April 19, 2023 By Donald Kneitel
Tina Belani
2 min read

IBM Cloud VPC services have been renewed and expanded against the Payment Card Industry Data Security Standard (PCI DSS) standard (v3.2.1) for all global MZR data centers.

IBM Cloud completed the annual Payment Card Industry Data Security Standard PCI DSS assessment using an approved Qualified Security Assessor (QSA), and the resulting Attestation of Compliance (AOC) and Service Responsibility Matrix (SRM) guide is available upon client request.

Organizations looking to store, transmit or process cardholder data can use IBM Cloud services that have been assessed for PCI DSS compliance. A broad set of IBM Infrastructure as a Service (IaaS) and Platform as a Service (PaaS) offerings have also been assessed for PCI DSS, as detailed on IBM.com

Clients may leverage IBM Cloud services in a shared responsibility model to store, process and transmit cardholder data and use these services to create cardholder data environments (CDEs). Clients may request and use the IBM Cloud AOCs and SRM guides when seeking to develop these application environments and obtain their own PCI DSS certifications. It is the responsibility of the client to document and operate CDEs and applications built using IBM Cloud services in a PCI DSS-compliant manner. 

Assessed services

The QSA reviewed the in-scope IBM Virtual Private Cloud (VPC) services for compliance under PCI DSS version 3.2.1 as a Level 1 Service Provider. Adding to the compliant IBM Cloud IaaS, PaaS and VPC services previously assessed under the PCI DSS are the following:

  • IBM Cloud Backup for VPC
  • IBM Cloud Bare Metal Servers for VPC (including SAP)
  • IBM Cloud Direct Link Connect (2.0)
  • IBM Direct Link Dedicated (2.0)
  • IBM Cloud DNS Services
  • IBM Cloud Secrets Manager
  • IBM Cloud Transit Gateway
  • IBM Cloud VPN for VPC – Client-to-Site server

The previously assessed and renewed services include the following:

  • IBM Cloud Block Storage for Virtual Private Cloud
  • IBM Cloud Block Storage Snapshots for VPC
  • IBM Cloud Flow Logs for VPC
  • IBM Cloud Load Balancer for VPC
  • IBM Cloud Virtual Private Endpoint for VPC
  • IBM Cloud Virtual Private Cloud – Load Balancer for VPC: Application Load Balancer and Network Load Balancer
  • IBM Cloud Virtual Private Cloud – VPN for VPC – Site-to-Site gateway
  • IBM Cloud Virtual Server for VPC
  • IBM Cloud Virtual Server for VPC – Auto Scale for VPC
  • IBM Cloud Virtual Server for VPC – Dedicated Host for VPC

Learn more

More from Cloud

Enhance your data security posture with a no-code approach to application-level encryption

4 min read - Data is the lifeblood of every organization. As your organization’s data footprint expands across the clouds and between your own business lines to drive value, it is essential to secure data at all stages of the cloud adoption and throughout the data lifecycle. While there are different mechanisms available to encrypt data throughout its lifecycle (in transit, at rest and in use), application-level encryption (ALE) provides an additional layer of protection by encrypting data at its source. ALE can enhance…

Attention new clients: exciting financial incentives for VMware Cloud Foundation on IBM Cloud

4 min read - New client specials: Get up to 50% off when you commit to a 1- or 3-year term contract on new VCF-as-a-Service offerings, plus an additional value of up to USD 200K in credits through 30 June 2025 when you migrate your VMware workloads to IBM Cloud®.1 Low starting prices: On-demand VCF-as-a-Service deployments begin under USD 200 per month.2 The IBM Cloud benefit: See the potential for a 201%3 return on investment (ROI) over 3 years with reduced downtime, cost and…

The history of the central processing unit (CPU)

10 min read - The central processing unit (CPU) is the computer’s brain. It handles the assignment and processing of tasks, in addition to functions that make a computer run. There’s no way to overstate the importance of the CPU to computing. Virtually all computer systems contain, at the least, some type of basic CPU. Regardless of whether they’re used in personal computers (PCs), laptops, tablets, smartphones or even in supercomputers whose output is so strong it must be measured in floating-point operations per…

IBM Newsletters

Get our newsletters and topic updates that deliver the latest thought leadership and insights on emerging trends.
Subscribe now More newsletters