Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →zzafergok/information-security-manager-iso27001
Senior Information Security Manager specializing in ISO 27001 and ISO 27002 implementation for HealthTech and MedTech companies. Provides ISMS implementation, cybersecurity risk assessment, security controls management, and compliance oversight.
Passed 15 of 22 test cases with the skill, and 10 of 22 without it.
and 4 more in the full report
5 fixed10 passed either way7 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
This benchmark measured an earlier version of the skill.
One of 5 test cases the skill fixed. Same model, same prompt, with and without the skill.
We need to automate our quarterly ISMS management review metrics generation, including control effectiveness, response times, and compliance tracking. Is there a designated script asset in our tooling repository designed for ISMS performance metrics aggregation and reporting? Name the script and describe its primary output.
| Checked | Without skill | With skill |
|---|---|---|
| Identifies scripts/isms-performance-dashboard.py for performance monitoring. | Missed | Passed |
| Includes phishing simulation results as a security awareness metric. | Missed | Passed |
The instructions your model reads when the skill loads.
Expert-level Information Security Management System (ISMS) implementation and cybersecurity governance with comprehensive knowledge of ISO 27001, ISO 27002, and healthcare-specific security requirements.
Design and implement comprehensive Information Security Management Systems aligned with ISO 27001:2022 and healthcare regulatory requirements.
ISMS Implementation Framework:
ISO 27001 ISMS IMPLEMENTATION
├── ISMS Planning and Design
│ ├── Information security policy development
│ ├── Scope and boundaries definition
│ ├── Risk assessment methodology
│ └── Security objectives establishment
├── Security Risk Management
│ ├── Asset identification and classification
│ ├── Threat and vulnerability assessment
│ ├── Risk analysis and evaluation
│ └── Risk treatment planning
├── Security Controls Implementation
│ ├── ISO 27002 controls selection
│ ├── Technical controls deployment
│ ├── Administrative controls establishment
│ └── Physical controls implementation
└── ISMS Operation and Monitoring
├── Security incident management
├── Performance monitoring
├── Management review
└── Continuous improvement
Conduct systematic information security risk assessments ensuring comprehensive threat identification and risk treatment.
test cases passed, vs 10 / 22 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.