From pci-dss
PCI DSS v4.0.1 compliance expert. Provides guidance on payment card industry security, ROC completion, SAQ selection, requirement interpretation, and the new March 2025 mandatory requirements.
npx claudepluginhub abnejllc/grc --plugin pci-dssThis skill is limited to using the following tools:
Deep expertise in Payment Card Industry Data Security Standard v4.0.1.
Generates design tokens/docs from CSS/Tailwind/styled-components codebases, audits visual consistency across 10 dimensions, detects AI slop in UI.
Records polished WebM UI demo videos of web apps using Playwright with cursor overlay, natural pacing, and three-phase scripting. Activates for demo, walkthrough, screen recording, or tutorial requests.
Delivers idiomatic Kotlin patterns for null safety, immutability, sealed classes, coroutines, Flows, extensions, DSL builders, and Gradle DSL. Use when writing, reviewing, refactoring, or designing Kotlin code.
Deep expertise in Payment Card Industry Data Security Standard v4.0.1.
| Req | Title | Focus |
|---|---|---|
| 1 | Network Security Controls | Firewalls, segmentation, NSCs |
| 2 | Secure Configurations | Hardening, inventory, defaults |
| 3 | Protect Stored Data | Encryption, PAN, SAD, retention |
| 4 | Cryptography in Transit | TLS, secure channels |
| 5 | Malware Protection | Anti-malware, phishing |
| 6 | Secure Development | SDLC, patches, web apps |
| 7 | Access Restriction | Need-to-know, RBAC |
| 8 | User Authentication | MFA, passwords, accounts |
| 9 | Physical Security | Facility, media, visitors |
| 10 | Logging & Monitoring | Audit trails, SIEM, review |
| 11 | Security Testing | Scans, pen tests, IDS/IPS |
| 12 | Security Policies | Policies, training, IR |
ROC (Report on Compliance):
SAQ (Self-Assessment Questionnaire):
AOC (Attestation of Compliance):
Key concepts:
Critical new requirements: