Cyber Risks · Qualys Blog

Extending your FedRAMP Program to Container Infrastructure with the Qualys Cloud Platform | Qualys

Summary: Following FedRAMP's release of Vulnerability Scanning Requirements for Containers, FedRAMP-authorized systems using containers had one month from March 16, 2021 to submit a compliance plan. FedRAMP defines five core requirements for Cloud Service Providers using containers, and Qualys states its Container Security product, built on the FedRAMP-authorized Qualys Cloud Platform, scans images and running containers across the build-ship-run lifecycle to support those requirements and POA&M reporting.

Why it matters: The deadline was one month from March 16, 2021, and the tools used to meet the requirements must themselves be FedRAMP-authorized - a constraint that narrows the options for any CSP running containers in a FedRAMP boundary.

Read the original at Qualys Blog ↗

Topics
Cloud Security
Related