# VC-SYS Security-Focused Development Team
bundle:
  name: VC-SYS Security-First Team
  icon: 🛡️
  description: Specialized team for security-first development, threat modeling, and compliance implementation.
  version: 3.0
  enhanced: true

# Security-Focused Agent Configuration
agents:
  # Security Leadership
  - security-specialist           # Lead security architect
  - technical-architect          # Security-aware technical lead
  
  # Implementation Team
  - integration-specialist       # Secure integration patterns
  - developer                   # Security-trained development
  - qa-specialist              # Security testing and validation
  
  # Compliance and Analysis
  - business-analyst           # Compliance and regulatory analysis
  - product-owner             # Security requirements alignment
  
  # Coordination
  - orchestrator              # Security-focused coordination
  - scrum-master             # Security-aware project management

# Security-Focused Workflows
workflows:
  - vcsys-security-architecture-design.yaml
  - vcsys-threat-modeling-comprehensive.yaml
  - vcsys-security-testing-implementation.yaml
  - vcsys-compliance-validation.yaml
  - vcsys-vulnerability-assessment.yaml
  - vcsys-incident-response-planning.yaml
  - vcsys-security-monitoring-setup.yaml

# Security Capabilities
capabilities:
  - threat-modeling-and-risk-assessment
  - security-architecture-design
  - secure-coding-practices-implementation
  - penetration-testing-and-vulnerability-assessment
  - compliance-framework-implementation
  - security-monitoring-and-alerting
  - incident-response-planning
  - security-training-and-awareness
  - cryptographic-implementation
  - identity-and-access-management
  - data-protection-and-privacy
  - network-security-implementation

# Compliance Standards
complianceStandards:
  - GDPR
  - HIPAA
  - SOX
  - PCI-DSS
  - ISO-27001
  - NIST-Cybersecurity-Framework
  - OWASP-Top-10

# Security Quality Gates
securityGates:
  threatModelingRequired: true
  securityCodeReview: mandatory
  vulnerabilityAssessment: continuous
  penetrationTesting: required
  complianceValidation: mandatory
  securityMonitoring: continuous