vania-janet/multiturn-rag-retrieval-data huggingface dataset:
Understanding compliance in IBM Cloud 

IBM Cloud® provides a secure cloud platform that you can trust. IBM Cloud compliance results from a platform and services that are built on best-in-industry security standards, including GDPR, HIPAA, ISO 9001, ISO 27001, ISO 27017, ISO 27018, PCI, SOC2, and others. For more information, see [Compliance on the IBM Cloud](https://www.ibm.com/cloud/compliance)



 Compliance reports 

IBM Cloud provides compliance reports for some compliance regulations, for example SOC or PCI, to advise clients. The reports include details of the audit experience and can help users assess and address the high, medium, and low risks identified.

If you have an IBM Cloud account and want an infrastructure compliance report, go to [https://cloud.ibm.com/classic/security/compliancereport/request](https://cloud.ibm.com/classic/security/compliancereport/request). Complete the form to receive an email with the requested reports attached.

If you don't have an IBM Cloud account or want a PaaS compliance report, go to [https://www.ibm.com/account/reg/us-en/signup?formid=MAIL-wcp](https://www.ibm.com/account/reg/us-en/signup?formid=MAIL-wcp). Complete the form and you will be contacted by an IBM representative.





 General Data Protection Regulation (GDPR) 

The GDPR seeks to create a harmonized data protection law framework across the EU and aims to give citizens back the control of their personal data. The GDPR imposes strict rules on those hosting and processing personal data, anywhere in the world.

IBM is committed to providing our clients and IBM Business Partners with innovative data privacy, security, and governance solutions to assist them in their journey to GDPR readiness. Data and data protection are becoming increasingly important to individuals and society. Enterprises must earn the client’s trust in their ability to steward information.

IBM Cloud is agile and scalable with built-in data security, and privacy services and solutions that can be consumed on premises or through public cloud.
[IBM Cloud Satellite®](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-satellite-architecture-about) Built by using [IBM Cloud Satellite](https://cloud.ibm.com/docs/satellite), so you can create a hybrid environment that brings the scalability and on-demand flexibility of public cloud services to the applications and data that run in your secure private cloud (such as on-premises). 
 [IBM Cloud® for VMware® Regulated Workloads](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-vmware-overview) Built by using [IBM Cloud for VMware Regulated Workloads](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-vrw-archi-overview), which is an extension of the VMware vCenter Server® offering. Its design extends and enhances the basic vCenter Server architecture to deliver a secure, high-performance platform.
[solution tutorial icon](https://cloud.ibm.com/media/docs/images/homepage/solution-tutorial.svg) [Continuous Deployment to Kubernetes](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-continuous-deployment-to-kubernetes)Continuous Deployment to Kubernetes Solution tutorial

This tutorial walks you through the process setting up a continuous integration and delivery pipeline for containerized applications running on the Kubernetes Service. You will learn how to set up source control, then build, test and deploy the code to different deployment stages. Next, you will add integrations to other services like Slack notifications.

![solution tutorial icon](https://cloud.ibm.com/media/docs/images/homepage/solution-tutorial.svg) [Creating a virtual data center in a VMware as a Service using the VMware Cloud Director Console](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-vmware-as-a-service-vdc)Creating a virtual data center in a VMware as a Service using the VMware Cloud Director Console Solution tutorial

This tutorial is to demonstrate the basic steps to operationalize an IBM Cloud® for VMware as a Service – single tenant instance after initial instance provisioning. This tutorial should take about 30-60 minutes to complete and assumes that IBM Cloud® for VMware as a Service – single tenant instance and a virtual data center (VDC) have already been provisioned.

