How does it help with GDPR?

It provides frameworks for data residency, right-to-erasure workflows, consent management, and Privacy by Design principles.

Can this skill help with SOC 2 Type II audits?

Yes, it provides specific requirements for encryption, access logging, change management, and evidence collection needed for SOC 2 Type II readiness.

Does it support HIPAA compliance for healthcare data?

Absolutely. It covers mandatory protections like Business Associate Agreements (BAA), PHI encryption at rest/transit, and network isolation for healthcare systems.

Is it specific to any cloud provider?

While it focuses on universal regulatory standards, it includes specific implementation guidance for AWS, Azure, and Google Cloud Platform (GCP).

Can it detect security misconfigurations?

Yes, it identifies common risks like public S3 buckets, overly permissive IAM roles, and hardcoded secrets, providing remediation steps.

Compliance Architecture Expert

Name: Compliance Architecture Expert
Author: Activer007

byActiver007

セキュリティとテスト

Designs enterprise-grade, compliant cloud architectures for SOC 2, HIPAA, GDPR, and PCI-DSS standards.

概要

The Compliance Architecture Expert skill provides specialized guidance for building secure and regulatory-compliant systems within cloud and serverless environments. It helps developers and architects implement mission-critical security controls, including SOC 2 Type II audit readiness, HIPAA healthcare data protections, GDPR privacy-by-design, and PCI-DSS payment card security. By offering automated checklists, infrastructure-as-code patterns, and validation for cloud deployments, this skill ensures your application architecture meets strict legal and industry standards while maintaining operational efficiency.

主な機能

0 GitHub stars
Detailed compliance checklists for SOC 2, HIPAA, GDPR, and PCI-DSS
Security configuration validation for serverless and cloud resources
Audit preparation guidance and evidence collection patterns
Best practices for data residency, encryption, and IAM least privilege
Implementation patterns for BAA, DPIA, and data protection agreements

ユースケース

Designing a HIPAA-compliant backend for a healthcare SaaS application
Preparing an AWS serverless architecture for a SOC 2 Type II audit
Implementing GDPR-compliant data residency and deletion workflows

概要

主な機能

0 GitHub stars
Detailed compliance checklists for SOC 2, HIPAA, GDPR, and PCI-DSS
Security configuration validation for serverless and cloud resources
Audit preparation guidance and evidence collection patterns
Best practices for data residency, encryption, and IAM least privilege
Implementation patterns for BAA, DPIA, and data protection agreements

ユースケース

Designing a HIPAA-compliant backend for a healthcare SaaS application
Preparing an AWS serverless architecture for a SOC 2 Type II audit
Implementing GDPR-compliant data residency and deletion workflows