Results for “controls”

Implements HIPAA Security Rule technical safeguards under 45 CFR §164.312 for electronic protected health information. Covers access controls with unique user identification, emergency access procedures, automatic logoff, encryption, audit controls, integrity controls, and transmission security. Keywords: HIPAA Security Rule, ePHI, access controls, encryption, audit controls, technical safeguards.

The English summary is being prepared. Showing the original description.

Produces a draft controls and gap pack from a requirement, regulation, standard or policy and the organisation's control descriptions: obligations broken out of the source text, the controls that appear to address each, apparent coverage, gaps, questions for control owners and actions to assess. Never concludes compliance or that a control is effective; owners and audit assess. Use when the user asks to "map this regulation to our controls", "run a controls gap analysis", "break this standard into obligations" or "where is our control coverage thin". Do not use for comparing a policy document against a standard, use policy-gap-review instead; to draft evidence requests from the mapped controls, use control-evidence-request-pack. Drafts for human review; never approves, authorises or signs off.

The English summary is being prepared. Showing the original description.

Add mouse, touch, and keyboard interaction to Three.js scenes. Implement object picking, camera navigation, dragging, and transform handles, with examples for selection feedback, coordinate conversion, and limiting the cost of interaction checks.

• Select 3D objects with clicks or touch
• Add camera rotation and zoom controls
• Drag, rotate, and scale objects

Build a single HTML file with controls, an instant preview, and a copyable prompt. Use it to explore designs, data queries, concepts, or reviews visually, then turn selected settings into clear instructions for an agent.

• Explore colors, typography, and spacing visually
• Build data queries with interactive controls
• Review documents with approval and comment controls

Review an AI agent codebase against ten OWASP ASI security risk areas. Examine tool permissions, input validation, identity checks, audit logs, and other controls, then summarize coverage, gaps, and recommended improvements in a report.

• Reviewing agent security before production deployment
• Mapping existing controls to ten security risk areas
• Preparing findings for a security review or audit

Build Storybook page stories for SigNoz by mapping API requests, display states, and URL parameters. Use msw mock responses, which simulate API replies, and controls to inspect loading, errors, permissions, and other page states.

• Creating Storybook stories for SigNoz pages
• Switching between loading, empty, and error states
• Checking how permissions affect buttons and controls

Plan ISO 27001 information security audits, review evidence that security controls work, and document findings. The skill also helps classify failures, track corrective actions, and prepare documentation for certification audits.

• Planning an annual internal audit
• Reviewing evidence for Annex A controls
• Documenting findings and corrective actions

Expert SWIFT Customer Security Programme (CSP) advisor covering the Customer Security Controls Framework (CSCF v2026). Use this skill whenever a user asks about SWIFT CSP, CSCF controls, SWIFT security attestation, KYC-SA portal, SWIFT architecture types (A1/A2/A3/A4/B), mandatory vs advisory controls, independent assessment, SWIFT secure zone, secure flow zone, MFA for operators, SWIFT messaging security, payment fraud prevention on SWIFT, gap analysis for CSCF, or compliance with SWIFT's 32 controls (26 mandatory, 6 advisory in v2026) across the three objectives: Secure Your Environment, Know and Limit Access, Detect and Respond. Control 2.4 (Back-Office Data Flow Security) is now mandatory in v2026. v2026 attestation window is July 1– December 31, 2026. Trigger for any SWIFT CSP or CSCF compliance question.

The English summary is being prepared. Showing the original description.

Expert CIS Controls v8 (CIS Top 18) advisor — implementation group scoping (IG1/IG2/IG3), control gap assessments, safeguard-level guidance, asset inventory, software inventory, data protection, secure configuration, account management, access control, continuous vulnerability management, audit log management, email and web browser protections, malware defenses, network infrastructure management, network monitoring and defense, application software security, incident response, penetration testing, and CIS Controls mapping to NIST CSF, ISO 27001, SOC 2, and CMMC. Use for any question about CIS Controls, CIS Benchmarks, Implementation Groups, or prioritized cyber hygiene for any organization size.

The English summary is being prepared. Showing the original description.

Expert SWIFT Customer Security Programme (CSP) advisor covering the Customer Security Controls Framework (CSCF v2026). Use this skill whenever a user asks about SWIFT CSP, CSCF controls, SWIFT security attestation, KYC-SA portal, SWIFT architecture types (A1/A2/A3/A4/B), mandatory vs advisory controls, independent assessment, SWIFT secure zone, secure flow zone, MFA for operators, SWIFT messaging security, payment fraud prevention on SWIFT, gap analysis for CSCF, or compliance with SWIFT's 32 controls (25 mandatory, 7 advisory in v2026) across the three objectives: Secure Your Environment, Know and Limit Access, Detect and Respond. Control 2.4 (Back-Office Data Flow Security) is now mandatory in v2026. v2026 attestation window is July 1– December 31, 2026. Trigger for any SWIFT CSP or CSCF compliance question.

