Contents
Is Microsoft Azure PCI DSS compliant?
Azure and PCI DSS Microsoft Azure maintains a PCI DSS validation using an approved Qualified Security Assessor (QSA), and is certified as compliant under PCI DSS version 3.2.
Which set of security standards in Azure relates to cardholder data?
Microsoft is now offering 40 services on its Azure cloud platform, which are compliant with Payment Card Industry (PCI) Data Security Standards (DSS). Designed to prevent fraud, PCI DSS is a global information security standard for protecting payment and cardholder data.
Who audits Microsoft Azure?
Certified Public Accountant
Microsoft Azure, Dynamics 365, and other Microsoft online services undergo rigorous independent third-party SOC 2 Type 2 audits conducted by a reputable Certified Public Accountant (CPA) firm.
Is Microsoft Azure ISO certified?
We are happy to announce that Microsoft Azure recently completed a new set of independent third-party ISO and Cloud Security Alliance (CSA) audits to expand our certification portfolio.
Which Azure services are PCI compliant?
Azure, OneDrive for Business, and SharePoint Online are certified as compliant under PCI DSS version 3.2 at Service Provider Level 1 (the highest volume of transactions, more than 6 million a year).
Which is the latest version of PCI DSS for Azure?
Microsoft Azure maintains a PCI DSS validation using an approved Qualified Security Assessor (QSA), and is certified as compliant under PCI DSS version 3.2.1 at Service Provider Level 1. The Attestation of Compliance (AOC) produced by the QSA is available to customers for download.
Where can I find Microsoft 365 PCI DSS documentation?
For more information about Microsoft 365 compliance, see Microsoft 365 PCI DSS documentation. You can access audit reports and certificates in the Azure or Azure Government portal by navigating to Home > Security Center > Regulatory compliance > Audit reports or using direct links based on your subscription (login required):
Do you have to have azure to use PCI 3DS?
You must have an existing Azure subscription or free Azure trial account to login. Azure PCI 3DS Attestation of Compliance (AoC) provides evidence that Azure complies with the PCI 3DS Core Security Standard based on a PCI 3DS assessment conducted by a qualified 3DS Assessor.
What does the PA DSS mean for Azure?
The PA DSS helps software vendors develop third-party applications that store, process, or transmit cardholder payment data as part of a card authorization or settlement process. Retailers must use PA DSS certified applications to efficiently achieve their PCI DSS compliance. The PA DSS does not apply to Azure.