rego-skill

# OPA Rego Policy for [COMPANY] Data Access Controls

## Policy Overview
- **Purpose**: Enforce strict access controls for sensitive [DATA] in the [INDUSTRY] sector.
- **Regulation**: Compliant with [SPECIFIC_REGULATION].
- **Default Rule**: Deny all access by default.

## Policy Code
```rego
package example.authz

# Default deny rule
default allow = false

# Allow access based on role and data sensitivity
allow {
  input.role == "admin"
  input.data.sensitivity <= 3
}

# Allow access for specific roles and data types
allow {
  input.role == "analyst"
  input.data.type == "financial"
}
```

## Vulnerability Testing Results
- **Potential Issue**: Overly permissive role-based access.
- **Recommendation**: Implement attribute-based access control (ABAC) for finer granularity.
- **Suggested Improvement**: Add data classification checks to ensure compliance with [SPECIFIC_REGULATION].