Stats
Actions
Tags
'%20stop-opacity%3D'0.16'%2F%3E%3Cstop%20offset%3D'1'%20stop-color%3D'rgb(200%2C90%2C60)'%20stop-opacity%3D'0.03'%2F%3E%3C%2FlinearGradient%3E%3C%2Fdefs%3E%3Crect%20width%3D'320'%20height%3D'200'%20fill%3D'url(%23g)'%2F%3E%3Ccircle%20cx%3D'250'%20cy%3D'56'%20r%3D'92'%20fill%3D'rgb(200%2C90%2C60)'%20fill-opacity%3D'0.06'%2F%3E%3Ccircle%20cx%3D'64'%20cy%3D'172'%20r%3D'58'%20fill%3D'rgb(200%2C90%2C60)'%20fill-opacity%3D'0.05'%2F%3E%3C%2Fsvg%3E)
How this command is triggered — by the user, by Claude, or both
Slash command
/pci-dss:march-2025The summary Claude sees in its command listing — used to decide when to auto-load this command
# March 2025 Mandatory Requirements Requirements that became mandatory on March 31, 2025 (previously "future-dated"). ## Arguments - `$1` - Requirement number or category (optional) ## Critical March 2025 Requirements ### Requirement 3: Protect Stored Account Data | Req | Description | |-----|-------------| | 3.3.3 | SAD stored prior to authorization is encrypted | | 3.4.2 | Technical controls prevent copy/relocation of PAN | | 3.5.1.1 | Keyed cryptographic hashes if used for PAN storage | | 3.5.1.2 | Disk-level encryption only for removable media | ### Requirement 5: Malware Protect...
Requirements that became mandatory on March 31, 2025 (previously "future-dated").
$1 - Requirement number or category (optional)| Req | Description |
|---|---|
| 3.3.3 | SAD stored prior to authorization is encrypted |
| 3.4.2 | Technical controls prevent copy/relocation of PAN |
| 3.5.1.1 | Keyed cryptographic hashes if used for PAN storage |
| 3.5.1.2 | Disk-level encryption only for removable media |
| Req | Description |
|---|---|
| 5.3.3 | Anti-malware for removable media |
| 5.4.1 | Mechanisms detect phishing attacks |
| Req | Description |
|---|---|
| 6.4.2 | WAF for public-facing web apps |
| 6.4.3 | Payment page scripts inventoried and managed |
| Req | Description |
|---|---|
| 7.2.5 | Application/system account access reviewed |
| 7.2.5.1 | Access reviews include all access types |
| 8.4.2 | MFA for all access into CDE |
| 8.5.1 | MFA systems secured against replay |
| 8.6.1 | Interactive login for app/system accounts managed |
| 8.6.2 | Passwords/passphrases for interactive use not hardcoded |
| 8.6.3 | Passwords for app/system accounts meet complexity |
| Req | Description |
|---|---|
| 10.4.1.1 | Automated audit log review mechanisms |
| 10.4.2.1 | Targeted risk analysis for log review frequency |
| 10.7.2 | Failures of security controls detected and reported |
| 10.7.3 | Failures responded to promptly |
| Req | Description |
|---|---|
| 11.3.1.1 | Internal vulnerability scans via authenticated scanning |
| 11.3.1.2 | Internal scans performed after significant changes |
| 11.4.7 | Multi-tenant service providers support pen testing |
| 11.5.1.1 | IDS/IPS detect covert malware channels |
| 11.6.1 | Change/tamper detection on payment pages |
| Req | Description |
|---|---|
| 12.3.1 | Targeted risk analysis for each flexible requirement |
| 12.3.2 | Targeted risk analyses documented and reviewed |
/pci-dss:march-2025
/pci-dss:march-2025 8
/pci-dss:march-2025 "payment page"
npx claudepluginhub mrcodechef/claude-grc-engineering --plugin pci-dss/march-2025Lists PCI DSS requirements mandatory from March 31, 2025, grouped by category with descriptions and priority actions. Optional filter by requirement number or category.