{
  "node_id": "pci-dss-v4-cloud-shared-responsibility-matrix",
  "title": "PCI DSS v4.0 Cloud Shared Responsibility - Payment Card Industry Requirements for Cloud Workloads: Responsibility Matrix by Service Model (IaaS/PaaS/SaaS), Compensating Controls for Multi-Tenant Environments, Tokenisation, P2PE and Cloud Service Provider PCI Compliance Reports",
  "domain": "Cloud & SaaS",
  "version": "1.0.1",
  "last_updated": "2026-04-30",
  "bluf": "This regulation defines the shared responsibility model for PCI DSS compliance in cloud environments, specifying which security controls are the obligation of the cloud service provider versus the customer based on service model (IaaS, PaaS, SaaS), as outlined in PCI DSS v4.0.1 Requirement 2.2 and related guidance.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0"
  },
  "crosswalks": {
    "_available_keys": [
      "nist_framework",
      "iso_standard",
      "industry_mapping",
      "ai_overlay_2026"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "csa-ccm-v4-cloud-controls",
    "cobit-2019-governance-framework",
    "eu-gdpr-cloud-data-processing",
    "cisa-cross-sector-cybersecurity-goals"
  ],
  "primary_citations_count": 5
}