Question

A financial services company must demonstrate continuous compliance with the PCI DSS framework for a set of Google Cloud projects. The compliance team needs an automated way to assess resource configurations against PCI DSS control requirements and to generate downloadable evidence and control-mapping reports for external auditors, without building custom scripts. Which Google Cloud capability best meets this requirement?

Accepted Answer

Use Audit Manager to run compliance assessments that map resource configurations to PCI DSS controls and produce exportable evidence reports

Answer

Enable Data Access audit logs across all projects and manually correlate log entries to each PCI DSS control

Answer

Deploy resources into an Assured Workloads folder configured for FedRAMP High to inherit PCI DSS controls

Answer

Configure Access Transparency logs to record Google personnel actions as proof of PCI DSS compliance