4c0d7117_ublic_IaaS_Cloud__How_I_Did_It__Description
[Req] 12 [My Summary] Rely on CSP for HW->Hypervisor-related compliance. Ensure policy states the requirements for need to know access to CHD. Ensure that if you share CHD with others, contracts state they must protect CHD in accordance with PCI DSS. Have an incident response plan and make sure it works! Make sure you have appropriate policies and can prove that you are doing what they say. Note: The policies need to exist with or without the cloud. The biggest difference here is ensuring appropriate language is included in contracts. [Description] 
Maintain a policy that addresses information security for all personnel
PCI Compliance in the Public IaaS Cloud: How I Did It
Description