July 17, 2020 By Michele Kersey < 1 min read

IBM Cloud again expands compliance for Infrastructure and Platform as a Service (IaaS and PaaS) offerings with the Payment Card Industry Data Security Standard (PCI DSS).

IBM Cloud Platform completes annual PCI DSS assessments using an approved Qualified Security Assessor (QSA), and the resulting Attestations of Compliance (AOCs) and Service Responsibility Matrix guides are available upon client request. Auditors review in-scope IBM Cloud Infrastructure and PaaS services for compliance under PCI DSS version 3.2.1 at Service Provider Level 1. 

Clients are responsible for the storing, processing, and transmission of their cardholder data, and may create cardholder data environments (CDEs) that can store, transmit, or process cardholder data using IBM Cloud Platform services. Clients can use the IBM Cloud AOCs and SRM guides when seeking their own PCI DSS certifications. It is the responsibility of the client to document and operate CDEs and applications built using IBM Cloud Platform services in a PCI DSS-compliant manner. 

Adding to the compliant IBM Cloud Infrastructure and PaaS services previously assessed under the PCI DSS are the following:

Learn more

A full list of PCI DSS-ready IBM Cloud Platform services and options to request a PCI DSS AOC and SRM guide can be found at the IBM Cloud compliance page.

More from Cloud

IBM Cloud Virtual Servers and Intel launch new custom cloud sandbox

4 min read - A new sandbox that use IBM Cloud Virtual Servers for VPC invites customers into a nonproduction environment to test the performance of 2nd Gen and 4th Gen Intel® Xeon® processors across various applications. Addressing performance concerns in a test environment Performance testing is crucial to understanding the efficiency of complex applications inside your cloud hosting environment. Yes, even in managed enterprise environments like IBM Cloud®. Although we can deliver the latest hardware and software across global data centers designed for…

10 industries that use distributed computing

6 min read - Distributed computing is a process that uses numerous computing resources in different operating locations to mimic the processes of a single computer. Distributed computing assembles different computers, servers and computer networks to accomplish computing tasks of widely varying sizes and purposes. Distributed computing even works in the cloud. And while it’s true that distributed cloud computing and cloud computing are essentially the same in theory, in practice, they differ in their global reach, with distributed cloud computing able to extend…

How a US bank modernized its mainframe applications with IBM Consulting and Microsoft Azure

9 min read - As organizations strive to stay ahead of the curve in today's fast-paced digital landscape, mainframe application modernization has emerged as a critical component of any digital transformation strategy. In this blog, we'll discuss the example of a US bank which embarked on a journey to modernize its mainframe applications. This strategic project has helped it to transform into a more modern, flexible and agile business. In looking at the ways in which it approached the problem, you’ll gain insights into…

IBM Newsletters

Get our newsletters and topic updates that deliver the latest thought leadership and insights on emerging trends.
Subscribe now More newsletters