Identity and Access Management (IAM) in Payment Card Industry (PCI) Data Security Standard (DSS) environments

This is the first of a series of consultant-written blogs around PCI DSS.

Many organizations have multiple IAM schemes that they forget about when it comes to a robust compliance framework such as PCI DSS.

There are, at minimum, two schemes that need to be reviewed, but consider if you have more from this potential, and probably incomplete, list:

• Cloud service master account management AWS (Amazon Web Services), Microsoft Azure, Google Cloud Platform (GCP), Oracle Cloud Architecture (OCA),


• Name Service …

access access management account amazon amazon web services architecture aws azure blogs card cloud cloud architecture cloud platform cloud service compliance compliance framework consultant data data security dss environments framework gcp godaddy google google cloud google cloud platform iam identity identity and access identity and access management industry management master microsoft microsoft azure name network network solutions oracle oracle cloud organizations payment payment card pci platform security security standard series service services solutions standard web web services