Compliance Checker

Download SKILL.mdGet Murage How skills work

Open source. macOS, Windows and Linux.

At a glance

What it is

Compliance framework audit expertise covering SOC 2 Type II controls, GDPR technical requirements, HIPAA security rule, PCI DSS for developers, ISO 27001 controls, audit evidence collection, compliance-as-code, and continuous compliance monitoring for meeting regulatory and industry security standards.

A skill is a written procedure a bot loads when a job calls for it. This one is a single file, SKILL.md, and the whole file is on this page.

File: SKILL.md
Length: 430 lines1,682 words, about 8 min read
Category: Securitycompliance audit
Level: Advanced
License

More security skills.

The full skill.

The whole file, exactly as it downloads. Read it before you rely on it.

SKILL.md

430 lines · 1,682 words

Download

Compliance Checker

Overview

Compliance is the practice of meeting regulatory, legal, and industry security standards. For engineers, compliance is not paperwork -- it is the implementation of specific technical controls that protect data and systems. This skill covers the technical requirements of major compliance frameworks and how to implement and automate them.

SOC 2 Type II

SOC 2 is the most common compliance framework for SaaS companies. Type II covers a period of time (typically 6-12 months), not just a point-in-time snapshot.

Put this skill to work.

Questions.

What is the Compliance Checker skill?

How much does it cost?

Nothing. It ships with Murage, which is open source. Your bots run on the AI plan you already have.

Can I change it?

Yes. Open it in Settings → Skills to read, edit or duplicate it. Skill Guard scans it again after every edit.

Give your first job to Murage.

Download the app, connect the AI you already pay for, and tell your Chief of Staff what needs doing. Plan on about ten minutes from install to a working team.

Download Murage

No account needed · Runs on the AI plan you already pay for

Requirement	SOC 2	GDPR	HIPAA	PCI DSS	ISO 27001
Encryption at rest	CC6.7	Art. 32	164.312(a)(2)(iv)	Req 3.4	A10.1
Encryption in transit	CC6.7	Art. 32	164.312(e)(1)	Req 4.1	A10.1
Access control	CC6.1-6.3	Art. 32	164.312(a)(1)	Req 7-8	A9
Logging/audit	CC7.1-7.2	Art. 30	164.312(b)	Req 10	A12.4
Incident response	CC7.3	Art. 33-34	164.308(a)(6)	Req 12.10	A16
Vulnerability mgmt	CC7.1	Art. 32	164.308(a)(5)	Req 6.1, 11	A12.6
Data retention	CC6.5	Art. 5(1)(e)	164.530(j)	Req 3.1	A8.2
Risk assessment	CC3.1	Art. 35	164.308(a)(1)	Req 12.2	A6.1.2

Compliance Checker

More security skills.

The full skill.

Compliance Checker

Overview

SOC 2 Type II

Put this skill to work.

Questions.

Give your first job to Murage.

Search murage.ai

Compliance Checker

More security skills.

The full skill.

Compliance Checker

Overview

SOC 2 Type II

Put this skill to work.

Questions.

Give your first job to Murage.

Create a bot and use this skill.

Ask Ember to create the bot

Open the bot’s skills

Find Compliance Checker and switch it on

Ask the bot for the job

About this skill.

Key Technical Controls for Engineers

GDPR Technical Requirements

Data Processing Principles (Article 5)

Data Subject Rights (Articles 15-22)

Consent Management

HIPAA Security Rule

Technical Safeguards (164.312)

PHI Data Classification

PCI DSS for Developers

Requirements That Affect Code

PCI-Compliant Payment Form

ISO 27001 Controls (Annex A)

Controls Relevant to Engineering Teams

Audit Evidence Collection

Automated Evidence Collection

Compliance-as-Code

Infrastructure Compliance Scanning

Continuous Compliance Monitoring

Framework Comparison

When to Use

Output Format

Example

Edge Cases