Containerized architecture has significantly changed the way software is developed, tested and deployed. There are major challenges in ensuring containers are compliant, and applying compliant security controls to this new type of infrastructure.
Most regulations were created before containers were prevalent, and do not have specific provisions explaining how containers should be protected. At the same time, containers create new types of security risks that must be addressed to prevent compliance violations.
In this post we’ll provide a brief overview and best practices for container compliance with several common compliance standards.