hard20 pts · first answer countscloud-securitycompliancepci-dss

Shrinking PCI DSS scope in the cloud

An Indian fintech processes cards on AWS. Which design most reduces the number of systems in PCI DSS scope?

A.Put every service in one VPC so auditors can see it all at onceB.Isolate card handling in a separate account and tokenise for other systemsC.Store card numbers in DynamoDB with encryption at rest onlyD.Use a larger EC2 instance type so fewer servers handle cards

Discussion 0

Join free to post in the discussion.

Shrinking PCI DSS scope in the cloud

Discussion 0

Related questions