Skill UI

A comprehensive guide for designing and managing document control systems for ISO 13485-compliant Quality Management Systems (QMS), specifically tailored for the medical device industry. This resource covers document numbering, version control, change management workflows, approval processes, and ensures compliance with rigorous standards like 21 CFR Part 11, including electronic signatures and audit trails.

Implements and maintains ISO 13485 QMS for medical device organizations, covering gap analysis, documentation control, internal audits, supplier qualification, and CAPA tracking to keep regulatory programs audit-ready.

A comprehensive guide for implementing ISO 14971:2019 risk management across the entire medical device lifecycle. Covers planning, hazard identification, risk analysis (FMEA, FTA), risk evaluation, risk control, and post-market surveillance. Essential for achieving regulatory compliance in medical device development.

PyLabRobot is a vendor-agnostic, pure Python SDK designed for autonomous and automated laboratory workflows. It provides a unified interface to control a wide array of laboratory equipment, including liquid handling robots (Hamilton, Opentrons, Tecan), plate readers, pumps, shakers, and incubators. Ideal for developing complex, multi-device, reproducible protocols and simulating experiments before physical execution.

AWS Verified Access is a Zero Trust Network Access (ZTNA) service that provides secure, VPN-less connectivity to corporate applications hosted in AWS. It enforces granular, conditional access control using the Cedar policy language, verifying both user identity and device security posture in real-time before granting access to specific resources. Ideal for modernizing security architecture and meeting strict compliance requirements.

This guide outlines how to implement Google Cloud Identity-Aware Proxy (IAP) to enforce zero-trust, identity-based access control across various Google Cloud services (App Engine, Cloud Run, GKE, Compute Engine). It details configuring per-request authentication, context-aware policies (like device posture and location), and programmatic access management for highly secure internal applications.

A comprehensive guide for deploying Cisco Duo Multi-Factor Authentication across diverse enterprise access points, including VPN, RDP, SSH, and web applications. This skill details advanced security practices, covering adaptive access policies, phishing-resistant authentication (WebAuthn/FIDO2), device health checks, and establishing robust identity and access management controls aligned with industry compliance standards.

A comprehensive guide to configuring secure OAuth 2.0 authorization flows, covering best practices for Authorization Code with PKCE, Client Credentials, and Device Authorization Grant. Learn how to implement mandatory security controls, manage token lifecycles, and align with OAuth 2.1 standards to build robust identity and access management systems.

This skill deploys advanced anomaly detection systems for Operational Technology (OT) and Industrial Control Systems (ICS). It builds multi-dimensional baselines by analyzing SCADA communications, network traffic (Modbus, DNP3, OPC UA), and timing patterns. It detects deviations, rogue devices, and potential intrusions by profiling normal behavior, complementing signature-based IDS.

This guide details how to implement Google's BeyondCorp Zero Trust Access Model. It moves beyond traditional network perimeters by enforcing identity-aware access controls using IAP, Access Context Manager, and device posture verification. Ideal for securing remote and hybrid workforces migrating to Google Cloud.

This skill guides the progressive adoption of the CISA Zero Trust Maturity Model (ZTMM) v2.0. It provides a comprehensive, structured roadmap for assessing and improving security architecture across five critical pillars: Identity, Devices, Networks, Applications, and Data. Learn to perform gap analysis and implement advanced controls needed to achieve optimal zero trust compliance.

This skill provides comprehensive guidance on implementing Conditional Access policies within Microsoft Entra ID (Azure AD). It covers configuring zero trust access control, integrating signal-based policies, enforcing device compliance, and utilizing risk-based authentication. This is crucial for establishing robust security architectures aligned with NIST standards and regulatory compliance requirements.