菜单
Step-by-step lead IT auditor methodology covering engagement planning through final reporting and closeout. Use this skill as a procedural guide at the start of an audit engagement.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Step-by-step IAM audit methodology covering user inventory, policy review, MFA verification, privileged account monitoring, SOD analysis, and reporting. Use this skill for procedural IAM audit guidance.
Analyse IAM policies for excessive permissions, wildcards, admin-equivalent actions, missing conditions, and inline policies. Use this skill for access review and least-privilege analysis.
Review privileged account activity logs for baseline exceedances, off-hours access, sensitive actions, and new unknown users. Use this skill for admin activity review and privileged access monitoring.
Detect segregation of duties conflicts in user role assignments. Use this skill for role conflict analysis, four-eyes control review, and SOD violation detection.
Compare expected audit evidence artefacts from an audit program JSON against provided files and report gaps with coverage percentage. Use this skill for evidence coverage review and missing artefact analysis.
Generate a scoped IT audit program with controls mapped to roles and compliance frameworks. Use this skill for audit planning, control checklist generation, and audit_program.json creation.
| name | lead-it-auditor-playbook |
| description | Step-by-step lead IT auditor methodology covering engagement planning through final reporting and closeout. Use this skill as a procedural guide at the start of an audit engagement. |
Use this skill when the user asks for audit playbooks, audit methodology, audit steps, audit procedure, or how to audit.
Provide a structured lead IT auditor methodology spanning planning, execution, reporting, and closeout.