![solution tutorial icon](https://cloud.ibm.com/media/docs/images/homepage/solution-tutorial.svg) [Creating a virtual data center in a VMware as a Service with Terraform](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-vmware-as-a-service-tf)Creating a virtual data center in a VMware as a Service with Terraform Solution tutorial
Solution Architecture and Design [Deploying and managing smart contracts](https://cloud.ibm.com/docs/blockchain?topic=blockchain-ibp-console-smart-contracts-v2) via the Console are supported. Solution Architecture and Design are not included in support. 
 Performance Tuning [Resource allocation](https://cloud.ibm.com/docs/blockchain?topic=blockchain-ibp-console-adv-deploymentibp-console-adv-deployment-options) via the Console is supported. Detailed performance analysis and tuning of the environment or application code are not included in support - see the documentation on creating [highly available applications and using indexes with CouchDB](https://cloud.ibm.com/docs/blockchain?topic=blockchain-ibp-console-appconsole-app-couchdb). 
 Certificate Renewal [Automatic and Manual](https://cloud.ibm.com/docs/blockchain?topic=blockchain-cert-mgmtcert-mgmt-renew-expiration) Certificate renewal via the Certified Console image is supported. The user is responsible for keeping track of identities and performing manual certificate renewal. Using [IBM Secrets Manager](https://www.ibm.com/cloud/secrets-manager) is recommended for keeping track of identities and certificates. 









 Considerations 

Before you deploy the console, ensure that you understand the following considerations:



* You are responsible for the management of health monitoring, security, and logging of your Kubernetes cluster on IBM Cloud. See this [information](https://cloud.ibm.com/docs/containers?topic=containers-responsibilities_iks) for details on what IBM Cloud manages and what you are responsible for.
* You are also responsible for monitoring the resource usage of your Kubernetes cluster on IBM Cloud. To monitor your Kubernetes resources, we recommend using the [IBM Cloud Monitoring](https://www.ibm.com/cloud/cloud-monitoring) tool in combination with your IBM Cloud Kubernetes dashboard.
Getting started with IBM Cloud Pak for Security as a Service 

IBM Cloud Pak® for Security as a Service provides an open security platform that connects to your existing data sources to generate deeper insights and enable you to act faster with automation.

By using open standards and IBM innovations, Cloud Pak® for Security as a Service can securely access IBM and third-party tools to search for threat indicators across any cloud or on-premises location. Connect your workflows with a unified interface so you can make better risk-based decisions and respond faster to security incidents. Use Cloud Pak® for Security as Service to orchestrate and automate your security response so that you can better prioritize your team's time.



 What's inside this Cloud Pak 

IBM Cloud Pak® for Security as a Service includes the following offerings.



* IBM® Security Threat Intelligence Insights delivers unique, actionable, and timely threat intelligence. The application provides most of the functions of IBM X-Force® Exchange.
* IBM® Security Data Explorer enables customers to do federated search and investigation across their hybrid, multi-cloud environment in a single interface and workflow.
* IBM® Security Case Management for IBM Cloud Pak® for Security provides organizations with the ability to track, manage, and resolve cybersecurity incidents.
* IBM® Security Orchestration & Automation provides most of the IBM Security Orchestration, Automation, and Response Platform feature set. If you have an Orchestration & Automation license, you can choose between the stand-alone version on a virtual appliance, or the application on Cloud Pak for Security.
* IBM® QRadar® Proxy provides communication between IBM Cloud Pak® for Security and IBM QRadar or QRadar on Cloud. This communication uses APIs to pull powerful IBM QRadar data into the QRadar Security Information and Event Management (SIEM) dashboards.
* IBM® Security Threat Investigator automatically analyzes and investigates cases to help you make more informed decisions.
* IBM® Security Risk Manager provides early visibility into potential security risks by correlating insights from multiple vectors to help you prioritize remedial actions based on prescriptive recommendations.
* Detection and Response Center (Beta) provides a unified overview of your organization's security posture through use cases from different security tools and platforms.
Encryption options for IBM Cloud Classic Infrastructure storage 

By default IBM Cloud® Classic Infrastructure includes provider-managed data-at-rest encryption capabilities. If your environment requires customer-managed encryption, you have additional options including Key Protect, LUKS encryption for Block Storage, file-level encryption options for File Storage, and server-side encryption for IBM Cloud Object Storage.



