About this skill

Problem

When building a network and data security program, the hard part is often not missing point tools, but fragmented controls across policies, processes, technology, vendors, and data. This skill focuses on that security governance problem: turning vague concerns into a concrete gap assessment, prioritization, and implementation path.

How It Works

After triggering, it follows a structured workflow:
- Requirement mapping: identify the user's goals and pain points around network security, data security, vendor security, or governance.
- Analysis: evaluate industry best practices, applicable standards, current gaps, and feasibility/risk tradeoffs.
- Structured output: provide current-state assessment, improvement recommendations, implementation steps, and reference standards, with an emphasis on actionable guidance.

Limits

Use it for security program planning, remediation assessment, policy design, and rollout roadmaps. It does not replace vulnerability scanning, penetration testing, forensic investigation, compliance audit evidence, or legal advice. Specific system hardening, code review, and incident response still require dedicated tooling and practitioners.

Screenshots

Use Cases

An IT lead preparing annual security remediation needs a workable plan across policies, processes, and vendor risk.
A data platform team needs to assess data classification, access control, and audit gaps before a new system launch.
A security consultant needs to produce a client assessment with findings, improvement items, and rollout steps.
A procurement team needs to define vendor security requirements and contract controls before onboarding a cloud provider.

Best For

An IT security program owner who needs to clarify policy, process, and technical control gaps first.
A data security engineer who needs to turn data classification, access control, and audit requirements into remediation items.
A vendor management team that needs security controls and contract terms before onboarding cloud or outsourced services.
An architect who needs to evaluate network and data security controls before system release.