What it does

This skill automates the drafting and review of professional Cyber Security Compliance and Risk Assessment Reports. It transforms messy project artifacts, architecture diagrams, and control workbooks into audit-ready documentation. Whether you need a Preliminary report based on design intent or a Final report backed by technical validation evidence, this skill ensures consistency, formal tone, and adherence to evidence hierarchies.

Why use this skill

Writing compliance reports is time-consuming and prone to human error. This skill acts as a specialized documentation engineer that understands the nuance between a 'declared implementation' and 'validated evidence'. It prevents the common pitfall of treating self-assessments as verified facts, helps identify evidence gaps automatically, and uses formal governance language suitable for stakeholder risk acceptance.

Supported Scenarios

• Full Report Drafting: Generate end-to-end assessments from scratch.
• Preliminary to Final: Update existing reports with new technical validation findings.
• Evidence Gap Extraction: Scan artifacts to list exactly what documentation is missing.
• Modular Drafting: Generate specific sections like Risk Registers, Data Classification Mappings, or Executive Summaries.
• Compliance Review: Audit existing drafts for unsupported claims or structural weaknesses.

The Output

Expect high-quality, British English Markdown tables and structured text that can be immediately copied into Word or Excel. Every finding is mapped to a specific compliance status: Compliant, Partially Compliant, Non-Compliant, Not Applicable, or Needs Verification.