9 docs tagged with "imagens"

Binary and auditable checklist to assess the practical adoption of the practices prescribed in Chapter 09 - Containers and Images

Canonical catalogue of security requirements for containers and images (CNT-001 to CNT-012), with applicability by risk level and acceptance criteria for the selection of base images, hardening, signing, scanning, runtime policies and access to registries.

Principles, practices and controls for building, validating and running images in a secure, auditable and traceable way

Specifics of exception management in the context of containers and images - admission control, image signing and vulnerability scanning

How to apply the prescribed container security practices throughout the development and operations lifecycle

Technical and operational indicators for the assessment of the effectiveness of security controls in container images and orchestration environments, with thresholds by risk level and mapping to the cross-cutting SbD-ToE governance dimensions.

Organisational policies required to guarantee the security, traceability and governance of containers and images throughout the lifecycle.

Identification and mitigation of the risks introduced by automation in the chain of building, validation and execution of container images

Organisational policy that defines the security requirements for the building, scanning, signing, runtime configuration and management of container images, including securityContext hardening, admission policies in Kubernetes, network isolation and runtime monitoring, proportional to the criticality level (L1, L2, L3).