Skill UI

A comprehensive guide to implementing PCI DSS 4.0.1 requirements for organizations handling cardholder data. This skill covers the full compliance lifecycle, from defining the Cardholder Data Environment (CDE) scope and hardening network security, to implementing advanced data encryption, access controls (MFA/RBAC), and continuous monitoring mechanisms.

This tool simulates a 'risk-paranoid' interrogation, forcing comprehensive security and compliance checks before deploying any system that handles sensitive data (PII, PHI, cardholder data). It covers six critical areas: Threat Modeling (STRIDE), Blast Radius quantification, Detection capabilities (MTTD), Incident Response readiness, Regulatory compliance windows (GDPR, HIPAA), and Third-party vendor security posture. Use this gate check before major architectural changes or production releases.