6 docs tagged with "OPA"

Specifics of exception management in the context of containers and images - admission control, image signing and vulnerability scanning

Specifics of exception management in the context of Infrastructure as Code - policy engines, enforcement and TTL

Technical and operational indicators for assessing the effectiveness of security controls in Infrastructure as Code, with thresholds by risk level and mapping to the cross-cutting SbD-ToE governance dimensions.

Organisational policy that defines the security requirements for the building, scanning, signing, runtime configuration and management of container images, including securityContext hardening, admission policies in Kubernetes, network isolation and runtime monitoring, proportional to the criticality level (L1, L2, L3).

Organisational policy that defines the security requirements for the definition, validation, execution and maintenance of Infrastructure as Code (IaC), including configuration scanning, policy-as-code, environment separation, drift control, approved modules and plan signing, proportional to the criticality level (L1, L2, L3).

Automatic application of formal policies to block non-compliant executions, without replacing human decision