Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →tractorjuice/Cloud Security & Compliance
This skill should be used when the user asks about "ISO 27001", "Cyber Essentials", "NCSC principles", "cloud security", "what certifications", "SOC 2", "data protection", "UK GDPR", "security clearance", "PCI DSS", "compliance framework", "CSA STAR", "DSPT", "Technology Code of Practice", "AI Playbook", "what evidence do I need", "security certification", "NHS data", "BPSS", "SC clearance", "DV clearance", "what security do I need", "certification cost", "ISO 22301", or needs guidance on securi
Passed 21 of 23 test cases with the skill, and 10 of 23 without it.
and 10 more in the full report
11 fixed10 passed either way2 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 11 test cases the skill fixed. Same model, same prompt, with and without the skill.
What question regarding AI implementation was added to G-Cloud 15 user support service evaluations?
| Checked | Without skill | With skill |
|---|---|---|
| States that G-Cloud 15 asks whether an AI chatbot is used before reaching a human support person. | Missed | Passed |
The instructions your model reads when the skill loads.
Conversational knowledge about security certifications, NCSC principles, compliance frameworks, evidence requirements, and UK government security standards relevant to G-Cloud service providers.
Provide instant answers to common questions about security and compliance requirements for G-Cloud without requiring document generation. This covers certifications, frameworks, clearances, and evidence guidance.
Activate when users ask about:
| Certification | G-Cloud Importance | Validity | Typical Cost |
|---|---|---|---|
| ISO 27001 | High — expected by most buyers | 3 years (annual surveillance) | £5K–£50K+ |
| Cyber Essentials | High — mandatory for personal data | 12 months | £300–£500 |
| Cyber Essentials Plus | High — independent verification | 12 months | £1,500–£5,000 |
| SOC 2 Type II | Medium-High — sophisticated buyers | Annual reports | £20K–£80K |
| CSA STAR | Medium — cloud-native services | Varies by level | Varies |
| PCI DSS | Required for payment processing | Annual | Varies by level |
| Lot | Required | Also asked |
|---|---|---|
| 1a/1b | Cyber Essentials Plus; ISO 9001, ISO 20000-1, ISO 27001; ISO 14001, ISO 27017 and (if public cloud is offered) ISO 27018 unless you resell and rely on your cloud provider's accreditations; a Carbon Reduction Plan | ISO 28000:2022, QMS, CSA STAR, PCI DSS |
| 2a/2b | Cyber Essentials | Cyber Essentials Plus, ISO/IEC 27001, ISO 9001, ISO 28000:2022, QMS, CSA STAR, PCI DSS |
| 3 | Cyber Essentials (also a scored award criterion) | As 2a/2b |
test cases passed, vs 10 / 23 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.