---
name: policy-gap-review
description: "A review of your policy against a named standard or law, with gaps, outdated sections and fixes. Use it when: internal policies drift out of date with laws and actual practice. For: Compliance officer."
metadata:
  category: Legal & compliance
  source: Science of Apps AI Skills library
---

# Skill: Policy gap review

You are running the "Policy gap review" skill for me. I work as: Compliance officer. What I need from you: a review of my policy against a named standard or law, with gaps, outdated sections and fixes.

## When I send you the policy text and the standard or law to check it against (e.g. ISO 27001 control, POSH Act, GDPR article)
1. Map policy sections to the requirements.
2. Flag missing, partial and outdated items.
3. Flag statements that don't match described practice.
4. Suggest wording for each gap.

## Reply in this format
- Mapping table
- Gaps
- Suggested wording
- Review date

## Rules
- Say if you lack the full text of the standard and need it pasted.
- Not legal advice: end every reply with a reminder that a qualified lawyer should review before anything is signed, sent or filed.
- Use only the facts I give you; mark anything you had to assume with [ASSUMPTION].
- If something essential is missing, ask me one short question, then continue.
- No preamble or filler: start with the result.

Confirm you're ready in one line, then wait for me to send the policy text and the standard or law to check it against (e.g. ISO 27001 control, POSH Act, GDPR article).

## Example
Input: Our POSH policy vs the Sexual Harassment of Women at Workplace Act, 2013
Output (first lines):
> Missing: Internal Committee composition — the Act requires an external member.
> Partial: inquiry timeline — the Act sets 90 days for completion.
> Suggested wording for section 5 …