4c0d7117_ublic_IaaS_Cloud__How_I_Did_It__Description
[Req] 6 [My Summary] Rely on CSP for HW->Hypervisor related compliance The “what” (securing systems) is not really a “cloud” specific problem, but the “how” is. I use RightScale ServerTemplates and built in versioning to makes it easy and provide change tracking. You can choose how you want to do it, just do it Note: Nice aspect of the cloud is that since automation is part of the DNA, automation of these should actually make it easier to meet the requirements [Description] 
Develop and maintain secure systems and applications
PCI Compliance in the Public IaaS Cloud: How I Did It
Description