Cloud
April 19, 2023 By Donald Kneitel
Tina Belani
2 min read

IBM Cloud VPC services have been renewed and expanded against the Payment Card Industry Data Security Standard (PCI DSS) standard (v3.2.1) for all global MZR data centers.

IBM Cloud completed the annual Payment Card Industry Data Security Standard PCI DSS assessment using an approved Qualified Security Assessor (QSA), and the resulting Attestation of Compliance (AOC) and Service Responsibility Matrix (SRM) guide is available upon client request.

Organizations looking to store, transmit or process cardholder data can use IBM Cloud services that have been assessed for PCI DSS compliance. A broad set of IBM Infrastructure as a Service (IaaS) and Platform as a Service (PaaS) offerings have also been assessed for PCI DSS, as detailed on IBM.com. 

Clients may leverage IBM Cloud services in a shared responsibility model to store, process and transmit cardholder data and use these services to create cardholder data environments (CDEs). Clients may request and use the IBM Cloud AOCs and SRM guides when seeking to develop these application environments and obtain their own PCI DSS certifications. It is the responsibility of the client to document and operate CDEs and applications built using IBM Cloud services in a PCI DSS-compliant manner. 

Assessed services

The QSA reviewed the in-scope IBM Virtual Private Cloud (VPC) services for compliance under PCI DSS version 3.2.1 as a Level 1 Service Provider. Adding to the compliant IBM Cloud IaaS, PaaS and VPC services previously assessed under the PCI DSS are the following:

  • IBM Cloud Backup for VPC
  • IBM Cloud Bare Metal Servers for VPC (including SAP)
  • IBM Cloud Direct Link Connect (2.0)
  • IBM Direct Link Dedicated (2.0)
  • IBM Cloud DNS Services
  • IBM Cloud Secrets Manager
  • IBM Cloud Transit Gateway
  • IBM Cloud VPN for VPC – Client-to-Site server

The previously assessed and renewed services include the following:

  • IBM Cloud Block Storage for Virtual Private Cloud
  • IBM Cloud Block Storage Snapshots for VPC
  • IBM Cloud Flow Logs for VPC
  • IBM Cloud Load Balancer for VPC
  • IBM Cloud Virtual Private Endpoint for VPC
  • IBM Cloud Virtual Private Cloud – Load Balancer for VPC: Application Load Balancer and Network Load Balancer
  • IBM Cloud Virtual Private Cloud – VPN for VPC – Site-to-Site gateway
  • IBM Cloud Virtual Server for VPC
  • IBM Cloud Virtual Server for VPC – Auto Scale for VPC
  • IBM Cloud Virtual Server for VPC – Dedicated Host for VPC

Learn more

Donald Kneitel
Compliance Product Manager
Tina Belani
IBM Cloud Compliance Program Director

More from Cloud
July 16, 2024

How a US bank modernized its mainframe applications with IBM Consulting and Microsoft Azure

9 min read - As organizations strive to stay ahead of the curve in today's fast-paced digital landscape, mainframe application modernization has emerged as a critical component of any digital transformation strategy. In this blog, we'll discuss the example of a US bank which embarked on a journey to modernize its mainframe applications. This strategic project has helped it to transform into a more modern, flexible and agile business. In looking at the ways in which it approached the problem, you’ll gain insights into…

July 16, 2024

The power of the mainframe and cloud-native applications 

4 min read - Mainframe modernization refers to the process of transforming legacy mainframe systems, applications and infrastructure to align with modern technology and business standards. This process unlocks the power of mainframe systems, enabling organizations to use their existing investments in mainframe technology and capitalize on the benefits of modernization. By modernizing mainframe systems, organizations can improve agility, increase efficiency, reduce costs, and enhance customer experience.  Mainframe modernization empowers organizations to harness the latest technologies and tools, such as cloud computing, artificial intelligence,…

July 16, 2024

Modernize your mainframe applications with Azure

4 min read - Mainframes continue to play a vital role in many businesses' core operations. According to new research from IBM's Institute for Business Value, a significant 7 out of 10 IT executives believe that mainframe-based applications are crucial to their business and technology strategies. However, the rapid pace of digital transformation is forcing companies to modernize across their IT landscape, and as the pace of innovation continuously accelerates, organizations must react and adapt to these changes or risk being left behind. Mainframe…

IBM Newsletters

 Get our newsletters and topic updates that deliver the latest thought leadership and insights on emerging trends.
Subscribe now More newsletters