Positive Technologies has introduced PT CRIS Kubernetes, the first Russian standard for evaluating container infrastructure security. The framework consolidates 64 specific technical checks, ranging from API server and etcd settings to access control and workload parameters, each assigned a criticality level.
The standard addresses security risks stemming from misconfigurations, such as excessive privileges or root access, which can lead to unauthorized cluster control. It provides a unified reference for security teams to translate general recommendations into actionable infrastructure settings.
The company has also released a compliance matrix mapping PT CRIS Kubernetes to international and local standards, including CIS Kubernetes Benchmark v2.0.0, NIST SP 800-190, PCI DSS v4.0, and FSTEC Order No. 118. This allows teams to link high-level security goals to specific technical parameters.
Practical implementation is available in version 1.2 of PT Container Security. The updated product features a new scanning component that improves performance by reducing memory consumption and accelerating cluster analysis, supporting both central and child clusters.
