Zero-Trust for Cloud-Native Workloads Maturity Assessment

This survey will help you understand what you are missing and guide you through what is required to successfully start and continuously improve your security posture for zero-trust workloads

Take the Quiz Now

Build-time considerations:

Question 1/21

Do you regularly scan your container images for vulnerabilities, threats, and misconfigurations before they are deployed?

Yes no Partially

Question 2/21

Do you use an automated system that blocks the deployment of images that fail the security test?

Yes no

Deploy-time considerations:

Question 3/21

Do you assess the configuration of your Kubernetes environment against industry benchmarks, such as CIS?

yes no Partially

Question 4/21

Do you follow security standards while providing access to critical Kubernetes resources such as api-server and etcd?

Yes no

Question 5/21

Do you encrypt all data in transit using certificates?

Yes no Partially

Question 6/21

Do you manually configure the encryption service provider for data?

Yes no

Question 7/21

Do you configure security policies for your workloads prior to deploying them to production?

At host level only At pod level only At both host and pod levels Not configured prior to deployment

Question 8/21

How do you specify your security policies?

Specify security policies as code Specify security policies manually

Question 9/21

Does your security tool’s policy engine let you review, stage, and preview security policies before deployment?

Yes no

Runtime security considerations:

Question 10/21

Do you have any of the following threat detection and mitigation tools for workload security?

select all that apply

DDoS mitigation IDS/IPS for cloud workloads Deep packet inspection (DPI) None

Question 11/21

Does your web application firewall (WAF) operate at the workload level and have protection and visibility into east-west traffic?

Yes No

Question 12/21

What is your current strategy on unknown threats?

Legacy IPS solution Behavioral-learning based runtime security solution powered by machine learning (ML) None

Question 13/21

What type of egress access controls do you have in place for zero-trust workload access?

select all that apply

Integration with perimeter firewall DNS policies IP addresses/CIDR for network policy None

Question 14/21

Do you follow best practices for label selectors while configuring security policies?

Yes No Partially

Question 15/21

Have you segmented your workloads based on workload identity?

Yes No

Question 16/21

Do you have pod-level, granular policy-creation capabilities?

Yes No Partially

Question 17/21

Do you provide role-based views for policies based on application and location?

Yes No Partially

Question 18/21

Are you able to microsegment your policies based on any of the following?

Choose all that apply

Workloads (containers, VMs, hosts, etc.) Environments (dev, test, etc.) Application Compliance None of the above

Question 19/21

Do you have a security policy recommender for creating policies?

Yes No

Question 20/21

Does your platform team have access to application-level observability?

Yes No Partially

Question 21/21

What level of automation does the security team have, to automate simple tasks related to threat mitigation and reducing false positives?

Complete SOAR solution In-house developed scripts None

Score:

Your zero-trust assessment score:

0/50

Your security posture for zero trust:

Download the complete zero-trust recommendation guide today

Download