Use this skill when a company has a risk assessment and treatment plan and now needs its first statement of applicability, and asks "build our SoA", "draft the statement of applicability", "which controls apply to us", "SoA from the risk treatment plan", "justify inclusions and exclusions" or "our SoA says implemented everywhere".
Install
npx skills add better-isms/grcskills --skill soa-first-draftnpx skills add better-isms/grcskills --skill soa-first-draft -a claude-code -gnpx skills add better-isms/grcskills --skill soa-first-draft -a codex -ggemini skills install https://github.com/better-isms/grcskills.git --path skills/tristan-roth/soa-first-draftgh skill install better-isms/grcskills soa-first-draftgit clone --depth 1 https://github.com/better-isms/grcskills /tmp/better-isms__grcskills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/better-isms__grcskills/skills/tristan-roth/soa-first-draft ~/.claude/skills/soa-first-draft # Claude Code
cp -R /tmp/better-isms__grcskills/skills/tristan-roth/soa-first-draft ~/.agents/skills/soa-first-draft # Codex, Cursor, Gemini CLI, Copilot, OpenCode