メニュー
Analyzes FedRAMP FRMR documents to extract control mappings, KSI entries, and version changes. Use when the user asks about FedRAMP requirements, control mappings, compliance data, or needs to understand FRMR document content.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Audit preparation, evidence checklists, assessment simulation, gap analysis, and maturity scoring.
Draft SSP sections, SAR responses, boundary definitions, inheritance models, OSCAL guidance, and multi-framework coverage analyses.
Operational compliance workflows: continuous monitoring, calendaring, POA&M management, change management, and framework transitions.
Maps controls across cybersecurity frameworks using NIST IR 8477 Set-Theory Relationship Mapping (STRM). Use when helping with control implementation, compliance mapping, cross-framework alignment, or understanding control relationships.
Control lookup, cross-framework mapping, search, and coverage analysis across 15 compliance frameworks.
Review SSPs, narratives, POA&Ms, policies, and CRMs for structural completeness and quality.
| name | frmr-analysis |
| description | Analyzes FedRAMP FRMR documents to extract control mappings, KSI entries, and version changes. Use when the user asks about FedRAMP requirements, control mappings, compliance data, or needs to understand FRMR document content. |
When analyzing FRMR documents:
When the grc-mcp-server is available, prefer these tools:
| MCP Tool | Use For |
|---|---|
grc_map_control | Map NIST controls to FedRAMP and other frameworks |
grc_strm_analyze | IR 8477 STRM analysis of a mapping (relation, rationale, strength) |
grc_transitive_map | Derive cross-framework mappings via an intermediary |
grc_lookup_control | Look up control catalog entries by ID |
grc_search_controls | Search controls by keyword |
grc_get_oscal_control | Extract full OSCAL control data (statement, params, assessment) |
grc_coverage_report | Analyze coverage between frameworks |
Fallback: If MCP tools are unavailable, read knowledge files from grc-pro/knowledge/frameworks/ and grc-pro/knowledge/mappings/.
