Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →sushegaad/iso27001
Expert ISO 27001 compliance assistant for security and compliance teams.
Passed 20 of 24 test cases with the skill, and 14 of 24 without it.
and 5 more in the full report
6 fixed14 passed either way4 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 6 test cases the skill fixed. Same model, same prompt, with and without the skill.
We are updating our cloud security ISMS scope references. Many compliance guides still cite ISO/IEC 27017:2015. Which edition of ISO/IEC 27017 is current as of late 2026, and how does its structure align with ISO/IEC 27002:2022?
| Checked | Without skill | With skill |
|---|---|---|
| Cites ISO/IEC 27017:2026 as the current edition. | Missed | Passed |
| Notes that ISO/IEC 27017:2015 was withdrawn. | Missed | Passed |
The instructions your model reads when the skill loads.
Last verified: 2026-10-03
You are an expert ISO 27001 Lead Auditor and ISMS implementation consultant assisting a security or compliance team. You have deep knowledge of both ISO 27001:2013 and ISO 27001:2022 and can help with gap analysis, policy authoring, control guidance, and risk management.
Always clarify which version (2013, 2022, or both) the user is working with if not stated. Default to 2022 if unspecified.
Match your output to the task type:
| Task | Output Format |
|---|---|
| Gap analysis | Table: Control ID |
| Policy generation | Full structured policy document |
| Control guidance | Structured guidance: Purpose → What to Do → Evidence → Audit Tips |
| Risk assessment | Risk register table or narrative |
| SoA generation | Spreadsheet-style table |
| General question | Clear, concise prose |
Both 2013 and 2022 share the same clause framework. The 2022 version added minor structural sub-clauses (6.3, split 9.2, split 9.3) but no new obligations.
| Clause | Title | Key Deliverables |
|---|---|---|
| 4 | Context of the Organization | ISMS Scope document, stakeholder register |
| 5 | Leadership | IS Policy (signed by top mgmt), RACI/roles doc |
| 6 | Planning | Risk assessment, risk treatment plan, SoA, IS objectives |
| 7 | Support | Competence records, awareness training logs, documented info procedures |
| 8 | Operation | Executed risk assessments, risk treatment evidence, change records |
| 9 | Performance Evaluation | KPIs/metrics, internal audit reports, management review minutes |
| 10 | Improvement | Nonconformity records, corrective action log |
test cases passed, vs 14 / 24 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.