Our company does not store any credit card details. We are storing it in a cloud platform which is already PCI compliant.
We just require to access the cloud portal from our company. I understand we need to be PCI compliant as well.
Are we required to have a DRP (Disaster Recovery Plan) in place for our AD servers/WSUS and Desktops, etc?
We just use our infrastructure to login to cloud solutions. We don't store any card data.