Home > Compliance, PCI, Virtualization, VMware > PCI Security Standards Council to Form Virtualization SIG…

PCI Security Standards Council to Form Virtualization SIG…

January 24th, 2009 Leave a comment Go to comments

I'm happy to say that there appears to be some good news on the PCI DSS front with the promise of a SIG being formed this year for virtualization.  This is a good thing. 

You'll remember my calls for better guidance for both virtualization and ultimately cloud computing from the council given the proliferation of these technologies and the impact they will have on both security and compliance.

In that light, news comes from Troy Leach, technical director of the PCI Security Standards Council via a kind note to me from Michael Hoesing:

A PCI SSC Special Interest Group (SIG) for virtualization is most likely coming this year but we don't have any firm dates or objectives as of yet.  We will be soliciting feedback from our Participating Organizations which is comprised of more than 500 companies (which include Vmware, Microsoft, Dell, etc) as well as industry subject matter experts such as the 1,800+ security assessors that currently perform assessments as either a Qualified Security Assessor or Approved Scanning Vendor (ASV).

The PCI SSC Participating Organization program allows industry stakeholders an opportunity to provide feedback on all standards and supporting procedures.  Information to join as a Participating Organization can be found here on our website.

This is a good first step.  if you've got input, make sure to contribute!

/Hoff

Categories: Compliance, PCI, Virtualization, VMware Tags:
  1. Shack
    January 24th, 2009 at 14:47 | #1
    Reply | Quote

    We bugged the hell out of them for this. Glad to hear it's coming!

  1. No trackbacks yet.