菜单
Analyzes FedRAMP FRMR documents to extract control mappings, KSI entries, and version changes. Use when the user asks about FedRAMP requirements, control mappings, compliance data, or needs to understand FRMR document content.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Audit preparation, evidence checklists, assessment simulation, gap analysis, and maturity scoring.
Draft SSP sections, SAR responses, boundary definitions, inheritance models, OSCAL guidance, and multi-framework coverage analyses.
Operational compliance workflows: continuous monitoring, calendaring, POA&M management, change management, and framework transitions.
Maps controls across cybersecurity frameworks using NIST IR 8477 Set-Theory Relationship Mapping (STRM). Use when helping with control implementation, compliance mapping, cross-framework alignment, or understanding control relationships.
Control lookup, cross-framework mapping, search, and coverage analysis across 15 compliance frameworks.
Review SSPs, narratives, POA&Ms, policies, and CRMs for structural completeness and quality.
| name | frmr-analysis |
| description | Analyzes FedRAMP FRMR documents to extract control mappings, KSI entries, and version changes. Use when the user asks about FedRAMP requirements, control mappings, compliance data, or needs to understand FRMR document content. |
When analyzing FRMR documents:
When the grc-mcp-server is available, prefer these tools:
| MCP Tool | Use For |
|---|---|
grc_map_control | Map NIST controls to FedRAMP and other frameworks |
grc_strm_analyze | IR 8477 STRM analysis of a mapping (relation, rationale, strength) |
grc_transitive_map | Derive cross-framework mappings via an intermediary |
grc_lookup_control | Look up control catalog entries by ID |
grc_search_controls | Search controls by keyword |
grc_get_oscal_control | Extract full OSCAL control data (statement, params, assessment) |
grc_coverage_report | Analyze coverage between frameworks |
Fallback: If MCP tools are unavailable, read knowledge files from grc-pro/knowledge/frameworks/ and grc-pro/knowledge/mappings/.
