kriss-b avatar

llm-iso27001

v1.0.0

by kriss-b

Operate an ISO 27001 / ISO 42001 / NIS 2 ISMS: policies, live registers, and executable compliance checks, in markdown + git.

What llm-iso27001 does, in the publisher's words

This repository is a lightweight and LLM-maintainable Information Security Management System (ISMS), covering policies, operational records, and executable compliance checks, aligned with ISO 27001, with optional overlays for ISO 42001 (AI Management System, AIMS) and NIS 2. It is designed to be cloned and immediately customised by any LLM Agent of your choice (e.g. Mistral Vibe, OpenAI Codex, Claude Code, OpenCode / Pi, or etc.) for any company seeking ISO 27001 certification or a structured approach to information security.

Inspired by Andrej Karpathy's llm-wiki gist and Is Grep All You Need? paper, applied here to an ISMS.

Everything is plain markdown, version-controlled with git, and intentionally kept free of tooling, build steps, or proprietary formats. Because nothing is locked in, the LLM agent can also draw on the tools you already use, Jira, Confluence, your GRC platform, etc... The LLM can read it, understand it, modify it, and maintain it, preferably with the supervision of a human security expert.

From the project README, punctuation lightly normalized · Open the README on GitHub

Skills
1
MCP servers
0
Stars
48
License
MIT
Repo created
2026-04-23
Last pushed
2026-09-26
Publisher type
User
Version
1.0.0

Links

Skills · 1

operate-isms
Operate an ISO 27001 / ISO 42001 / NIS 2 information security management system stored as markdown in this repository. Use when the user asks to instantiate, review, update, or run compliance checks against their ISMS, policies, risk register, or Statement of Applicability.

Descriptions come from the frontmatter of each SKILL.md, punctuation lightly normalized.

Category

Security & Compliance. Assigned by this directory. Agent Plugins 1.0.0 has no category field, so no manifest declares one.

Keywords

iso27001 · iso42001 · nis2 · compliance · grc · agent-skills · open-source

Related by publisher and keywords

  • probogetprobo

    Open-source compliance workflows powered by the Probo MCP API

  • magpieapache

    Apache Magpie: a reusable, governance-agnostic framework of agentic skills for maintaining open-source projects: release management, security triage, PR and issue workflows, contributor growth, and repo health.

  • World Monitor agent plugin: live global-intelligence MCP servers plus task-focused agent skills for country risk, conflict, markets, chokepoints, energy, climate, and related situational awareness.

  • Portable skills-only "AAS Accessibility & Inclusive UX" plugin from Agentic Awesome Skills.

  • Portable skills-only "AAS AI Product & Evaluation Ops" plugin from Agentic Awesome Skills.

  • Portable skills-only "AAS API Platform Builder" plugin from Agentic Awesome Skills.

Add the verified badge to your README[![Verified by AgentPluginsDirectory.com against Schema 1.0.0](https://agentpluginsdirectory.com/badge.svg)](https://agentpluginsdirectory.com/plugins/llm-iso27001--kriss-b)

✓ Verified . We fetched the manifest from GitHub and checked it against the official Agent Plugins 1.0.0 schema at agent-plugins.org.