory requirements (SOC2/PCI-DSS/HIPAA/ISO 27001), c… |
| [`Comply`](skills/comply-simota/) | Regulatory compliance and audit agent. Maps business regulatory requirements (SOC2/PCI-DSS/HIPAA/ISO 27001), c… |
| [`Cybersecurity Breach Summary`](skills/cybersecurity-breach-summary/) | Produces structured cybersecurity breach summary documents for regulatory and compliance use. Use when draftin… |
| [`Enterprise Evidence Pack Generation`](skills/evidence-generation/) | Use this skill when generating ISO 27001 or NIST SP 800-53 audit evidence packs, compliance reports, evidence… |
| [`Information Security Policy`](skills/information-security-policy/) | Drafts a board-approvable Information Security Policy covering data classification, access controls, encryptio… |
| [`Tabletop Exercise Script for Incident Response Plan`](skills/ir-tabletop-exercise/) | Drafts a tabletop exercise script to stress-test an organization's Incident Response Plan against cybersecurit… |
| [`Vendor Security Assessment Questionnaire`](skills/vendor-security-assessment/) | Drafts a Vendor Security Assessment Questionnaire evaluating third-party cybersecurity posture, data handling,… |
