To evaluate Google Cloud Platform (GCP) for PCI compliance and identify Google's inherent controls, you should review the "Google Cloud Platform: Customer Responsibility Matrix". This document provides detailed information about the shared responsibility model, outlining the security controls managed by Google and those that are the responsibility of the customer.
Steps to access and use the document:
* Access the Document:
* Go to the Google Cloud compliance resource center.
* Locate the "Customer Responsibility Matrix" for PCI DSS compliance.
* Review Inherent Controls:
* The document lists various controls and specifies whether they are managed by Google, the customer, or both.
* It covers different aspects such as infrastructure security, data protection, and compliance requirements.
* Analyze PCI Compliance:
* Use the matrix to understand which PCI DSS requirements are inherently addressed by Google Cloud.
* Identify the controls you need to implement and manage as a customer to ensure full compliance.
By reviewing this document, you can gain a comprehensive understanding of the inherent controls provided by Google Cloud and the responsibilities you must fulfill to achieve PCI compliance.
References:
* Google Cloud Compliance Documentation
* PCI DSS Compliance on Google Cloud