security-planning

Bộ tham chiếu lập kế hoạch bảo mật cho các nhóm vận hành, phân tích STRIDE, ánh xạ tiêu chuẩn, các họ kiểm soát NIST và khung xương sống cho backlog.

Security Planning

This skill packages the durable security-planning reference material used by the Security Planner: operational bucket guidance, STRIDE analysis patterns, standards cross-references, NIST control-family references, and security-specific backlog formats.

When to use

Use this skill when you need to:

Classify application components into the operational security buckets used during planning.
Evaluate threats with STRIDE-based analysis, including AI-specific extensions when raiEnabled is true.
Map bucket findings to standards references and control families without re-embedding long standard tables.
Derive security-specific backlog priorities and RAI work item categories for Phase 5 handoff.

Skill layout

Load the reference file that matches the phase or topic you need.

Reference	Topic
references/00-index.md	Navigation catalog and consolidated attribution
references/operational-buckets.md	Operational bucket definitions, GS overlay, and classification guidance
references/stride-model.md	STRIDE methodology, AI extensions, risk matrix, and data-flow analysis
references/standards-cross-reference.md	Bucket-to-standards mapping table and component mapping output format
references/nist-control-families.md	NIST 800-53 priority tiers and NIST AI RMF subcategory mappings
references/backlog-formats.md	Security-specific prioritization and RAI work item categories

Attribution

The durable reference content in this skill is organized by reference file and summarized in references/00-index.md. See that index for the consolidated attribution and delegation notes.