cybersecurity-compliance

Use when identifying cybersecurity-specific regulations and incident reporting obligations. Covers NIS2, DORA, SEC cyber disclosure rules, CISA incident reporting, state breach notification laws, cyber insurance requirements, and security certification frameworks. USE FOR: NIS2, DORA, SEC cybersecurity rules, CISA, breach notification, incident reporting, SOC 2, ISO 27001, cyber insurance, FedRAMP, StateRAMP, CMMC, data breach response DO NOT USE FOR: implementing security controls (use security skills), security testing tools (use security/security-testing), general data privacy (use privacy-data-protection)

Ir a la instalación

Repositorio: Tyler-R-Kendrick/agent-skills
Última actividad en el origen: 11 de febrero de 2026 a las 05:14
Idioma detectado de SKILL.md: inglés
Estrellas: 10
Forks: 4

Opciones de instalación

De forma predeterminada está seleccionado el prompt que primero revisa el origen. Puedes cambiar a un comando directo o descargar una copia local.

Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.

Un comando directo omite el prompt de revisión. Revisa el origen antes de ejecutarlo.

npx skills add https://github.com/Tyler-R-Kendrick/agent-skills --skill cybersecurity-compliance

El comando permanece en una sola línea. Desplázate horizontalmente para revisarlo antes de copiarlo.

¿Prefieres una copia local? Descarga los archivos que SkillsMP tiene disponibles ahora.

Revisa los archivos de origen

Lee SKILL.md y los archivos complementarios que muestra SkillsMP antes de decidir si quieres instalarlo.

Explorador de archivos

14 archivos

SKILL.md

Instrucciones de origen · Vista previa de solo lectura

Volver a la búsqueda Volver a la instalación

improve

Use when producing agent/LLM evals, synthetic simulation data, or self-improvement pipelines for prompts, code, skills, agents, harnesses, and workflows. Covers AgentEvals/AgentV, Agent Skills evals, ASSERT, GEPA, Trace, VISTA, Agent Lightning, SkillOpt, Simula-style data design, progressive disclosure, deterministic workspaces, and release evidence. USE FOR: eval creation, EVAL.yaml, AgentEvals, AgentV, evals.json, ASSERT, judge-traces, behavior taxonomy, judges, graders, rubrics, synthetic data, simulation data, Simula, QDC, source-grounded generation, prompt optimization, agent improvement, skill improvement, harness hardening, progressive disclosure, deterministic workflows, GEPA, Trace, VISTA, Agent Lightning, SkillOpt DO NOT USE FOR: ordinary unit/integration tests without AI quality criteria (use testing), refactoring without eval or trace feedback (use refactor), generic Agent Skills packaging without eval or improvement work (use agent-skills)

2026-06-09

Use when working with AI agent protocols, standards, interoperability specifications, evaluation contracts, synthetic simulation data, improvement pipelines, and agent steering workflows. Covers MCP, A2A, ACP, Agent Skills, AGENTS.md, ADL, Improve, x402, AP2, MCP Apps, cagent, and learn. USE FOR: agent protocol selection, comparing MCP vs A2A vs ACP, understanding agent standards ecosystem, choosing payment protocols, choosing eval standards, choosing improvement techniques, choosing synthetic data simulation techniques, steering from user feedback DO NOT USE FOR: specific protocol, eval, or improvement implementation details (use the sub-skills: mcp, a2a, acp, improve, learn, x402, etc.)

2026-06-09

learn

Use when a user corrects, rejects, edits, or redirects an LLM/agent response and the correction should become a reusable reasoning strategy. Converts feedback into generalized learnings for ~/.agents/STEERING.md with linked RDF/Turtle evidence. USE FOR: user corrections, preference feedback, rejected agent behavior, reasoning strategy updates, steering file maintenance DO NOT USE FOR: storing task facts (use memory), ordinary skill authoring (use agent-skills), project instruction files unrelated to feedback (use agents-md)

2026-06-08

Ver todos los de este repositorio

name	cybersecurity-compliance
description	Use when identifying cybersecurity-specific regulations and incident reporting obligations. Covers NIS2, DORA, SEC cyber disclosure rules, CISA incident reporting, state breach notification laws, cyber insurance requirements, and security certification frameworks. USE FOR: NIS2, DORA, SEC cybersecurity rules, CISA, breach notification, incident reporting, SOC 2, ISO 27001, cyber insurance, FedRAMP, StateRAMP, CMMC, data breach response DO NOT USE FOR: implementing security controls (use security skills), security testing tools (use security/security-testing), general data privacy (use privacy-data-protection)
license	MIT
metadata	{"displayName":"Cybersecurity Compliance","author":"Tyler-R-Kendrick"}
compatibility	claude, copilot, cursor
references	[{"title":"NIS2 Directive Official Text (EUR-Lex)","url":"https://eur-lex.europa.eu/eli/dir/2022/2555/oj"},{"title":"ISO/IEC 27001 Information Security Management","url":"https://www.iso.org/standard/27001"},{"title":"NIST Cybersecurity Framework","url":"https://www.nist.gov/cyberframework"}]

Regulation	Jurisdiction	Scope	Key Requirements	Effective
NIS2 Directive	EU	Essential + important entities across 18 sectors	Risk management measures, 24hr incident reporting, supply chain security, board accountability	October 2024
DORA	EU	Financial entities + ICT providers	ICT risk management, incident reporting, resilience testing, third-party risk management	January 2025
SEC Cyber Disclosure Rules	US	Public companies	Material incident disclosure within 4 business days on Form 8-K, annual risk management disclosure	December 2023
CISA Incident Reporting (CIRCIA)	US	Critical infrastructure	72hr incident reporting, 24hr ransomware payment reporting	Rules being finalized
State Breach Notification Laws	US (all 50 states)	Organizations with residents' data	Notification to affected individuals + state AG within specified timeframes	Varies by state — some as short as 30 days
PSTI Act	UK	Consumer IoT devices	No default passwords, vulnerability disclosure policy, defined support period	April 2024
CER Directive	EU	Critical entities	Risk assessment, resilience measures, incident notification	October 2024

Jurisdiction / Law	Timeline	Notify Whom	Trigger
GDPR	72 hours	Supervisory authority + data subjects if high risk	Personal data breach
NIS2	24hr early warning + 72hr notification + 1 month final report	CSIRT / competent authority	Significant incident
HIPAA	60 days	HHS + individuals + media if >500 affected	PHI breach
SEC	4 business days	SEC on Form 8-K	Material cybersecurity incident
California	Expedient, without unreasonable delay	AG + individuals	Personal information breach
Australia	30 days assessment + notification	OAIC + individuals	Eligible data breach

Framework	Type	Scope	Who Needs It
SOC 2	Audit report (Type I or Type II)	Service organizations	SaaS vendors selling to enterprises
ISO 27001	Certifiable international standard	Any organization	Global enterprises, particularly in EU and APAC
FedRAMP	US federal government authorization	Cloud services for federal agencies	US government contractors and cloud providers
StateRAMP	State government authorization	Cloud services for state/local government	State and local government contractors
CMMC	DoD certification (Levels 1-3)	Defense contractors	US defense supply chain
TISAX	Automotive industry certification	Automotive supply chain	Automotive suppliers and partners
HDS	Healthcare hosting certification	Healthcare data hosting in France	Organizations hosting healthcare data in France

cybersecurity-compliance

Opciones de instalación

Revisa los archivos de origen