// engine/compliance-test-generator/frameworks/pci-dss.ts — SPEC-390: PCI-DSS control definitions
export const PCI_DSS_CONTROLS = [
    {
        id: 'PCI-3.4',
        framework: 'pci-dss',
        title: 'Cardholder Data Encryption',
        description: 'Primary account numbers must be rendered unreadable',
        keywords: ['encrypt', 'card', 'pan', 'cardholder', 'payment', 'token', 'mask'],
    },
    {
        id: 'PCI-6.3',
        framework: 'pci-dss',
        title: 'Secure Coding Practices',
        description: 'Software developed according to secure coding guidelines',
        keywords: [
            'injection',
            'xss',
            'csrf',
            'input validation',
            'sanitize',
            'secure coding',
            'vulnerability',
        ],
    },
    {
        id: 'PCI-8.2',
        framework: 'pci-dss',
        title: 'User Authentication Management',
        description: 'Proper identification and authentication for users',
        keywords: [
            'password',
            'mfa',
            'multi-factor',
            'credential',
            'user account',
            'identity',
            'session',
        ],
    },
    {
        id: 'PCI-10.1',
        framework: 'pci-dss',
        title: 'Audit Logging',
        description: 'Link all access to system components to individual users',
        keywords: ['audit', 'log', 'trail', 'trace', 'event', 'record', 'history'],
    },
    {
        id: 'PCI-12.1',
        framework: 'pci-dss',
        title: 'Security Policy',
        description: 'Establish, publish, maintain, and disseminate a security policy',
        keywords: ['policy', 'security policy', 'compliance', 'procedure', 'standard', 'guideline'],
    },
];
//# sourceMappingURL=pci-dss.js.map