メニュー
Step-by-step lead IT auditor methodology covering engagement planning through final reporting and closeout. Use this skill as a procedural guide at the start of an audit engagement.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Step-by-step IAM audit methodology covering user inventory, policy review, MFA verification, privileged account monitoring, SOD analysis, and reporting. Use this skill for procedural IAM audit guidance.
Analyse IAM policies for excessive permissions, wildcards, admin-equivalent actions, missing conditions, and inline policies. Use this skill for access review and least-privilege analysis.
Review privileged account activity logs for baseline exceedances, off-hours access, sensitive actions, and new unknown users. Use this skill for admin activity review and privileged access monitoring.
Detect segregation of duties conflicts in user role assignments. Use this skill for role conflict analysis, four-eyes control review, and SOD violation detection.
Compare expected audit evidence artefacts from an audit program JSON against provided files and report gaps with coverage percentage. Use this skill for evidence coverage review and missing artefact analysis.
Generate a scoped IT audit program with controls mapped to roles and compliance frameworks. Use this skill for audit planning, control checklist generation, and audit_program.json creation.
| name | lead-it-auditor-playbook |
| description | Step-by-step lead IT auditor methodology covering engagement planning through final reporting and closeout. Use this skill as a procedural guide at the start of an audit engagement. |
Use this skill when the user asks for audit playbooks, audit methodology, audit steps, audit procedure, or how to audit.
Provide a structured lead IT auditor methodology spanning planning, execution, reporting, and closeout.
