{
  "id": "lib-process:security-compliance--pci-dss-compliance",
  "_kind": "LibraryProcess",
  "_file": "generated-library/processes.yaml",
  "_cluster": "generated-library",
  "attributes": {
    "displayName": "specializations/security-compliance/pci-dss-compliance",
    "description": "PCI DSS Compliance Assessment - Comprehensive Payment Card Industry Data Security Standard compliance\nvalidation covering all 12 requirements, cardholder data environment (CDE) identification, network segmentation,\nASV scanning, penetration testing, and QSA audit preparation. Implements controls for protecting cardholder data\nincluding encryption, access control, monitoring, and vulnerability management for PCI DSS v4.0.",
    "libraryPath": "library/specializations/security-compliance/pci-dss-compliance.js",
    "specialization": "security-compliance",
    "references": [
      "- PCI DSS v4.0: https://www.pcisecuritystandards.org/document_library/",
      "- PCI SSC Official Site: https://www.pcisecuritystandards.org/",
      "- PCI DSS Requirements: https://www.pcisecuritystandards.org/standards/pci-dss/",
      "- SAQ Documentation: https://www.pcisecuritystandards.org/document_library?category=saqs",
      "- ASV Program Guide: https://www.pcisecuritystandards.org/document_library?category=asv",
      "- Penetration Testing Guidance: https://www.pcisecuritystandards.org/document_library?document=penetration-testing-guidance",
      "- Network Segmentation: https://www.pcisecuritystandards.org/document_library?document=guidance-pci-dss-scoping-and-network-segmentation",
      "- Tokenization Guidelines: https://www.pcisecuritystandards.org/document_library?document=tokenization-guidelines"
    ],
    "example": "const result = await orchestrate('specializations/security-compliance/pci-dss-compliance', {\n  projectName: 'E-Commerce Platform',\n  merchantLevel: 'level-1', // 'level-1', 'level-2', 'level-3', 'level-4'\n  cdeScope: ['payment-api', 'database', 'web-app'],\n  assessmentType: 'saq-d', // 'saq-a', 'saq-a-ep', 'saq-b', 'saq-c', 'saq-d', 'qsa-audit'\n  version: 'v4.0', // 'v3.2.1', 'v4.0'\n  asvScan: true,\n  penetrationTest: true,\n  networkSegmentation: true,\n  quarterlyScans: true,\n  automatedRemediation: false,\n  generateAoc: true, // Attestation of Compliance\n  generateRoc: false // Report on Compliance (for Level 1)\n});",
    "usesAgents": [
      "general-purpose"
    ],
    "usesSkills": [
      "pci-dss-compliance-automator"
    ]
  },
  "outgoingEdges": [
    {
      "from": "lib-process:security-compliance--pci-dss-compliance",
      "to": "domain:security",
      "kind": "lib_applies_to_domain",
      "attributes": {
        "weight": 1
      }
    },
    {
      "from": "lib-process:security-compliance--pci-dss-compliance",
      "to": "role:security-engineer",
      "kind": "lib_involves_role",
      "attributes": {
        "weight": 1
      }
    },
    {
      "from": "lib-process:security-compliance--pci-dss-compliance",
      "to": "workflow:vulnerability-management",
      "kind": "lib_implements_workflow",
      "attributes": {
        "weight": 1
      }
    },
    {
      "from": "lib-process:security-compliance--pci-dss-compliance",
      "to": "specialization:security-compliance",
      "kind": "lib_belongs_to_specialization",
      "attributes": {
        "weight": 0.9
      }
    },
    {
      "from": "lib-process:security-compliance--pci-dss-compliance",
      "to": "lib-skill:security-compliance--pci-dss-compliance-automator",
      "kind": "uses_skill",
      "attributes": {
        "weight": 0.8
      }
    }
  ],
  "incomingEdges": []
}