qa-compliance
Compliance testing for GDPR, CCPA/CPRA, HIPAA, PCI DSS v4.0, SOC 2 and ISO/IEC 27001: control tests, audit-trail tests, and evidence collection. Scores existing tests and evidence against a framework's criteria, packages SOC 2 Type II evidence for auditors, and runs an adversarial readiness review.
/plugin install qa-compliance@testland-qaFirst time? Add the marketplace with /plugin marketplace add testland/qa
- Category
- Security & compliance
- Version
v1.4.5- Contents
- 6 skills
- Part of
- qa-role-security
Skills6
audit-trail-test-authorUse when audit logs need tests for HIPAA, PCI DSS, SOC 2, GDPR or another framework: the required events (logins, privilege changes, data access, admin actions, exports), structured log format, tamper-evident hash chains, immutability and retention, and replaying logs for forensics.skillcompliance-coverage-scoringUse when a named framework (GDPR, CCPA, SOC 2, HIPAA, PCI DSS, ISO 27001) and existing evidence need a per-criterion readiness score before an audit, assessor visit or regulator inquiry.skillgdpr-test-patternsUse when a product processing EU or California personal data needs GDPR or CCPA/CPRA readiness tests: data subject access, erasure, portability and objection, consent and withdrawal, data residency, 72-hour breach notice, data minimization, and CCPA rights including Global Privacy Control.skillhipaa-test-patternsUse when a product handling protected health information (PHI) needs HIPAA Security Rule readiness tests: administrative, physical and technical safeguards (access control, audit logs, integrity, transmission security), PHI in fixtures, minimum-necessary access and BAA scope.skillpci-dss-control-test-authorUse whenever tests must prove payment card handling meets PCI DSS v4.0: no stored or logged CVV, full card number (PAN), track data or PIN, card data only over strong TLS, cardholder data environment boundaries and segmentation, key management, SAQ level, scope reduction with hosted fields.skillsoc2-evidence-collectorUse when preparing for a SOC 2 Type II audit or any audit that needs evidence packages from automated tests: per-criterion artifacts (CC1-CC9 and optional categories), collection from CI, audit and access logs and change records, Vanta, Drata or Secureframe formats, and observation-period sampling.skill
About qa-compliance
Compliance test patterns + readiness scoring for regulated industries. Six skills: per-framework reference + workflow catalogs (GDPR with the CCPA/CPRA analogue in references, SOC 2 Type II collection + cross-framework evidence packaging, HIPAA, PCI DSS v4.0), an audit-trail-test-author build-an-X for the universal logging requirement, and a coverage-scoring skill that scores evidence against any framework's criteria - ISO/IEC 27001:2022 Annex A patterns included - with an adversarial readiness-review mode.
Covers the regulated-industry gap (healthcare, finance, EU operations, federal contractors).