sushegaad/mcp-server-for-iso27001
Developer tools이 페이지는 AI로 자동 번역되었습니다. 기술적인 세부 사항은 원문을 확인하세요. 원문 보기
Model Context Protocol (MCP) server for ISO27001: A stateful Model Context Protocol (MCP) server that gives Claude a complete ISO 27001:2022 Information Security Management System (ISMS).
개요
— controls, risk register, policies, evidence tracking, SoA generation, and full audit workflows in one local encrypted MCP server. ISO 27001 compliance work is typically scattered across spreadsheets, Word docs, ticketing systems, and shared drives. Security teams and consultants spend more time chasing evidence and reformatting documents than actually improving security posture. — all 93 ISO 27001:2022 controls seeded and ready, a real risk register, policy and procedure generators, evidence tracking, audit workflows, and a Statement of Applicability, backed by an encrypted local database that never leaves your machine. The difference from generating static documents: Claude can query, reason, and update across your entire ISMS in a single conversation. Ask it to run a gap assessment, identify which open risks are linked to unimplemented controls, generate the policies that close those gaps, and produce a remediation roadmap — all without switching tools.
README
원문 README의 일부입니다. 원문 보기.
iso27001-mcp
Turn Claude into an ISO 27001 compliance assistant — controls, risk register, policies, evidence tracking, SoA generation, and full audit workflows in one local encrypted MCP server.
▶ Live Interactive Demo · Guided First-Run Checklist → · Roadmap →
Why this exists
ISO 27001 compliance work is typically scattered across spreadsheets, Word docs, ticketing systems, and shared drives. Security teams and consultants spend more time chasing evidence and reformatting documents than actually improving security posture.
iso27001-mcp solves this by giving Claude a live, stateful ISMS — all 93 ISO 27001:2022 controls seeded and ready, a real risk register, policy and procedure generators, evidence tracking, audit workflows, and a Statement of Applicability, backed by an encrypted local database that never leaves your machine.
The difference from generating static documents: Claude can query, reason, and update across your entire ISMS in a single conversation. Ask it to run a gap assessment, identify which open risks are linked to unimplemented controls, generate the policies that close those gaps, and produce a remediation roadmap — all without switching tools.
Who it’s for: Security teams · Compliance consultants · GRC engineers · Startups preparing for ISO 27001 · Internal audit functions
What Claude can do with it
| Capability | Example prompt |
|---|---|
| Gap assessment | “Run an ISO 27001:2022 gap assessment for a 50-person SaaS company.” |
| Risk register | “Create a risk register for a startup using AWS, GitHub, Slack, and Google Workspace.” |
| Statement of Applicability | “Generate a Statement of Applicability for all 93 ISO 27001:2022 controls.” |
| Policy generation | “Create an Access Control Policy mapped to ISO 27001 controls.” |
설치
This server does not publish a one-line install command.
Open the repository installation guide MCP 초보자라면? mcpskill.org 가이드부터 시작하세요 →