Cloud Native Security
What is Cloud Native Security?
Security practices and tools designed specifically for cloud-native architectures including containers, microservices, and serverless computing. Cloud native security shifts protection closer to the workload and incorporates security into the CI/CD pipeline.
Terms that appear alongside cloud native security
Each of these is named in at least one of the same controls as cloud native security. The number is how many controls name both.
- compliance 3 shared controls
- policy 3 shared controls
- remediation 2 shared controls
- risk assessment 2 shared controls
- vulnerability 2 shared controls
- devsecops 2 shared controls
- software bill of materials 2 shared controls
- serverless security 2 shared controls
Frameworks that govern cloud native security
What the standards actually require on cloud native security
Requirements naming cloud native security across 4 standards, quoted from the control text.
When migrating legacy systems, agencies should make use of the native security services of the public cloud environment rather than rebuilding application architectures that depend on legacy perimeter controls for their security.
new-zealand-information-security-manual-nzism::2.3.26.C.02 · 2.3.26.C.02 Prefer cloud-native security over legacy perimeter controls →Apply cloud-native security principles: defense in depth, least privilege, zero trust, immutability, and secure-by-default across the 4C layers and lifecycle.
CNCF-SA-PRINCIPLES · Security Principles →HKMA TM-G-1 IT Strategy + Policies + Risk + Development + Change. (1) IT STRATEGY AND PLANNING (TM-G-1.3.1) - documented + Board-approved IT strategy aligned with business strategy + risk appetite + technology innovation + customer experience + investment plan...
HKMA-TMG1-Strategy-Policies-RiskAssessment-Dev-Change · TM-G-1 IT Strategy + Policies + Risk Assessment + Project Management + System Development + Change Management →ISMAP Cloud Infrastructure controls cover the underlying compute + network + storage + management plane. (1) Virtual Network Segmentation: VPC Virtual Private Cloud isolation + subnets + security groups + NACLs + microsegmentation + service mesh (Istio + Linke...
ISMAP-CloudInfrastructure-NetworkSegmentation-Container-Serverless-WorkloadProtection-Hardening-ConfigManagement · ISMAP Cloud Infrastructure - VPC Network Segmentation + Container/Serverless Security + Cloud Workload Protection (CWPP) + Image/Template Hardening + CIS Benchmarks + Configuration Management + IaC →Questions people ask about cloud native security
What is Cloud Native Security?
Why is Cloud Native Security important for compliance?
Which compliance frameworks address Cloud Native Security?
Where can I learn more about Cloud Native Security?
See how Cloud Native Security applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.