Build ISO 27001 Security Programs
Healthcare and MedTech teams need structured security governance that matches ISO 27001 expectations. This skill guides ISMS planning, risk assessment, controls, audits, and certification preparation.
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "information-security-manager-iso27001" from https://skillstore.io/skills/alirezarezvani-information-security-manager-iso27001.md and its manifest at https://skillstore.io/api/skills/alirezarezvani-information-security-manager-iso27001/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Using "information-security-manager-iso27001". We need a 90-day ISO 27001 readiness plan for a MedTech SaaS platform.
Expected outcome:
Using "information-security-manager-iso27001". Review our cloud security controls for patient data processing.
Expected outcome:
Using "information-security-manager-iso27001". Help prepare agenda topics for an ISMS management review.
Expected outcome:
All static external-command findings are Markdown code fences or inline resource names in SKILL.md, not executable commands. The network reconnaissance match at SKILL.md:160 is a security awareness training bullet. I found no prompt injection, data exfiltration, or command-execution intent in the reviewed content.
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
https://skillstore.io/skills/alirezarezvani-information-security-manager-iso27001/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/alirezarezvani-information-security-manager-iso27001?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/alirezarezvani-information-security-manager-iso27001?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/alirezarezvani-information-security-manager-iso27001/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/alirezarezvani-information-security-manager-iso27001.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>alirezarezvani. (2026). information-security-manager-iso27001 security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/alirezarezvani-information-security-manager-iso27001/audits/6@techreport{alirezarezvani-alirezarezvani-information-security-manager-iso27001-2026,
author = {alirezarezvani},
title = {information-security-manager-iso27001 security audit report (audit version 6)},
institution = {Skillstore},
year = {2026},
number = {6},
url = {https://skillstore.io/skills/alirezarezvani-information-security-manager-iso27001/audits/6},
note = {Author version unspecified}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "information-security-manager-iso27001 security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
- name: "alirezarezvani"
date-released: "2026-07-06"
url: "https://skillstore.io/skills/alirezarezvani-information-security-manager-iso27001/audits/6"
identifiers:
- type: other
value: "skillstore:alirezarezvani-information-security-manager-iso27001:audit:6"
description: "Skillstore immutable audit report identifier"
Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.
Why this variant is first
davila7-information-security-manager-iso27001
2026-08-21
alirezarezvani-information-security-manager-iso27001
2026-08-21
Create a phased ISO 27001 implementation plan with scope, roles, risks, controls, metrics, and review activities.
Organize policies, risk treatment records, audit schedules, management reviews, and control evidence before certification audits.
Assess healthcare data, cloud systems, or connected medical devices against security and privacy control expectations.
Help me create an ISO 27001 ISMS starting plan for a healthcare organization. Include scope, stakeholders, first risks, initial policies, and next steps.
Design a security risk assessment workshop for these assets and business processes. Include questions, risk criteria, likely threats, treatment options, and outputs.
Map our healthcare security requirements to ISO 27002:2022 controls. Cover patient data, cloud services, access control, monitoring, incident response, and supplier risk.
Create a certification readiness program for ISO 27001. Include evidence needs, internal audit cadence, management review topics, risk treatment tracking, and remediation governance.
Author
alirezarezvaniLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
c1fdca50ff516318f65fed0d7f9e82797c5171dc
Maintenance freshness
7/18/2026
Usage
9 downloads · 160 views
File structure
Create SEO Content With Brand Voice
Marketing teams need consistent content that fits each channel and supports search goals. This skill combines brand voice guidance, content templates, SEO checks, and social media planning.
Manage CAPA Investigations and Action Plans
CAPA work often stalls when investigations, actions, and evidence are not structured. This skill guides clear RCA, action planning, verification, metrics, and inspection-ready documentation.
Manage QMR Quality Governance
HealthTech teams need disciplined quality governance across standards, audits, reviews, and executive reporting. This skill guides QMR responsibilities, compliance oversight, KPI monitoring, and strategic quality planning.
Manage Medical Device Risk Files
Medical device teams need consistent risk management evidence across design, regulatory, and post-market work. This skill guides ISO 14971 planning, analysis, controls, and file maintenance.
Review Code with Structured Quality Checks
Code reviews can miss quality, security, and maintainability issues. This skill guides structured reviews with scripts, checklists, and report generation.
Build ISO 13485 QMS Programs
Medical device teams need controlled QMS processes that match ISO 13485 expectations. This skill helps plan documentation, audits, reviews, CAPA work, and certification readiness.
Strengthen Security Engineering Decisions
by 89jobrien
Security work often spans architecture, identity, compliance, testing, and response planning. This skill gives Claude, Codex, and Claude Code structured security engineering guidance.
Assess SecOps Readiness with CLI Scaffolds
by davila7
Security teams need a repeatable starting point for review tasks. This skill provides CLI scaffolds and reference notes for SecOps, vulnerabilities, and compliance.
Plan and Conduct ISO 27001 ISMS Audits
by davila7
ISMS teams need consistent audit plans, evidence reviews, and control assessments. This skill structures ISO 27001 audit work and prepares clear findings and recommendations.
Manage consent records and suppressions
by aaron-he-zhu
Consent evidence and withdrawal events can become inconsistent across marketing tools. This skill records pseudonymous consent facts and applies immediate suppression through a controlled registry.
Audit Azure Compliance and Key Vault Expiration
by microsoft
Azure teams need a consistent way to identify compliance gaps and expiring Key Vault assets. This skill runs scoped assessments and produces prioritized remediation guidance.
Secure Payment Systems for PCI DSS
by wshobson
Payment systems can expand PCI scope when cardholder data is handled without clear controls. This skill helps Claude, Codex, and Claude Code design safer payment flows with PCI DSS practices.