The English summary is being prepared. Showing the original description.

Expert CIS Controls v8 (CIS Top 18) advisor — implementation group scoping (IG1/IG2/IG3), control gap assessments, safeguard-level guidance, asset inventory, software inventory, data protection, secure configuration, account management, access control, continuous vulnerability management, audit log management, email and web browser protections, malware defenses, network infrastructure management, network monitoring and defense, application software security, incident response, penetration testing, and CIS Controls mapping to NIST CSF, ISO 27001, SOC 2, and CMMC. Use for any question about CIS Controls, CIS Benchmarks, Implementation Groups, or prioritized cyber hygiene for any organization size.

The English summary is being prepared. Showing the original description.

Internal legal controls review — approval workflows, contract lifecycle, access to sensitive docs. Use when asked to "audit our controls", "review approval workflows", or "who can access sensitive contracts".

The English summary is being prepared. Showing the original description.

Manage continuously running or cloud-hosted agents with lifecycle controls, logs, metrics, restricted permissions, and emergency stops. It guides incident response, staged deployments, rollbacks, and tracking success rates and cost per successful task.

• Define operating controls for continuously running agents
• Plan incident response when failures increase
• Set deployment and rollback procedures

Build an HTML presentation for a public-transit funding proposal, covering ridership needs, the plan, risk controls, and the requested decision. The template uses bold poster-style colors and typography for city councils and public boards.

• Preparing a public-transit funding proposal
• Explaining ridership needs to a city council
• Presenting a plan with risk controls

Builds an HTML presentation for enterprise AI adoption decisions, using a dark purple gradient template. It organizes local-first agent workflows, risk controls, return on investment, and rollout plans for leadership, IT, and security audiences.

• Explaining an AI adoption proposal to leadership
• Presenting risk controls to IT and security teams
• Organizing return on investment and rollout plans

Build 3D elements and interactive browser experiences with Three.js. The skill covers scene setup, materials that define surface appearance, user controls, and post-processing, which adds visual effects after rendering. The full workflow requires the upstream skill bundle.

• Creating 3D elements for the browser
• Building interactive 3D experiences
• Working on materials and user controls

Review custom elements and Web Components for missing screen reader information, keyboard controls, focus handling, and HTML form integration. Get concrete fixes and identify cases where a native HTML control could serve the same purpose.

• Reviewing custom controls for screen reader support
• Checking keyboard navigation in menus and listboxes
• Connecting custom inputs to HTML forms

Inspect web pages for automatically playing audio and video, then remove autoplay or adjust required playback with muted defaults and accessible pause controls. Review keyboard access so users can stop media promptly.

• Review audio and video autoplay on page load
• Add muted playback and pause controls
• Check keyboard access to media controls

Add controls for adjusting a design’s colors, layout, feature settings, or headline text. Use specified values or let the agent choose a few high-impact ones, keeping the Tweaks panel compact and hidden when disabled.

• Add controls for adjusting key colors
• Make layout variants selectable
• Add a control for changing headline text

Match identified security threats with controls that prevent, detect, or help recover from attacks. Use the mappings to find coverage gaps, prioritize security spending, and create remediation plans with multiple layers of protection.

• Prioritizing security investments
• Creating a security remediation roadmap
• Checking gaps in existing security controls

Plan GDPR data handling for systems processing EU personal data. Review consent, requests from people to access or delete their data, collection limits, retention, encryption, and access controls as part of system design and compliance reviews.

• Designing systems that process EU personal data
• Reviewing consent forms and purpose-specific choices
• Organizing responses to data access and deletion requests

Add controls to AI agents that use APIs, databases, and files. Use Python patterns for tool permissions, approval requirements, call limits, suspicious input checks, audit logs, and trust scores that guide delegation between agents.

• Restrict which tools an agent can call
• Check suspicious inputs before execution
• Require human approval for sensitive operations

Map intrusion evidence to the seven stages of the Lockheed Martin Cyber Kill Chain, a model of attack progression. Show where defenses worked or missed activity, and recommend prioritized controls that could interrupt attacks earlier.

• Mapping attack progression after an incident
• Finding detection gaps at each attack stage
• Planning layered defenses to stop attacks earlier

Create fillable Word forms with text fields, date controls, dropdowns, and clickable checkboxes. Protect static document content while leaving designated fields editable, or prepare mail-merge placeholders for templates that receive data later.

• Creating protected employee onboarding forms
• Building surveys with dropdowns and checkboxes
• Preparing contract templates with editable fields