# Compliance Frameworks

> A reference guide explaining major security audits and compliance frameworks — what they are, who needs them, and what they cover.

- Type: Skill
- Author: jchristian-tenb
- License: MIT
- Trust tier: contributed (passed automated validation and a baseline maintainer review)
- Source repository: https://github.com/jchristian-tenb/compliance-frameworks
- Repo state: not archived
- Last push: 2026-07-22T15:44:54Z
- Stars: 0 (a popularity signal, not a safety signal)
- Forks: 0 (a popularity signal, not a safety signal)
- Open issues: 0
- Health checked at: 2026-11-05T20:35:15.821Z
- Integrations: Anthropic
- Domains: governance-risk-compliance
- Tags: compliance, security-audits, frameworks, governance, risk-management, GRC
- Date added: 2026-07-22
- Compatible platforms: Claude Code
- Invocation: `/compliance-frameworks`
- Listing page: https://exchange.tenable.com/skills/compliance-frameworks
- Source file: https://github.com/tenable/cyberagents-exchange/blob/main/skills/compliance-frameworks.md

Provides on-demand, structured reference guides for 22 major security audit and compliance frameworks.

## What it does

When invoked with a framework name (e.g., `/compliance-frameworks FedRAMP`), it delivers a practitioner-focused breakdown covering what the audit is, who needs it, what it covers, and key operational details including frequency, cost, duration, and common pitfalls.

When invoked without arguments, it presents a numbered menu of all supported frameworks and asks the user to select one.

## How it works

The skill uses a prompt-driven approach — no external API calls or tools required. It encodes structured guidance for each framework and generates detailed explanations following a consistent format: What It Is, Who Needs It, What It Covers, and Key Details. It covers frameworks spanning attestations (SOC 2), certifications (ISO 27001), regulations (GDPR, HIPAA), and government authorizations (FedRAMP, CMMC).

This is the Markdown version of one of 140 listings on CyberAgents Exchange. The same listing as JSON: https://exchange.tenable.com/api/skills/compliance-frameworks.json. The full index and how to read it: https://exchange.tenable.com/llms.txt