AWS Introduces PCI-DSS Level 1 Certification for Automated Compliance Reporting

Amazon Web Services (AWS) has announced the availability of PCI-DSS Level 1 certification on its Artifact portal, providing customers with enhanced transparency and compliance reporting. This milestone is particularly significant for financial institutions in Chile that require strict adherence to data localization regulations.

Enhanced Transparency and Compliance Reporting

The PCI-DSS Level 1 certification allows customers to view the exact city within each AWS Region where their data centers are located, providing greater transparency and compliance. This feature enables financial institutions to better manage their regulatory requirements and ensure that their data is processed in compliance with local regulations.

Benefits of Using AWS Local Zones and Outposts

For financial institutions requiring single-digit millisecond latency and residency requirements, AWS Local Zones and Outposts offer a solution. These infrastructure deployments bring compute, storage, database, and other services closer to large populations, industries, and IT centers, enabling customers to deliver applications that meet these stringent requirements.

Security Incident Reporting and Response

In Chile, financial institutions are required to report operational incidents that affect business continuity, funds, or public image within 30 minutes of occurrence. AWS has implemented a formal incident response policy and program, employing automated mechanisms for monitoring and control of remote access methods. The company also maintains a proprietary tool for reviewing and investigating incidents.

Business Continuity Management

Financial institutions in Chile are subject to various regulations governing business continuity management. RAN 20-7 and RAN 20-9 outline the main obligations, including general management elements, data processing sites, and systemic contingencies. AWS has developed a Business Continuity Plan (BCP) to recover and reconstitute its services in case of an outage.

Disaster Recovery

Financial institutions can leverage AWS’s cloud-based disaster recovery solutions, such as Elastic Disaster Recovery (AWS DRS), to enable faster disaster recovery without the need for a second physical site. This allows customers to architect disaster recovery solutions that meet their specific needs and comply with Chilean regulations.

Conclusion

The availability of PCI-DSS Level 1 certification on AWS Artifact, combined with the company’s Local Zones and Outposts offerings, provides financial institutions with enhanced transparency, compliance, and security capabilities to support their operations in Chile. With these features, customers can better manage their regulatory requirements, ensure business continuity, and recover from disasters quickly and efficiently.