All authors
Claude Skills by CyberStrikeus
github.com/CyberStrikeus7,689 skills3 installs18,525 views
- ID.GV 01 Idgv 01Organizational cybersecurity policy is established and communicatedVotes: 0GitHub stars: 2,182
- ID.GV 02 Idgv 02Cybersecurity roles and responsibilities are coordinated and aligned with internal roles and external partnersVotes: 0GitHub stars: 2,182
- ID.GV 03 Idgv 03Legal and regulatory requirements regarding cybersecurity, including privacy and civil liberties obligations, are understood and managedVotes: 0GitHub stars: 2,182
- ID.GV 04 Idgv 04Governance and risk management processes address cybersecurity risksVotes: 0GitHub stars: 2,182
- ID.IM 01 Idim 01Improvements are identified from evaluationsVotes: 0GitHub stars: 2,182
- ID.IM 02 Idim 02Improvements are identified from security tests and exercises, including those done in coordination with suppliers and relevant third partiesVotes: 0GitHub stars: 2,182
- ID.IM 03 Idim 03Improvements are identified from execution of operational processes, procedures, and activitiesVotes: 0GitHub stars: 2,182
- ID.IM 04 Idim 04Incident response plans and other cybersecurity plans that affect operations are established, communicated, maintained, and improvedVotes: 0GitHub stars: 2,182
- ID.RA 01 Idra 01Vulnerabilities in assets are identified, validated, and recordedVotes: 0GitHub stars: 2,182
- ID.RA 02 Idra 02Cyber threat intelligence is received from information sharing forums and sourcesVotes: 0GitHub stars: 2,182
- ID.RA 03 Idra 03Internal and external threats to the organization are identified and recordedVotes: 0GitHub stars: 2,182
- ID.RA 04 Idra 04Potential impacts and likelihoods of threats exploiting vulnerabilities are identified and recordedVotes: 0GitHub stars: 2,182
- ID.RA 05 Idra 05Threats, vulnerabilities, likelihoods, and impacts are used to understand inherent risk and inform risk response prioritizationVotes: 0GitHub stars: 2,182
- ID.RA 06 Idra 06Risk responses are chosen, prioritized, planned, tracked, and communicatedVotes: 0GitHub stars: 2,182
- ID.RA 07 Idra 07Changes and exceptions are managed, assessed for risk impact, recorded, and trackedVotes: 0GitHub stars: 2,182
- ID.RA 08 Idra 08Processes for receiving, analyzing, and responding to vulnerability disclosures are establishedVotes: 0GitHub stars: 2,182
- ID.RA 09 Idra 09The authenticity and integrity of hardware and software are assessed prior to acquisition and useVotes: 0GitHub stars: 2,182
- ID.RA 10 Idra 10Critical suppliers are assessed prior to acquisitionVotes: 0GitHub stars: 2,182
- ID.RM 01 Idrm 01Risk management processes are established, managed, and agreed to by organizational stakeholdersVotes: 0GitHub stars: 2,182
- ID.RM 02 Idrm 02Organizational risk tolerance is determined and clearly expressedVotes: 0GitHub stars: 2,182
- ID.RM 03 Idrm 03The organization’s determination of risk tolerance is informed by its role in critical infrastructure and sector specific risk analysisVotes: 0GitHub stars: 2,182
- ID.SC 01 Idsc 01Cyber supply chain risk management processes are identified, established, assessed, managed, and agreed to by organizational stakeholdersVotes: 0GitHub stars: 2,182
- ID.SC 02 Idsc 02Suppliers and third party partners of information systems, components, and services are identified, prioritized, and assessed using a cyber supply chaVotes: 0GitHub stars: 2,182
- ID.SC 03 Idsc 03Contracts with suppliers and third-party partners are used to implement appropriate measures designed to meet the objectives of an organization’s cybeVotes: 0GitHub stars: 2,182
- ID.SC 04 Idsc 04Suppliers and third-party partners are routinely assessed using audits, test results, or other forms of evaluations to confirm they are meeting theirVotes: 0GitHub stars: 2,182
