Designed, implemented, and executed the container security program for a USA’s largest transportation company. CyberOne SMEs executed the similar projects for 6 customers which includes banking, insurance & software development industries.
Challenges:
Now, Containers (docker,Kubernetes) become backbone cloud based application development & deployment in agile world, securing the containers become critical task for cyber security organization to ensure data security. Misconfiguration alone caused 110 billion in latest cyber-attacks, so it essential secure the entire container environment.
CyberOne Approach
CyberOne utilizes NIST container security framework (800-190) to assess the container security and identified the security control weaknesses. Reviewed the security architecture, conducted the risk assessment and identified the right container security solution with seamless CI/CD pipeline integration along with cyber assurance tasks. Identified the vulnerabilities and worked on remediation support with various stakeholders.
Results and accomplishment
CyberOne demonstrates the values to customer by conducting multiple proof of concepts with Opensource and commercial tools and offered various security solutions. Successfully deployed the security solution which offers best in class build & runtime security and continuous monitoring. Fully integrated cloud native solutions with other critical cyber solutions & processes -SIEM, TVM-Threat and vulnerability management, Secops, GRC & reporting, ticketing platforms.
