Re: Cloudstack with PCI compliance

2014-04-25 Thread ilya musayev
In previous company, we had to design SOX and PCI compliant environment that leverage CloudStack. Cant go into greater details as it was sometime back, but here several things i recall 1) Only open communication to specific hosts on specific ports (yes i know it was obvious), we have documen

Re: Cloudstack with PCI compliance

2014-04-24 Thread Shanker Balan
Hi Chip, On 24-Apr-2014, at 7:26 pm, Chip Childers wrote: > CloudStack itself can never be PCI *compliant*... only a company can > be. CloudStack can certainly be part of the technical architecture for > an IT environment (or service provider environment) that is being > audited for overall o

RE: Cloudstack with PCI compliance

2014-04-24 Thread Adrian Lewis
r. -Original Message- From: Chip Childers [mailto:chipchild...@apache.org] Sent: 24 April 2014 14:57 To: users@cloudstack.apache.org Subject: Re: Cloudstack with PCI compliance CloudStack itself can never be PCI *compliant*... only a company can be. CloudStack can certainly be part of the technical archi

Re: Cloudstack with PCI compliance

2014-04-24 Thread Chip Childers
CloudStack itself can never be PCI *compliant*... only a company can be. CloudStack can certainly be part of the technical architecture for an IT environment (or service provider environment) that is being audited for overall organizational compliance. A service provider that offers a CloudStack

Re: Cloudstack with PCI compliance

2014-04-24 Thread Tim Mackey
The real problem is in defining what is "in-scope" and "out-of-scope", and avoiding "mixed-mode". This document ( https://www.pcisecuritystandards.org/documents/Virtualization_InfoSupp_v2.pdf) provides a pretty good read of the suggested rules of the road for virtualization, but I'm not aware of a

Re: Cloudstack with PCI compliance

2014-04-24 Thread Sebastien Goasguen
On Apr 22, 2014, at 5:52 AM, Uwe Kastens wrote: > Hi there, > > > That would be interesting for me as well > > Kind Regards > > Uwe > > > > 2014-04-21 19:31 GMT+02:00 Upendra Moturi : > >> Hello Team, >> >> Has anyone worked on making cloudstack PCI compliant. >> Can you please point me

Re: Cloudstack with PCI compliance

2014-04-22 Thread Uwe Kastens
Hi there, That would be interesting for me as well Kind Regards Uwe 2014-04-21 19:31 GMT+02:00 Upendra Moturi : > Hello Team, > > Has anyone worked on making cloudstack PCI compliant. > Can you please point me some documentation. >

Cloudstack with PCI compliance

2014-04-21 Thread Upendra Moturi
Hello Team, Has anyone worked on making cloudstack PCI compliant. Can you please point me some documentation.