スキル nex-iso27001-kmo-pack
📦
nex-iso27001-kmo-pack
v1.0 コンテンツリビジョン r1 安全 🌐 ネットワークアクセス
Draft ISO 27001 Documents for Belgian SMEs
Belgian SMEs need consistent security documentation for audits and customer reviews. This guide helps an AI assistant draft ISMS scope, risk assessments, applicability statements, and policies.
対応: Claude Codex Code(CC)
自分のエージェントでインストール
このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。
エージェントリクエスト
Review the Skillstore skill "nex-iso27001-kmo-pack" from https://skillstore.io/skills/nexaiguy-nex-iso27001-kmo-pack.md and its manifest at https://skillstore.io/api/skills/nexaiguy-nex-iso27001-kmo-pack/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。
エージェントが読めるリソース
AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。
テストする
「nex-iso27001-kmo-pack」を使用しています。 Draft an initial scope outline for a Belgian IT SME with 15 employees and outsourced hosting.
期待される結果:
- Scope draft: IT service delivery and supporting information systems; specific services and locations require confirmation.
- Interested parties: customers, employees, hosting providers, and relevant authorities.
- Boundary question: Which hosting responsibilities belong to the provider, and which remain with the SME?
- Open decisions: confirm legal entity, covered services, locations, exclusions, and scope owner.
「nex-iso27001-kmo-pack」を使用しています。 Create a draft risk entry for loss of access to our outsourced hosting provider.
期待される結果:
- Risk: provider disruption prevents access to hosted services.
- Provisional assessment: likelihood 2 and impact 4 on proposed five-point scales; score 8 requires organizational validation.
- Proposed treatment: review recovery commitments, maintain independent backups, and test restoration.
- Proposed owner: IT operations lead, subject to assignment.
- Evidence needed: supplier agreement, backup records, restoration test results, and documented risk acceptance.
セキュリティ監査
安全v1 • 2026/11/2 バージョン別レポートを開く
All three static findings are false positives: the URLs provide attribution and catalog references, and the flagged footer contains no reconnaissance command. No evidence found of prompt injection, credential collection, or data exfiltration in the reviewed guidance file. The package provides documentation scaffolding, not certification or a verified legal assessment.
1
スキャンされたファイル
65
解析済み行数
0
レビュー項目
0
誤検知を無視
リスク要因
🌐 ネットワークアクセス (2)
最新の完了済み静的・セマンティック監査では、確認済みのセキュリティ検出事項は見つかりませんでした。これは、スキルに副作用がないことを証明するものではありません。
監査者: codex
このレポートを共有・引用
バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。
レポートリンクをコピー
https://skillstore.io/skills/nexaiguy-nex-iso27001-kmo-pack/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdownバッジ
[](https://skillstore.io/skills/nexaiguy-nex-iso27001-kmo-pack?utm_source=security_passport_badge)HTMLバッジ
<a href="https://skillstore.io/skills/nexaiguy-nex-iso27001-kmo-pack?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/nexaiguy-nex-iso27001-kmo-pack/security.svg" alt="Skillstore security assessment" loading="lazy"></a>埋め込みカード
<iframe src="https://skillstore.io/embed/skills/nexaiguy-nex-iso27001-kmo-pack.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学術引用 (APA · BibTeX · CFF)
APA形式の引用
nexaiguy. (2026). nex-iso27001-kmo-pack security audit report (audit version 1) [Author version 1.0]. Skillstore. https://skillstore.io/skills/nexaiguy-nex-iso27001-kmo-pack/audits/1BibTeX形式の引用
@techreport{nexaiguy-nexaiguy-nex-iso27001-kmo-pack-2026,
author = {nexaiguy},
title = {nex-iso27001-kmo-pack security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/nexaiguy-nex-iso27001-kmo-pack/audits/1},
note = {Author version 1.0}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "nex-iso27001-kmo-pack security audit report (audit version 1)"
version: "1.0"
type: report
authors:
- name: "nexaiguy"
date-released: "2026-11-02"
url: "https://skillstore.io/skills/nexaiguy-nex-iso27001-kmo-pack/audits/1"
identifiers:
- type: other
value: "skillstore:nexaiguy-nex-iso27001-kmo-pack:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore スコア
このスコアの理由 証拠の信頼度: 中 55
アーキテクチャ
85
保守性
87
コンテンツ
65
コミュニティ
83
仕様準拠
作成できるもの
Prepare a first certification documentation set
Draft scope, risk treatment, and applicability documents for a Belgian SME preparing its first ISO 27001 audit.
Prepare customer security responses
Develop draft security policies to support customer questionnaire responses, clearly separating implemented practices from planned controls.
Review an ISMS after organizational changes
Identify document updates following supplier or scope changes, including revised risk owners and control applicability justifications.
これらのプロンプトを試す
Begin with an ISMS scope
Help draft an ISMS scope for our Belgian IT company with 15 employees. Ask about services, locations, systems, interested parties, and boundaries first.
Build a risk register
Draft a risk register for these assets and processes: [details]. Propose likelihood and impact scales, treatment actions, and owners. Label assumptions for review.
Draft control applicability decisions
Use our scope and risk register: [details]. Draft an ISO 27001:2022 Statement of Applicability. Explain proposed inclusions and exclusions. Mark missing evidence and unresolved decisions.
Review a supplier change
Review these ISMS documents against our supplier change: [details]. Identify scope, risk treatment, applicability, and policy updates. Flag NIS2 questions for qualified review.
ベストプラクティス
- Provide accurate services, assets, suppliers, locations, and responsibilities before requesting drafts.
- Have control owners validate risk scores, treatment actions, applicability decisions, and supporting evidence.
- Verify current Belgian NIS2 requirements with authoritative sources and qualified advisers before making compliance decisions.
回避
- Treating generated documents as proof of certification or implemented security controls.
- Determining NIS2 applicability from employee count alone.
- Publishing generic policies without confirming responsibilities, operational practices, and evidence.
よくある質問
Does this skill provide ISO 27001 certification?
No. It supports documentation drafting. Certification requires an accredited certification audit, alongside internal audits and management review.
Which ISO 27001 edition does the guide target?
The guide targets ISO 27001:2022 and describes coverage of its 93 Annex A controls.
Are the original scripts and templates included?
No. This package contains only the public guidance file, not the original scripts, extension source, or templates.
Can the NIS2 quickcheck determine our legal obligations?
No. Treat it as preliminary guidance and verify applicability against current Belgian requirements with qualified advice.
Which assistants can use this guidance?
The marketplace lists Claude, Codex, and Claude Code. Output quality depends on the assistant and the organizational information supplied.
What should we provide before requesting documents?
Provide your legal entity, services, locations, assets, suppliers, existing controls, and responsible owners. Clearly label unknown facts and planned practices.