14 auditor-level compliance skills covering HIPAA, GDPR, SOC 2, PCI-DSS, cloud security, infrastructure hardening, and incident response. Each skill maps findings to specific compliance control IDs.
Every skill maps findings to specific compliance control IDs across 8 major frameworks.
| Skill | HIPAA | GDPR | SOC 2 | PCI-DSS | ISO 27001 | NIST | CIS | CCPA |
|---|---|---|---|---|---|---|---|---|
| hipaa-audit | ● | ○ | ○ | — | ○ | ○ | — | — |
| gdpr-audit | ○ | ● | ○ | — | ○ | — | — | ● |
| soc2-audit | ○ | ○ | ● | ○ | ● | ○ | — | — |
| pci-audit | — | — | ○ | ● | ○ | ○ | — | — |
| cloud-security | ○ | ○ | ● | ○ | ● | ● | ● | — |
| infra-harden | ○ | — | ● | ● | ● | ● | ● | — |
| network-audit | — | — | ● | ● | ○ | ○ | ● | — |
| secrets-scan | ● | ● | ● | ● | ● | ● | — | ● |
| dep-vuln | ○ | ○ | ● | ● | ● | ● | — | — |
| privacy-review | ● | ● | ● | — | ● | — | — | ● |
| access-audit | ● | ● | ● | ● | ● | ● | — | — |
| audit-log | ● | ● | ● | ● | ● | ● | — | — |
| incident-plan | ● | ● | ● | ● | ● | ● | — | ● |
| compliance-report | ● | ● | ● | ● | ● | ● | — | ● |
From framework-specific compliance to automated reporting, organized in defense-in-depth layers.
Maps every finding to specific section codes, GDPR Articles, SOC 2 CC criteria, or PCI-DSS Requirements.
CIS Benchmarks, defense-in-depth, and zero-trust validation across your entire infrastructure stack.
Pre-commit hooks, CI pipeline integration, and continuous scanning to catch vulnerabilities before deployment.
NIST 800-61 lifecycle, multi-framework control mapping, and auditor-ready reports with full evidence trails.
Match your compliance need to the right skill. Start with the question that describes your situation.
Each skill includes an expert persona, domain rules, step-by-step workflows, and quality checklists.
How to run a full compliance audit using Heaptrace Skills, from framework selection to remediation tracking.