Quick Recipe for hosting PCI sensitive data apps on Google Cloud
Hosting a PCI compliant app on GCP is straightforward. Create a separate project for all the PCI Data. The actual web tier should reside in a different project…
Archive
Category: GCP Compliance
data Compliance Standards
SOC2 GDPR NIST 800-53 PCI DSS v3.2.1 Cybersecurity Maturity Model Certification (CMMC) v.1.02 ISO/IEC 27017:2015 HITRUST CSF v9.3 PIPEDA NIST CSF CCPA 2018 MITRE ATT&CK v6.3 APRA (CPS…
NIST vs CIS Standards for GCP
Also read PCI DSS compliance on GCP and Google GOV Cloud NIST 800-53 seems to have far more controls than the base CIS standards for GCP. Using a…
Dry Run Mode for VPC Service Controls
Setup dry run mode for VPC Service Controls Step 1 – Define your VPC Service Controls, and implement in dry run mode Step 2 – Monitor GCP logs…
Migrate existing Project into an existing GCP Org
Projects in Organizations versus Billing Accounts Moving a Billing account from one org to another is different from moving a project. You may even want to CHANGE the…
Premium Tier Security Command Center GCP
Security Health Analytics should be your first stop for auditing the security posture of your GCP environment. In addition to several built in detectors, there are a handful…
Governance on any public cloud
Also See GCP Gov Cloud – Assured Workloads To implement proper governance, any cloud provider needs these 3 elements (tagging, RBAC, policies and optionally locking). Governance is around…
NIST Compliance and GCP – Google Gov Cloud
Gov Cloud GCP Google’s Assured Workloads for Government workloads NIST Standards The significant difference between NIST 800-53 and 800-171 is that the latter relates to non-federal networks. Simply put, if…