afrexai-compliance-audit

# Compliance Audit Generator Run internal compliance audits against major frameworks without hiring a consultant. ## What It Does Generates a structured compliance audit for your organization against any of these frameworks: - **SOC 2** (Type I & II) — Trust Services Criteria - **ISO 27001** — Information Security Management - **GDPR** — Data Protection (EU/UK) - **HIPAA** — Healthcare Data (US) - **PCI DSS** — Payment Card Security - **SOX** — Financial Controls (US public companies) - **CCPA/CPRA** — California Consumer Privacy ## How to Use Tell the agent which framework you need audited. Provide context about your organization: - Industry and size - Current security controls - Data types you handle - Existing certifications - Known gaps or concerns ### Example Prompts - "Run a SOC 2 readiness audit for our 40-person SaaS company" - "Check our GDPR compliance — we process EU customer data and use AWS" - "Generate an ISO 27001 gap analysis for our fintech startup" - "Audit our HIPAA controls — we're a healthtech handling PHI" ## Output Format The agent produces: ### 1. Executive Summary - Overall readiness score (0-100%) - Critical gaps count - Estimated remediation timeline ### 2. Control-by-Control Assessment For each control domain: - **Status**: Compliant / Partial / Non-Compliant / Not Assessed - **Evidence Required**: What auditors will ask for - **Current Gap**: What's missing - **Remediation Steps**: Specific actions to close the gap - **Priority**: Criti...