npx claudepluginhub grcengclub/claude-grc-engineering --plugin pci-dssThis skill is limited to using the following tools:
Deep expertise in Payment Card Industry Data Security Standard v4.0.1.
Provides UI/UX resources: 50+ styles, color palettes, font pairings, guidelines, charts for web/mobile across React, Next.js, Vue, Svelte, Tailwind, React Native, Flutter. Aids planning, building, reviewing interfaces.
Fetches up-to-date documentation from Context7 for libraries and frameworks like React, Next.js, Prisma. Use for setup questions, API references, and code examples.
Calculates TAM/SAM/SOM using top-down, bottom-up, and value theory methodologies for market sizing, revenue estimation, and startup validation.
Deep expertise in Payment Card Industry Data Security Standard v4.0.1.
| Req | Title | Focus |
|---|---|---|
| 1 | Network Security Controls | Firewalls, segmentation, NSCs |
| 2 | Secure Configurations | Hardening, inventory, defaults |
| 3 | Protect Stored Data | Encryption, PAN, SAD, retention |
| 4 | Cryptography in Transit | TLS, secure channels |
| 5 | Malware Protection | Anti-malware, phishing |
| 6 | Secure Development | SDLC, patches, web apps |
| 7 | Access Restriction | Need-to-know, RBAC |
| 8 | User Authentication | MFA, passwords, accounts |
| 9 | Physical Security | Facility, media, visitors |
| 10 | Logging & Monitoring | Audit trails, SIEM, review |
| 11 | Security Testing | Scans, pen tests, IDS/IPS |
| 12 | Security Policies | Policies, training, IR |
ROC (Report on Compliance):
SAQ (Self-Assessment Questionnaire):
AOC (Attestation of Compliance):
Key concepts:
Critical new requirements: