Maintain security, compliance, and control of VMware regulated workloads in the world’s first public cloud for financial services.

Financial institutions and regulated industries undergoing digital transformation and hybrid cloud adoption face the unique challenges of protecting an ever-increasing attack surface and maintaining compliance with industry and regulatory requirements. To protect their businesses, enterprises need continuous visibility into workloads and must maintain a “full-stack” understanding of their workload vulnerabilities and configuration issues at the infrastructure, platform, and application level.

In November 2019, IBM announced it had designed a public cloud for financial services built on IBM Cloud. IBM Cloud for Financial Services is the only public cloud platform with the framework in place to support regulatory workloads with automated security and industry-leading encryption services.

A secure, automated solution for financial services VMware customers

IBM Cloud for VMware Regulated Workloads is part of the IBM Cloud for Financial Services solution set and utilizes its policy framework, which deploys a shared-responsibility model for implementing controls. It is designed to enable financial institutions and their ecosystem partners to confidently host apps and workloads in the cloud and be able to demonstrate regulatory compliance significantly faster and more efficiently than they are today. In fact, the policy framework is designed to demonstrate regulatory compliance on an ongoing basis, rather than every few months.

With IBM Cloud for VMware Regulated Workloads, clients can do the following:

  • More-effectively implement and govern security controls in the cloud.
  • Ensure auditing of all cloud administration.
  • Help protect business critical data assets.
  • Prioritize meeting IT compliance for various national or industrial entities.

Enhancing VMware vCenter Server on IBM Cloud for regulated workloads

IBM Cloud for VMware Regulated Workloads is a secure, automated reference architecture that enhances VMware vCenter Server on IBM Cloud to deliver a security-rich, high-performance platform for VMware workloads in regulated industries.

The reference architecture is a prescriptive solution and is comprised of three dedicated and isolated, purpose-built layers with a set of services included in the management plane. IBM Cloud for VMware Regulated Workloads is ideal for regulated industries, inclusive of banking and financial services. This solution is available in nearly 35 global data centers and has additional add-on services available, like Veeam and Zerto services for business continuity and disaster recovery.

Key attributes of IBM Cloud for VMware Regulated Workloads


  • Separate management control and monitoring plane
  • Separate edge cluster and gateway management with isolation from public internet
  • Network management to isolate software-defined networking (SDN) control plane from workload clusters

Access restrictions

  • Identity and access management (IAM)
  • Role-based administration and user access


  • Unified security and network policies across management stack and workload clusters for both virtual machines (VMs) and containers


  • Integrated key control with granular encryption
  • Key management options like bring your own key (BYOK) and keep your own key (KYOK) encryption services
  • Highest level encryption key protection with FIPS 140-2 Level 4


  • Continuous compliance management auditing
  • Monitoring and prevention

Backup and disaster recovery

  • Data and virtual machine backup
  • Disaster recovery and high availability clusters (optional)


  • Two management options to fit business needs
  • Fully customer-managed, single-tenant option with root hypervisor access control
  • IBM-managed, multi-tenant option with IBM managing the hypervisor

Get started

As clients continue to migrate and modernize their VMware workloads on IBM Cloud, especially regulated and mission critical business workloads, security of these assets is of utmost priority.

Find out more about IBM Cloud for VMware Regulated Workloads and check out how to get started.

More from Cloud

Integrating data center support: Lower costs and decrease downtime with your support strategy

3 min read - As organizations and their data centers embrace hybrid cloud deployments, they have a rapidly growing number of vendors and workloads in their IT environments. The proliferation of these vendors leads to numerous issues and challenges that overburden IT staff, impede clients’ core business innovations and development, and complicate the support and operation of these environments.  Couple that with the CIO’s priorities to improve IT environment availability, security and privacy posture, performance, and the TCO, and you now have a challenge…

3 min read

Using advanced scan settings in the IBM Cloud Security and Compliance Center

5 min read - Customers and users want the ability to schedule scans at the timing of their choice and receive alerts when issues arise, and we’re happy to make a few announcements in this area today: Scan frequency: Until recently, the IBM Cloud® Security and Compliance Center would scan resources every 24 hours, by default, on all of the attachments in an account. With this release, users can continue to run daily scans—which is the recommended option—but they also have the option for…

5 min read

Modernizing child support enforcement with IBM and AWS

7 min read - With 68% of child support enforcement (CSE) systems aging, most state agencies are currently modernizing them or preparing to modernize. More than 20% of families and children are supported by these systems, and with the current constituents of these systems becoming more consumer technology-centric, the use of antiquated technology systems is archaic and unsustainable. At this point, families expect state agencies to have a modern, efficient child support system. The following are some factors driving these states to pursue modernization:…

7 min read

IBM Cloud Databases for Elasticsearch End of Life and pricing changes

2 min read - As part of our partnership with Elastic, IBM is announcing the release of a new version of IBM Cloud Databases for Elasticsearch. We are excited to bring you an enhanced offering of our enterprise-ready, fully managed Elasticsearch. Our partnership with Elastic means that we will be able to offer more, richer functionality and world-class levels of support. The release of version 7.17 of our managed database service will include support for additional functionality, including things like Role Based Access Control…

2 min read