pci-dss-compliance-automator

# PCI DSS Compliance Automator Skill ## Purpose Automate Payment Card Industry Data Security Standard (PCI DSS) compliance activities including cardholder data environment scoping, SAQ questionnaire automation, ASV scan orchestration, control validation, and compliance reporting. ## Capabilities ### Cardholder Data Environment (CDE) Scoping - Identify systems storing, processing, or transmitting cardholder data - Map cardholder data flows - Document network segmentation - Identify connected and security-impacting systems - Generate CDE scope documentation ### Self-Assessment Questionnaire (SAQ) Automation - Determine appropriate SAQ type (A, A-EP, B, B-IP, C, C-VT, D, P2PE) - Auto-populate questionnaire responses from evidence - Track compensating controls - Generate SAQ submissions ### ASV Scan Orchestration - Schedule and manage ASV vulnerability scans - Track quarterly scan requirements - Manage scan disputes and remediation - Aggregate scan results across environments - Monitor passing scan status ### Control Validation by Requirement - Requirement 1: Network security controls - Requirement 2: Secure configurations - Requirement 3: Protect stored account data - Requirement 4: Protect data in transit - Requirement 5: Malware protection - Requirement 6: Secure systems and software - Requirement 7: Restrict access by business need - Requirement 8: User identification and authentication - Requirement 9: Physical access restrictions - Requirement 10: Logging and monitor...