Controls Gap Pack
Reads a requirement (regulation, standard, policy) and your control descriptions, then produces a DRAFT controls-and-gap pack — obligations, mapped controls, apparent coverage, gaps, and actions to assess. Owners and audit decide compliance and effectiveness.
What it produces
Saved next to the requirement source in OneDrive, with the exact path reported in the conversation.
- DRAFT-controls-gap-<Requirement>-<date>-v1.docx: the requirement broken into obligations, the controls that appear to address each, apparent coverage (Addressed / Partial / Not evident), gaps, actions to assess, and questions for control owners. DRAFT-labelled; not a compliance determination.
- DRAFT-controls-gap-<Requirement>-<date>-v1.xlsx (optional): the mapping as a workbook.
What to say to it
- “Map this regulation to our controls and find the gaps”
- “Run a controls gap analysis for this standard against our control register”
- “Break this policy requirement into obligations and map our controls”
- “Where are the control gaps for these contractual security requirements?”
How to install it
- 1Download controls-gap-pack.zip.
- 2In Cowork, open Customize.
- 3Select the Skills tab.
- 4Select the arrow next to Add, then Upload skill, and choose the file you downloaded.
- 5Start a new conversation and use one of the phrases above. Skills are only picked up when a conversation starts.
Cowork has to be switched on for you by an admin, and it is off by default. Custom skills are not supported on a phone or tablet, so use a laptop or desktop.
Cowork checks the file when you upload it and tells you if something is wrong, so you will know either way.
Format-validated against the Agent Skills spec. Not yet run in a live tenant.
Read the full skill, including its rules and references, in the source repository. Licensed CC BY-SA 4.0 as part of awesome-copilot-cowork-skills.