 Provider-managed encryption 

IBM Cloud Classic Infrastructure provides the following automatic data-at-rest encryption capabilities:



* IBM Cloud Object Storage encrypts all objects by default with provider-managed keys.
* Block Storage and File Storage automatically include provider-managed encryption for volumes that are provisioned in [almost all data centers](https://cloud.ibm.com/docs/BlockStorage?topic=BlockStorage-selectDC).







 Customer-managed encryption 

Some workloads or use cases require full customer control over the encryption, including key management. You can use the following information to learn about possible methods to achieve customer-managed encryption within the standard IBM Cloud Classic Infrastructure feature set. You can implement any of the following options: Key Protect, LUKS encryption for Block Storage, file-level encryption options for File Storage, and server-side encryption for IBM Cloud Object Storage. Most of these customer-managed encryption options require manual setup.



 Key Protect 

[IBM® Key Protect for IBM Cloud®](https://www.ibm.com/cloud/key-protect) is one method that you can use to set up customer-managed encryption. For more information about Key Protect, see [About Key Protect](https://cloud.ibm.com/docs/key-protect?topic=key-protect-about). Whenever the following snippets call for a passphrase or password, you can use a key from Key Protect by using copy & paste or some shell scripting.

When using IBM Cloud Object Storage with Key Protect, a root key is used to encrypt buckets, so only the provisioning and the creation of the root key steps are necessary.

You can provision Key Protect from the IBM Cloud Dashboard or by using the API. After you provision a Key Protect instance, you can create (or import) a customer-managed root key.
[Understanding IBM Cloud compliance ](https://cloud.ibm.com/docs/overview?topic=overview-compliance)

A platform and services that are built on best-in-industry security standards.

[Controlling what users access ](https://cloud.ibm.com/docs/account?topic=account-cloudaccess)

Access management enables you to control which users see, create, use, and manage resources in your account.

[API keys and tokens ](https://cloud.ibm.com/docs/account?topic=account-manapikey)

API keys are used to track and control how the API is being used.

 Get developing 

Build enterprise-ready applications.

[Creating apps ](https://cloud.ibm.com/docs/apps?topic=apps-getting-started)

You can build enterprise-ready mobile and web apps and take advantage of cloud extensions.

[Service availability ](https://cloud.ibm.com/docs/overview?topic=overview-services_region)

We make it easy for you to implement, host, and scale services, infrastructure, and apps but not all services and infrastructure are available for purchase in every IBM Cloud location.

[Using a service outside of IBM Cloud ](https://cloud.ibm.com/docs/account?topic=account-externalapp)

If IBM Cloud services provide service keys that are accessible from the internet, you can use those services with your local apps or third-party tools.

[Locations for resource deployment ](https://cloud.ibm.com/docs/overview?topic=overview-locations)

We have a resilient global network of locations consisting of regions, zones, and data centers to host your highly available cloud workloads.

[Get started with the IBM Cloud CLI ](https://cloud.ibm.com/docs/cli)

Use IBM Cloud's powerful CLIs and tooling to interact with your applications, containers, infrastructure, and other services.

[APIs and SDKs ](https://cloud.ibm.com/docs?tab=api-docs)

Check out our library of APIs and SDKs

 DevOps
Operations management 

IBM Cloud® for VMware® Regulated Workloads is delivered as a clean environment. Extensive work was done to identify and remediate common errors and warnings that are often found in a typical vSphere deployment. IBM and VMware® best practices, which are combined with standard and customized templates for VMware Aria® Operations™, ensure that all IBM Cloud for VMware Regulated Workloads configurations are deployed as clean as possible, ready for onboarding. Caveonix RiskForesight is used to scan the environment for compliance with industry and government standards such as NIST, PCI, and more. RiskForesight is continually monitoring theIBM Cloud for VMware Regulated Workloads for adherence to compliance standards. RiskForesight provides on-demand compliance posture reporting and at-a-glance compliance status. The operational tools support the customer in compliance with current standards and assist them in rapidly responding to a changing compliance landscape.

