inventory and eliminate cloud waste covering idle and stopped resources still billing, unattached volumes and unassociated addresses, orphaned snapshots and machine images, abandoned non-production environments, over-retained logs and backups, duplicate data…
Skills in this repository
MadewellRD/skills-lab - Page 24
SkillsMP has collected 1,540 skills from MadewellRD/skills-lab. Open a skill to review its source and details.
MadewellRD/skills-labShowing 40 of 1,540 collected skills.
manage the attestation and certificate lifecycle across the report inventory with scope validity and distribution constraint, bridge and gap letters covering the interval since the last period, the surveillance and recertification calendar, the customer trust…
coordinate an external audit or certification engagement across request list tracking with submitted accepted and rejected states, walkthrough preparation and the record of what was demonstrated, evidence-grounded responses to assessor questions, exception…
run gap assessments against every in-scope criterion, separate design readiness from operating readiness, build the remediation roadmap with owners and dates, determine the earliest defensible observation window from the operating history each control…
build and evidence business continuity and disaster recovery across business impact analysis with criticality tiers, committed rto and rpo kept separate from demonstrated recovery, dependency mapping including third parties, plan currency and approval state,…
build governance forum reporting for a risk committee audit committee or board across metrics carrying value computed basis and as-of date, risk and control health presented against appetite and tolerance rather than in isolation, escalations with what is…
build and maintain the compliance obligation register covering laws, statutes, regulations, contractual security schedules, master service agreement addenda, customer commitments, and framework requirements, each with its citation, applicability…
define the audit boundary and system description for soc 2, iso 27001, hitrust, pci, or an internal assessment, including criteria or annex selection with framework version, in-scope systems, entities, locations and people, subservice organizations with…
design and assess continuous control monitoring across the monitoring coverage map, automated check definitions with signal source and evaluation frequency, configuration drift and check failure routed to a named owner, control health metrics computed from…
write control narratives an outsider could re-perform, with named control owners, operating frequency, preventive detective or corrective classification, automated manual or hybrid designation, key control determination, the evidence source and the artifact…
build the unified control library and cross-framework crosswalk mapping controls to trust services criteria, iso 27001 annex a, nist csf and 800-53, cis, pci dss, and customer security schedules, with coverage marked full, partial, or none, every mapping…
build test plans and execute design and operating effectiveness testing using inquiry, observation, inspection, and reperformance, with sampling method and size recorded against the methodology that set them, attribute testing per sampled item, deviations…
run the evidence and pbc request list against an observation period, extract populations with the query or export that produced them, establish the completeness and accuracy basis for every population, collect evidence carrying its collection date and the…
classify deficiencies and drive them to validated closure across severity rating against the org rubric, corrective action plans naming the evidence that will close each one, compensating controls carrying exposure meanwhile, exceptions with a named approver…
orchestrate governance, risk, and compliance work across obligation registers, audit scoping, control frameworks and crosswalk mapping, risk registers and risk acceptance, policy lifecycle, control design, soc 2 and iso 27001 readiness, evidence collection,…
plan and execute internal audit engagements across the audit universe and risk-based annual plan, engagement scoping and objectives, walkthroughs and risk and control matrices, fieldwork with workpapers that support every assertion, findings written as…
manage the policy hierarchy and lifecycle across policies, standards, procedures, and guidelines, including drafting and revision against the obligations a policy carries, mapping policy clauses to controls, approval authority and the approval record, review…
track and operationalize regulatory and framework change across horizon scanning of official sources, applicability determination for a published change, impact analysis onto named controls policies contracts and vendor terms, an implementation plan sequenced…
build and maintain the enterprise and information security risk register with risks stated as consequences, inherent and residual likelihood and impact scored on the named organizational scale, risk appetite and tolerance thresholds, treatment decisions to…
run third-party and supplier risk across vendor tiering against a criticality rubric, tier-matched due diligence, attestation and certificate review recording scope period exceptions and bridge letter coverage, complementary user entity controls assigned back…
prepare iOS native app implementation plans for Swift, Objective-C, SwiftUI, View systems, modularization, storage, networking, background work, sensors, permissions, and platform APIs.
design iOS app and game architecture, module boundaries, data flow, offline behavior, engine integration, services, APIs, migrations, and ADR-ready decisions.
define iOS service and API integration, auth, sync, payments, push notifications, analytics, remote config, multiplayer, leaderboards, cloud saves, retries, offline behavior, and failure modes.
orchestrate complete iOS app and game development workflows across discovery, product, architecture, implementation, testing, release, App Store operations, live ops, and maintenance. use when the user wants to plan, build, validate, launch, operate, improve,…
prepare iOS game implementation plans for Metal tooling, native runtime, C/C++, SpriteKit, SceneKit, Metal, Unity, Unreal, Godot, custom engines, rendering, input, assets, frame pacing, Metal, and thermal behavior, and gameplay/runtime constraints.
plan iOS maintenance, dependency upgrades, SDK target updates, deprecations, App Review policy changes, experiments, monetization iteration, store optimization, retention, and technical debt.
define iOS observability and live ops for crash reporting, logs, metrics, analytics events, alerts, feature flags, remote config, game economy/events, rollout monitoring, and incident response.
plan iOS performance for startup, memory, battery, main-thread stall and crash risk, rendering, frame pacing, Metal, and thermal behavior, asset loading, Instruments profiling, MetricKit and launch/runtime profiling, profiling, and device-tier budgets.
define iOS app and game product requirements, audience, platform targets, acceptance criteria, non-goals, risks, Play constraints, monetization assumptions, and open questions.
plan iOS builds, signing, versioning, CI/CD, archive/export packaging, internal testing, TestFlight groups and App Store release states, release notes, staged rollout, rollback, on-demand resources and asset delivery, and store listing readiness.
review iOS security, privacy, permissions, secrets, App Review policy risk, privacy labels, secure storage, anti-tamper, networking, dependency risk, and abuse controls.
inspect iOS repo, Xcode, SDK, native runtime, dependency, manifest, device, simulator, engine, CI, feasibility, constraint, and unknown facts before implementation.
define iOS app and game QA, unit tests, instrumented tests, UI tests, screenshot tests, device matrix, simulator and physical coverage, gameplay smoke, regression, and release gates.
plan iOS UI/UX, Human Interface Guidelines, navigation, responsive layouts, accessibility, input modes, localization, onboarding, and app or game interaction states.
run the contract approval gate by building the deviation register, classifying each departure as within fallback or outside the playbook, assembling one approval package that presents combined exposure rather than clause by clause, naming the authority level…
apply the clause playbook to a matter by setting the standard position per clause, the fallback ladder in the order retreat is permitted, the walk-away line, the approval level each departure triggers under the delegation of authority, and the precedent from…
review and set the commercial core of msa, saas subscription, and order form terms covering scope and deliverables, fee structure, payment terms and late charges, price escalation caps, initial and renewal term, auto-renewal notice windows, service level…
produce the first draft on approved paper by assembling the template at its current version, drafting order forms, statements of work and amendments, holding defined terms consistent across the body and every exhibit, keeping cross-references intact,…
triage inbound contract requests by classifying matter type, posture, and whose paper the draft arrived on, scoring the risk tier against the named triage rubric, selecting review lanes, checking the repository for an existing agreement over the same scope,…
own contract repository and clm hygiene, covering metadata reconciled against the instrument rather than the deal summary, one identified version of record, family linkage joining masters, order forms, statements of work, amendments and exhibits, duplicate…