PCI Compliance Expert
Implements and audits PCI DSS security standards to ensure secure handling of payment card data and payment systems.
This skill provides comprehensive guidance on implementing the Payment Card Industry Data Security Standard (PCI DSS) within software applications. It assists developers in building secure payment processing flows, reducing compliance scope through tokenization, and enforcing data minimization policies. From configuring secure networks and encryption at rest to managing audit logs and preparing for Self-Assessment Questionnaires (SAQ), this skill ensures that payment systems are robust, secure, and compliant with international financial security standards.
主な機能
01Automated audit logging and role-based access control (RBAC) templates
0281 GitHub stars
03Secure tokenization and data masking for sensitive cardholder information
04Implementation patterns for the 12 core PCI DSS requirements
05Comprehensive guidance on PCI compliance levels and SAQ preparation
06Encryption standards for data at rest (AES-256-GCM) and in transit (TLS)
ユースケース
01Building a secure checkout flow that integrates with payment processors like Stripe
02Reducing PCI compliance scope by implementing server-side tokenization
03Refactoring legacy code to remove prohibited storage of sensitive data like CVV or PIN