4c0d7117_ublic_IaaS_Cloud__How_I_Did_It__Description
[Req] 2 [My Summary] Rely on CSP for HW->Hypervisor related compliance. Make sure to change the defaults- I use RightScale ServerTemplates™ to enforce this, as well as provide version control of configurations. Note: The cloud actually helps you with in this area (usually), as you should have had to think how to build systems. There is not “throw in the CD, plug in the cable, and leave it”. So you should have a leg up in this area when using a cloud technology. [Description] 
Do not use vendor-supplied defaults for system passwords and other security parameters
PCI Compliance in the Public IaaS Cloud: How I Did It
Description