I've got a post up on the Tripwire blog about Regulatory Compliance this week: https://www.tripwire.com/state-of-security/regulatory-compliance-cloud

he first important consideration is that whilst many cloud vendors will support a number of security controls and best practice settings out-of-the-box that will help protect you, most compliance policies will suggest stricter than “default” regimes to ensure that your data is kept safer still and keep you on the right side of the law.