PCI-HSM 4.0—Has the Introduction of ‘Cloud HSM’ Met its Target? (I32a)
As a maturing standard, PCI-HSM 4.0 recently turned its attention to ‘payments HSM in the cloud’. Following multiple consultations with industry through PCI’s Request For Comments (RFC) process, this lead to the introduction of two new major sections to the PCI-HSM 4.0 standard: ‘Multi-tenant HSM’ and ‘Remote-Man-HSM’. This talk will look to review the key features of remotely managed, multi-tenant and scalable HSM as part of reviewing the changes introduced with PCI-HSM 4.0. In doing this, the talk will look to establish, from a vendor and customers perspective, whether the changes introduced by PCI have helped or hindered future ‘cloud friendly’ HSM development and deployments.