Governance & Administration Skills
Security engagement scopes, vulnerability tracking and governed ERP posting, always under named human control
3 skills
Security Finding Tracker
The vulnerability register: findings with evidence and reproduction steps, a remediation clock derived from severity, coordinated-disclosure dates for externally reported issues, the GDPR Art. 33 72-hour breach clock where personal data is implicated, and risk acceptance that always names the accepting human. Fixes link to the extension backlog so security work is prioritized in the same queue as everything else
View skillSecurity Engagement Scope Register
The authorization of record for security testing, and the gate that enforces it: in-scope targets (hosts, wildcard domains, CIDR), explicit exclusions that always win over inclusions, permitted environments and test kinds, the named human who authorized it, an emergency contact and a hard expiry. Answers "may I touch this?" before anything runs, and logs every refusal as evidence the gate worked
View skillSoftOne Expense Posting
Post supplier expense invoices to SoftOne ERP: invoice checks, supplier by VAT number, duplicate refusal, expense account and cost centre per line from rules and history, SoftOne dry run, confirmed posting.
View skill