Interpreting compliance requirements and translating them into specific technical capabilities

When moving to cloud technologies for the access and use of company resources, there is a clear shift in a company’s ability to monitor and manage compliance. When resources are within the walls of a company-owned data center, security controls, processes, and policies can be put in place to govern compliance with company, government, industry, and regulatory requirements. When discussing compliance requirements, the conversation should be based on the processes, procedures, policies, and controls that are in place for adhering to these standards. The focus of this chapter will be on the policies and controls within the technical landscape to monitor and manage compliance.

Before discussing how to interpret these compliance requirements into technical capabilities, let’s define what each of these compliance types is and how they can affect how you design your infrastructure...