Configure and operate multi-framework compliance programs

Map multiple compliance frameworks to unified control matrix and audit readiness

When a company must align multi-framework compliance programs without building separate audit prep tracks.

• · company profile: industry, geography, AI/medical/financial, headcount
• · target framework(s): ISO 27001, 13485, 42001, 14971, EU AI Act, MDR 745, GDPR, SOC 2, FDA QSR

• · framework selector: applicable frameworks ranked
• · unified control matrix: overlap % + mapping confidence + merged evidence requirements
• · mock internal audit: 8-15 finding scenarios + interview questions per control
• · consolidated evidence checklist with reuse map

• · stdlib Python only
• · 3 cs-* persona agents: cs-compliance-officer, cs-aims-iso42001, cs-ai-act-compliance
• · 3 /cs:* slash commands: /cs:compliance-readiness, /cs:aims-audit, /cs:ai-act-readiness

• · at least one target compliance framework identified
• · company profile data available
• · audit timeline known

• · Control mapping overstates overlap across frameworks with different maturity levels
• · Evidence requirements become bloated when merging >3 frameworks
• · Mock audit findings don't reflect actual auditor priorities

• · 4 stdlib Python tools (framework_selector, cross_framework_mapper, audit_simulator, evidence_pool_generator)
• · 4 in-depth references citing ISO 19011, IIA Standards, AICPA AT-C, NIST CSF, COSO ERM
• · Reuses 14 existing ra-qm-team skills + 2 new compliance-team-* plugins
• · 9 supported frameworks (comprehensive coverage)