Zoom

![IBM Cloud for VMware Regulated Workloads operational tools overview](https://cloud.ibm.com/docs-content/v1/content/5bdb37c0149145723c5437e8176651928565e722/vmwaresolutions/images/vrw-opstools.svg)

Figure 1. IBM Cloud for VMware Regulated Workloads operational tools overview



 Management cluster 

All operational tools are deployed into the management cluster. The IBM Cloud for VMware Regulated Workloads depends upon multiple layers of tools to deliver comprehensive insight into the operation, security, and compliance of all layers of the platform. Customers that use IBM Cloud for VMware Regulated Workloads can extend the use of the operational tools to monitor the VMs supporting their applications.



 Caveonix RiskForesight 

[Caveonix RiskForesight](https://cloud.ibm.com/docs/vmwaresolutions?topic=vmwaresolutions-vrw-caveonix) provides a comprehensive cloud workload protection platform for IBM Cloud for VMware Regulated Workloads.
* Public – Currently the only public cloud provider that is supported is AWS. IBM Cloud is available soon.
* Containers - Currently only AWS Elastic Kubernetes Service (EKS) is supported. IBM Cloud Private and IBM Cloud Kubernetes Services coming later.



* Tenant or Customer Environment Zone – Used to separate tenants, customer, or business units. A remote collector is required because workloads exist in these zones. For a minimum deployment, you need one remote collector, but for a general deployment, you need one Remote Collector per tenant or customer or business unit.
About IBM Blockchain Platform for IBM Cloud 

ATTENTION!! IBM Blockchain Platform SaaS Edition is being replaced by IBM Support for Hyperledger Fabric!! IBM Blockchain Platform SaaS Edition will no longer be supported after July 31, 2023. Customers have been directed to migrate their networks by July 31, 2023. After this date, IBM Blockchain Platform SaaS networks that are not migrated to IBM Support for Hyperledger Fabric will be at risk for potential security vulnerabilities. A migration tool is provided from your console, and the disruption to your network is minimal. See [Migrating to IBM Support for Hyperledger Fabric](https://cloud.ibm.com/docs/blockchain?topic=blockchain-migrating-to-hlf-support) for details.

The IBM® Blockchain Platform for IBM Cloud is the next generation of IBM Blockchain Platform offerings, which gives you total control over your deployments, certificates, and private keys. It includes the new IBM Blockchain Platform console, a user interface that can simplify and accelerate the process of deploying components into a Kubernetes cluster on IBM Cloud managed and controlled by you. For more information about deploying an Kubernetes cluster on IBM Cloud, see [Kubernetes](https://cloud.ibm.com/docs/blockchain/reference?topic=blockchain-k8s-overview).

A key benefit of the platform is that IBM tests the open source code for security vulnerabilities daily and provides 24x7x365 support with SLAs appropriate for production environments.

If you are interested in learning more about how to use IBM Blockchain Platform on Red Hat OpenShift Container Platform, Red Hat Open Kubernetes Distribution, or any Kubernetes v1.24 - v1.26 container platform on x86_64 hardware, see [Getting started with IBM Blockchain Platform 2.5.4](https://cloud.ibm.com/docs/blockchain?topic=blockchain-get-started-console-ocp).
[IBM Db2 on Cloud](https://cloud.ibm.com/docs/Db2onCloud) IBM Db2 on Cloud is an SQL database that is provisioned for you in the cloud. You can use Db2 on Cloud just as you would use any database software, but without the time and expense of hardware setup or software installation and maintenance. [View docs](https://cloud.ibm.com/docs/Db2onCloud?topic=Db2onCloud-key-protect-v2) 
 [Data Engine](https://cloud.ibm.com/docs/sql-query) You can use the Data Engine service to run SQL queries (that is, SELECT statements) to analyze, transform, or clean up rectangular data. [View docs](https://cloud.ibm.com/docs/sql-query?topic=sql-query-keyprotect) 







 Storage service integrations 

You can integrate Key Protect with the following storage services.



Table 2. Supported storage services.

