Skill UI

Learn how to implement and manage Google Cloud Platform (GCP) Organization Policy constraints using gcloud and Terraform. This guide covers enforcing critical security guardrails at the organization, folder, or project level, such as restricting external IP addresses, defining allowed resource locations, and disabling sensitive services. It is essential for achieving strong compliance and hardening cloud security architecture.

This skill covers the implementation of technical and organizational measures required by the GDPR (EU 2016/679). It guides users through establishing security controls, performing Data Protection Impact Assessments (DPIAs), managing data subject rights (e.g., erasure, access), handling breach notifications, and ensuring compliance for cross-border data transfers.

A comprehensive guide to implementing advanced security measures in Google Workspace. This covers enhanced pre-delivery scanning, anti-spoofing detection, attachment protection, and setting up Enhanced Safe Browsing to safeguard against sophisticated phishing and malware attacks within organizational emails. Ideal for security administrators and compliance teams.

This comprehensive guide details how to implement Single Sign-On (SSO) for Google Workspace using the SAML 2.0 protocol. It guides administrators through connecting a third-party Identity Provider (IdP) like Okta or Azure AD to centralize authentication, enforce MFA, and manage access policies across the organization.

This guide details building ransomware-resistant, immutable backup infrastructure using the restic tool and S3 Object Lock (WORM). It automates backup creation, enforces data integrity through checksum checks, and mandates retention periods, helping organizations adhere to the advanced 3-2-1-1-0 backup strategy.

A comprehensive guide to implementing Mimecast Targeted Threat Protection (TTP). This suite defends against sophisticated phishing, spearphishing, and Business Email Compromise (BEC) attacks by integrating four core modules: URL Protect, Attachment Protect, Impersonation Protect, and Internal Email Protect. Follow the detailed workflow to secure your organizational communications and meet compliance standards.

This guide details the deployment and usage of OPA Gatekeeper, a powerful Kubernetes admission controller. Gatekeeper enforces custom policies written in Rego using ConstraintTemplates and Constraints. It validates, mutates, or denies resource requests at admission time, ensuring that non-compliant workloads are blocked before scheduling. Ideal for organizations requiring robust, code-based policy enforcement to meet strict security and compliance standards.

This skill details the deployment of Privileged Access Management (PAM) for critical database systems, including Oracle, SQL Server, PostgreSQL, and MySQL. It covers essential security controls such as session proxy configuration, credential vaulting, query auditing, and enforcing least-privilege access, helping organizations meet stringent compliance and security standards.

This skill guides organizations in implementing and managing security controls required by PCI DSS 4.0.1. It covers the 12 requirements across 6 control objectives for protecting cardholder data that is stored, processed, or transmitted. Use this when scoping a Cardholder Data Environment (CDE), enhancing security architecture, or preparing for mandatory PCI compliance assessments, including customized validation and MFA implementation.

A comprehensive guide to deploying and configuring Proofpoint Email Protection as a Secure Email Gateway (SEG). This solution establishes a critical security checkpoint that uses advanced ML, sandboxing, and threat intelligence to detect and block sophisticated threats, including phishing, malware, BEC, and spam, before they reach the user inbox. Ideal for organizations strengthening their email security architecture and meeting compliance standards.

This skill guides the integration of gitleaks and trufflehog into CI/CD pipelines. It automates the detection of hardcoded secrets, such as API keys, passwords, and tokens, preventing their accidental deployment. By integrating scans as a mandatory pre-deployment gate, organizations enforce strong security policies and maintain compliance.

This skill guides the process of designing, implementing, and validating advanced security detection use cases for Security Information and Event Management (SIEM) platforms like Splunk, Elastic, and Microsoft Sentinel. It focuses on mapping organizational threat profiles to the MITRE ATT&CK framework to build formal, high-fidelity detection rules, thereby strengthening Security Operations Center (SOC) coverage and reducing blind spots.