Skill UI

This skill maps identified security threats to appropriate controls and mitigation strategies. It is essential for prioritizing security investments, building comprehensive remediation roadmaps, validating existing control coverage, and performing detailed risk treatment planning. It helps organizations design robust, defense-in-depth security architectures.

This router bundles 15 specialized compliance skills crucial for HealthTech and MedTech organizations. It provides structured guidance across major global regulations, including ISO 13485 QMS, EU MDR, FDA submissions, GDPR, and the EU AI Act. Use this when a compliance request is complex and needs to be accurately directed to a specific technical skill area (e.g., risk management, CAPA, data security).

Executes authorized, advanced attack simulations against Active Directory environments to identify critical misconfigurations, weak credentials, and exploitable trust relationships. Utilizing industry tools like BloodHound, Mimikatz, and Impacket, this process simulates complex attacks such as Kerberoasting, Golden Ticket forging, and domain compromise path analysis, helping organizations validate their security posture against real-world threats.

This comprehensive guide details how to deploy and configure AWS Security Hub across multi-account AWS Organizations. It aggregates security findings from various AWS services (GuardDuty, Inspector, Macie, etc.) to enforce continuous compliance against industry standards like CIS, PCI DSS, and NIST. Use this skill to build centralized compliance dashboards and automated remediation workflows for robust security posture management.

This skill implements the CISA Zero Trust Maturity Model (ZTMM) v2.0. It provides a structured framework to assess, gap-analyze, and roadmap the adoption of zero trust architecture across five core pillars: Identity, Devices, Networks, Applications, and Data. It guides organizations from Traditional to Optimal maturity, aiding compliance with NIST standards and federal mandates.

This comprehensive guide details the end-to-end deployment of Delinea Secret Server for robust Privileged Access Management (PAM). It provides scripts and steps for configuring the vault infrastructure, defining secret templates, and automating the discovery of privileged credentials across hybrid environments. Essential for organizations needing centralized, compliant, and automatically rotated management of shared and service accounts.

This guide details the deployment and usage of OPA Gatekeeper, a powerful Kubernetes admission controller. Gatekeeper enforces custom policies written in Rego using ConstraintTemplates and Constraints. It validates, mutates, or denies resource requests at admission time, ensuring that non-compliant workloads are blocked before scheduling. Ideal for organizations requiring robust, code-based policy enforcement to meet strict security and compliance standards.

This skill details the deployment of Privileged Access Management (PAM) for critical database systems, including Oracle, SQL Server, PostgreSQL, and MySQL. It covers essential security controls such as session proxy configuration, credential vaulting, query auditing, and enforcing least-privilege access, helping organizations meet stringent compliance and security standards.

This skill guides organizations in implementing and managing security controls required by PCI DSS 4.0.1. It covers the 12 requirements across 6 control objectives for protecting cardholder data that is stored, processed, or transmitted. Use this when scoping a Cardholder Data Environment (CDE), enhancing security architecture, or preparing for mandatory PCI compliance assessments, including customized validation and MFA implementation.

A comprehensive guide to deploying and configuring Proofpoint Email Protection as a Secure Email Gateway (SEG). This solution establishes a critical security checkpoint that uses advanced ML, sandboxing, and threat intelligence to detect and block sophisticated threats, including phishing, malware, BEC, and spam, before they reach the user inbox. Ideal for organizations strengthening their email security architecture and meeting compliance standards.

Perform comprehensive security assessments for Google Cloud Platform environments. This tool audits critical security components—including IAM policies, firewall rules, and storage permissions—against industry benchmarks like the CIS GCP Foundations Benchmark. It helps organizations establish secure baselines and ensure continuous compliance across multiple GCP projects.

This tool automates the discovery and comprehensive inventory of all privileged accounts across an enterprise infrastructure. It identifies domain administrators, local accounts, service accounts, cloud IAM roles, and application admins. It supports risk classification, enabling organizations to build accurate inventories, onboard accounts to PAM solutions, and scope necessary privileged access controls for compliance and security assessments.