We are looking for a whitepaper or IFS doc stating which areas of PCI DSS 3.2.1 are satisfied for a customer using IFS Managed Cloud ERP.

For example, as a customer, all of Requirement 3 is unable to be verified by us because we do not have visibility into the IFS data retention procedures and physical media handling of (for example) HDDs/SSDs in the Azure Datacenter.

Specific areas that I feel may be applicable are Req 3, 4, (parts of) 6, & 7.

Thanks!