ansvar-cmmc

Twenty compliance skills for EU security work: four standalone skills (STRIDE/LINDDUN regulatory threat modeling, incident-reporting navigation across NIS2/GDPR/DORA/CRA, CRA vulnerability obligations, and the iso-standards-expert skill) plus the Ansvar workflow skill library (using-ansvar, gap analysis, threat modelling, DPIA/FRIA, TARA, tender review, vulnerability decisions, tabletop, document review, drone SORA, product applicability register, vulnerability management, zero trust assessment, CMMC base, Level 1 and Level 2 self-assessments; sixteen library skills) — every claim cited from officially published or licensed text via the Ansvar Gateway MCP connector (free plan available, business sign-up).

26 skills · 1 MCP server

Assess a vulnerability management programme and run a defensive vulnerability feed cycle with candidate findings, exposure questions, national advisories and one cursor across all feeds. Includes using-ansvar for cited legal and standards questions.

2 skills · 1 MCP server

Assess zero trust maturity against CISA ZTMM v2.0 with fetched guidance, interview or twin evidence, a gap register and a roadmap for the next cycle. Includes using-ansvar for cited legal and standards questions.

2 skills · 1 MCP server

Get a defense supplier ready for a CMMC 2.0 Level 2 assessment. Three deterministic stdlib scripts: an SPRS scorer that weights all 110 NIST SP 800-171 Rev 2 requirements per 32 CFR 170.24 and blocks gaps that can never go on a POA&M; a POA&M closeout tracker that checks every deferred gap against the 180-day Conditional status deadline and the annual affirmation calendar; and a scope classifier that sorts the asset inventory into the 170.19 categories and blocks on assets missing from the SSP or cloud providers holding CUI without FedRAMP. Ships cs-cmmc-assessor agent, /cs-cmmc-readiness and /cs-sprs-score commands, 3 cited references and a readiness sign-off.

1 skill · 2 commands · 1 agent

NIST SP 800-53 Rev 5 compliance advisor — all 20 control families, Low/Moderate/High baseline selection, FIPS 199/200 categorization, control tailoring, ODVs, overlays, privacy controls (PT family), supply chain (SR family), SSP narrative writing, assessment procedures (SP 800-53A), POA&M management, RMF steps (SP 800-37), continuous monitoring, OSCAL, and mapping to FedRAMP, FISMA, CMMC 2.0, and ISO 27001.

1 skill

Expert CIS Controls v8 (CIS Top 18) advisor — implementation group scoping (IG1/IG2/IG3), control gap assessments, safeguard-level guidance, asset inventory, software inventory, data protection, secure configuration, account management, access control, continuous vulnerability management, audit log management, email and web browser protections, malware defenses, network infrastructure management, network monitoring and defense, application software security, incident response, penetration testing, and CIS Controls mapping to NIST CSF, ISO 27001, SOC 2, and CMMC. Use for any question about CIS Controls, CIS Benchmarks, Implementation Groups, or prioritized cyber hygiene for any organization size.

200 skills

CMMC v2.0 (DoD contractors) with 5 levels and C3PAO assessment prep

2 skills · 5 commands