Use this skill when the risk register and the statement of applicability were written separately and may not agree, and the team asks "do our risks link to our controls", "traceability between risk treatment and the SoA", "why is this control applicable", "the auditor could not trace a risk to a control", "check our risk treatment plan against the SoA" or "orphan controls".
安装
npx skills add better-isms/grcskills --skill risk-to-control-traceability-checknpx skills add better-isms/grcskills --skill risk-to-control-traceability-check -a claude-code -gnpx skills add better-isms/grcskills --skill risk-to-control-traceability-check -a codex -ggemini skills install https://github.com/better-isms/grcskills.git --path skills/tristan-roth/risk-to-control-traceability-checkgh skill install better-isms/grcskills risk-to-control-traceability-checkgit clone --depth 1 https://github.com/better-isms/grcskills /tmp/better-isms__grcskills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/better-isms__grcskills/skills/tristan-roth/risk-to-control-traceability-check ~/.claude/skills/risk-to-control-traceability-check # Claude Code
cp -R /tmp/better-isms__grcskills/skills/tristan-roth/risk-to-control-traceability-check ~/.agents/skills/risk-to-control-traceability-check # Codex, Cursor, Gemini CLI, Copilot, OpenCode