- ID.SC 05 Idsc 05Response and recovery planning and testing are conducted with suppliers and third-party providersVotes: 0GitHub stars: 2,182
- Improvement (ID.IM) ImprovementImprovements to organizational cybersecurity risk management processes, procedures and activities are identified across all CSF FunctionsVotes: 0GitHub stars: 2,182
- Risk Assessment (ID.RA) Risk AssessmentThe cybersecurity risk to the organization, assets, and individuals is understood by the organizationVotes: 0GitHub stars: 2,182
- Risk Management Strategy (ID.RM) Risk Management StrategyRisk Management StrategyVotes: 0GitHub stars: 2,182
- Supply Chain Risk Management (ID.SC) Supply Chain Risk ManagementSupply Chain Risk ManagementVotes: 0GitHub stars: 2,182
- Awareness And Training (PR.AT) Awareness And TrainingThe organization's personnel are provided with cybersecurity awareness and training so that they can perform their cybersecurity-related tasksVotes: 0GitHub stars: 2,182
- Data Security (PR.DS) Data SecurityData are managed consistent with the organization's risk strategy to protect the confidentiality, integrity, and availability of informationVotes: 0GitHub stars: 2,182
- Identity Management, Authentication And Access Control (PR.AC) Identity Management Authentication And Access ControlIdentity Management, Authentication and Access ControlVotes: 0GitHub stars: 2,182
- Information Protection Processes And Procedures (PR.IP) Information Protection Processes And ProceduresInformation Protection Processes and ProceduresVotes: 0GitHub stars: 2,182
- Maintenance (PR.MA) MaintenanceMaintenanceVotes: 0GitHub stars: 2,182
- PR.AA 01 Praa 01Identities and credentials for authorized users, services, and hardware are managed by the organizationVotes: 0GitHub stars: 2,182
- PR.AA 02 Praa 02Identities are proofed and bound to credentials based on the context of interactionsVotes: 0GitHub stars: 2,182
- PR.AA 03 Praa 03Users, services, and hardware are authenticatedVotes: 0GitHub stars: 2,182
- PR.AA 04 Praa 04Identity assertions are protected, conveyed, and verifiedVotes: 0GitHub stars: 2,182
- PR.AA 05 Praa 05Access permissions, entitlements, and authorizations are defined in a policy, managed, enforced, and reviewed, and incorporate the principles of leastVotes: 0GitHub stars: 2,182
- PR.AA 06 Praa 06Physical access to assets is managed, monitored, and enforced commensurate with riskVotes: 0GitHub stars: 2,182
- PR.AC 01 Prac 01Identities and credentials are issued, managed, verified, revoked, and audited for authorized devices, users and processesVotes: 0GitHub stars: 2,182
- PR.AC 02 Prac 02Physical access to assets is managed and protectedVotes: 0GitHub stars: 2,182
- PR.AC 03 Prac 03Remote access is managedVotes: 0GitHub stars: 2,182
- PR.AC 04 Prac 04Access permissions and authorizations are managed, incorporating the principles of least privilege and separation of dutiesVotes: 0GitHub stars: 2,182
- PR.AC 05 Prac 05Network integrity is protected (e.g., network segregation, network segmentation)Votes: 0GitHub stars: 2,182
- PR.AC 06 Prac 06Identities are proofed and bound to credentials and asserted in interactionsVotes: 0GitHub stars: 2,182
- PR.AC 07 Prac 07Users, devices, and other assets are authenticated (e.g., single-factor, multi-factor) commensurate with the risk of the transaction (e.g., individualVotes: 0GitHub stars: 2,182
- PR.AT 01 Prat 01Personnel are provided with awareness and training so that they possess the knowledge and skills to perform general tasks with cybersecurity risks inVotes: 0GitHub stars: 2,182
- PR.AT 02 Prat 02Individuals in specialized roles are provided with awareness and training so that they possess the knowledge and skills to perform relevant tasks withVotes: 0GitHub stars: 2,182