PCI Audit upcoming… and the QSA is asking for the Attestation of Compliance (AoC) for the services we use on Cloudflare (WAF, CDN)
Did a search around the website and could not find where one requests/download it.
Any suggestions?
Thanks!
PCI Audit upcoming… and the QSA is asking for the Attestation of Compliance (AoC) for the services we use on Cloudflare (WAF, CDN)
Did a search around the website and could not find where one requests/download it.
Any suggestions?
Thanks!
Does this help?
https://support.cloudflare.com/hc/en-us/articles/202249734-Cloudflare-and-PCI-Compliance
No. This does not help. I had already looked at this page. IT does not allow for the download of your current AoC
Probably best to ask support. To contact Cloudflare Customer Support, login & go to https://dash.cloudflare.com/?account=support and select get more help. Please give Support the complete details and link to your Community post. Share your ticket number as I’d like to track.
@cloonan Thanks for the pointer to “Get more help”… I must have missed it thinking it was more boilerplate
When I sent an email to support I got another boilerplate email back saying that they could not find my email as an owner of the account. I’ll have the owner request it and send it to me. I’ll update this once I get my hands on the AoC… if there are any more hoops to jump through.
Thank you & sorry about the hoops. Once you have the ticket number, please do share. And, when you get the auto reply, just respond back asking to route it to the right queue. I’ll take a look and make sure it’s in the right place.
Sharing a recent site update on compliance. This page covers ISO 27001:2013, SOC 2 Type II, SOC 3, and PCI DSS 3.2.
Thanks so much for the follow-up! Really appreciate it.
The ticket I opened was closed with the boilerplate response… but I did get the AoC on time for the audit. I networked thru my team and the client’s team and got to someone who was able to get the AoC pretty quickly.
Again, thanks for your attention to the board!
Ken
This topic was automatically closed after 30 days. New replies are no longer allowed.