 Service Description Integration docs 

 [Block Storage for VPC](https://cloud.ibm.com/docs/vpc?topic=vpc-getting-started) You can use Block Storage for VPC to provide hypervisor-mounted, high-performance data storage for virtual server instances in your VPC. [View docs](https://cloud.ibm.com/docs/vpc?topic=vpc-vpc-encryption-aboutvpc-customer-managed-encryption) 
 [IBM Cloud Object Storage](https://cloud.ibm.com/docs/cloud-object-storage?topic=cloud-object-storage-getting-started-cloud-object-storage) You can use IBM Cloud Object Storage to store unstructured data in the IBM Cloud. [View docs](https://cloud.ibm.com/docs/cloud-object-storage?topic=cloud-object-storage-kp) 







 Compute service integrations 

You can integrate Key Protect with the following compute services.



Table 3. Supported compute services.

 Service Description Integration docs
Choosing to colocate at Digital Realty’s hub locations in APAC and the US puts IBM Cloud data centers right next door to Digital Realty’s world-class data center deployments, with direct dark fiber connection between them.







 Featured announcements 



* [InterCloud Offers Dedicated Connectivity to IBM Cloud](https://info.intercloud.com/intercloud-offers-dedicated-connectivity-to-ibm-cloud)

Discover how IBM Cloud and InterCloud are helping to enable a national railway company migrate business-critical applications to the cloud over a secure, dedicated connection.
* [IBM Cloud Solves Last Mile Challenges with Satellite](https://www.satellitetoday.com/mobility/2018/10/25/ibm-cloud-solves-last-mile-challenges-with-satellite/), by Adrienne Harebottle

Learn how SES Network's decision to partner with IBM Cloud to help customers overcome key connectivity challenges by harnessing the power of satellite.







 Blogs on the IBM website 



* [Megaport and IBM Empower Enterprise Cloud](https://www.ibm.com/cloud/blog/megaport-and-ibm-empower-enterprise-cloud), by Matt Simpson and Jill Tempelmeyer
* [Supporting the next generation cloud applications with IBM Cloud Direct Link](https://www.ibm.com/blogs/cloud-computing/2018/06/26/next-generation-cloud-apps-ibm-cloud-direct-link/), by Gabriel Montanti
* [IBM and Colt: Enabling Enterprise Digital Transformation](https://www.ibm.com/cloud/blog/announcements/ibm-colt-enterprise-digital-transformation), by Paul Hertzfeldt
* [Digital Realty and IBM Cloud Direct Link: Built for Enterprise Cloud](https://www.ibm.com/cloud/blog/announcements/digital-realty-ibm-cloud-direct-link-expand-network), by Paul Hertzfeldt
* [PacketFabric and IBM Cloud Enable Secure Enterprise Connections](https://www.ibm.com/cloud/blog/announcements/packetfabric-ibm-enable-secure-enterprise-connections), by Paul Hertzfeldt
Getting help and support for IBM Cloud Kubernetes Service 

Still having issues with your cluster? Review different ways to get help and support for your IBM Cloud Kubernetes Service clusters. For any questions or feedback, post in Slack.



 General ways to resolve cluster issues 



1. Keep your cluster environment up to date.



* Check monthly for available security and operating system patches to [update your worker nodes](https://cloud.ibm.com/docs/containers?topic=containers-updateworker_node).
* [Update your cluster](https://cloud.ibm.com/docs/containers?topic=containers-updatemaster) to the latest default version for [Kubernetes Service](https://cloud.ibm.com/docs/containers?topic=containers-cs_versions).



2. Make sure that your command line tools are up to date.



* In the command line, you are notified when updates to the ibmcloud CLI and plug-ins are available. Be sure to keep your CLI up-to-date so that you can use all available commands and options.
* Make sure that [your kubectl CLI](https://cloud.ibm.com/docs/containers?topic=containers-cli-install) client matches the same Kubernetes version as your cluster server. [Kubernetes does not support](https://kubernetes.io/releases/version-skew-policy/)kubectl client versions that are 2 or more versions apart from the server version (n +/- 2).









 Reviewing issues and status 



1. To see whether IBM Cloud is available, [check the IBM Cloud status page](https://cloud.ibm.com/status?selected=status).
2. Filter for the Kubernetes Service component.
3. Review the [limitations and known issues documentation](https://cloud.ibm.com/docs/containers?topic=containers-limitations).
4.