4 ms·
Indeed. But cloud can provide a faster and easier path to getting there, at least IME.
by paulryanrogers 1y ago
Indeed. But cloud can provide a faster and easier path to getting there, at least IME.
- dijit 1y agoNo? Cloud gives you direct access to compute at the click of a button (provided you have quota). The ISO/PCI cert requirements are not accelerated by their use, only the initial deployment speed of your solution. If at all anything the latest I've seen is that there are more checks in cloud for various areas where you can accidentally leak data through poor permissions or because someone could enable those permissions. For example in Google Cloud there was an additional requisite that I monitor any admin users oauth2 application accesses for their google accounts; this was not a requirement for on-prem.
- paulryanrogers 1y agoYes? At least in my experience as a service provider. With cloud I can easily plug in a compliance vendor like Drata, add connectors to my other vendors, and get a significant amount of evidence quickly. Bespoke on-prem solutions bring plenty of their own challenges that are just N/A or handled by cloud vendors, like physical security. Maybe as a payment processor things shake out differently. Though having read far more of PCI v4 than I'd like, I doubt it.