+OPS-34.01AC

OPS-34.01AC

The policies and procedures additionally describe measures along the life cycle of containers that address at least the following aspects:

1. Container images are cryptographically signed and the signing key securely stored (cf. CRY-10) to ensure their authenticity and integrity;

2. Container behaviour is monitored and restricted using runtime security controls; and

3. Software products used for the provision of container images are, where possible, regularly scanned for known vulnerabilities or malicious components in container images and dependencies.

Supplementary information

In case of third-party and open source software products used for the provision of container images, scanning procedures comply with the policies and procedures defined in DEV-14.

1. Ħarsa ġenerali

1.1 Referenzi

1.2 Rekwiżiti identifikati

1.3 Regolamenti relatati

2. Rekwiżiti identifikati

Rekwiżiti

3. Regolamenti relatati

Regolamenti

Kwistjonijiet marbuta

Links
is blocked by Signed Components
is blocked by Anomalous Behavior
is blocked by Transmission of Cybersecurity & Data Protection Attributes
is blocked by Application Container
is blocked by Vulnerability Scanning