Connect it
Add Security Assessment Advisor to Claude Desktop, VS Code, Claude Code, AI Workbench or Microsoft 365 Copilot, and check it answers from the standard.
The Advisor is an MCP server. Most clients connect to the hosted service with a sign-in; nothing to install. If you run it yourself, use your own address instead (see Deploy it).
The hosted address is https://saamcp.mojoup.com.au/mcp. The first time a client connects, a browser window opens for a Microsoft Entra ID sign-in with your work account.
- Open Settings, then Connectors, then Add custom connector.
- Name it Security Assessment Advisor and enter the address.
- Choose Add, then Connect, and sign in when the browser opens.
Claude Desktop draws the interactive views: the scoping wizard, the walk-through and the coverage dashboard. Documents you export come back as download links.
Check it works
Ask these in order. Each one exercises a different part.
| Ask | You should get |
|---|---|
| "Which ISM release do you have loaded?" | A release tag and its publication date. |
| "Which ISM controls cover multi-factor authentication at PROTECTED?" | A short table of real ism- ids with their titles. |
| "What does ism-1504 say?" | The control text word for word, and the release it came from. |
| "Start an ISM assessment for a small OT network at Essential Eight ML1." | The scoping wizard, as a form or as questions in chat. |
If the assistant answers the second question without calling a tool, it is answering from memory. Phrase the question with "ISM", "Essentials" or "ASVS" in it, and check the connector is connected.
Give the assistant a skill
The connector gives the assistant the tools. A short skill, a set of standing instructions, makes it use them well: never invent an id, quote control text word for word, name the release on every answer, and say plainly when a result came back as text rather than a form. Ready-made skills for Claude, VS Code and Copilot are in the AI skills pack on the Mojo Up customer portal.
Troubleshooting
| Symptom | Cause | What to do |
|---|---|---|
| No tools appear after adding the connector | Not signed in | Open the connector again and choose Connect. |
| Two of every tool | Two connectors to the same server | Disable one. |
| The assistant cites an id that does not exist | It answered from memory | Ask it to confirm the id with a tool; add the skill. |
| The first question is slow | The server is loading a new release of the standard | One-off per release. |
| "outputPath does not apply on this connection" | You are on the hosted service, where exports come back as links | Not an error. Use the link. |
Security Assessment Advisor
Ask an AI assistant what the ASD ISM, the ASD Essentials for Enterprise IT and OWASP ASVS actually say, scope and run an assessment, and export the paperwork, with every answer taken from the published standard.
Look up a control
Ask what a control, action or requirement says, which ones apply to a topic, what a baseline or level requires, and what changed between releases.