Will Your Cloud Be Compliant?
526 views · Published 16 May 2014 · 41:49 · Indexed 14 November 2026
Channel: OpenInfra Foundation · 2014 · Science & Technology
Will your Cloud be Compliant? features PayPal's Scott Carlson and Evgeniya Shumakher of Mirantis. Architecting a standards compliant cloud can be difficult. There are emerging cloud specific security standards such as FedRAMP and CSA that should be considered in addition to existing NIST/ISO and PCI-DSS standards. OpenStack workflows and resources that exist today either fully or partially meet these common compliance requirements. We will discuss areas that need work and areas that appear to be in good shape. The talk includes a study of PayPal's experience in reviewing OpenStack security as relates to complying with PCI-DSS in their private cloud and existing data center environment. It dives into the many design decisions PayPal made within their environment considering whether to use physical versus logical devices, review hypervisor versus guest compliance, and whether to maintain separate management networks for PCI versus non-PCI traffic.
More from this channel
-
30:59
San Diego 2012 Keynotes: Mark Shuttleworth
-
39:42
Building an OpenStack Security Group
-
32:06
War Stories Moving from Eucalytups to OpenStack
-
41:41
Making clouds faster for fun and profit
-
36:25
Service Resiliency Doesnt always mean HA or cluster
-
41:18
Cloudifying Virtual Desktops
-
28:05
Red Hats Cloud Strategy
-
41:36
OpenStack its impact on the Enterprise and startup community