Twistlock Announces Availability of Companion Guide to NIST Container Security Special Publication

SAN FRANCISCO, Sept. 27, 2017 /PRNewswire/ -- Twistlock, the leading provider of container and cloud native cybersecurity solutions, today announced the availability of a companion guide to NIST SP 800-190, the Container Security Guide. Twistlock's companion guide is designed to provide a diverse set of readers—from DevOps engineers to security professionals to CISOs, with a clear understanding of how to operationalize the recommendations in the Special Publication using Twistlock's platform.  The companion guide includes detailed recommendations that map each section of the NIST guide to specific capabilities and recommended configurations in the Twistlock platform, helping organizations rapidly roll out and enforce the NIST recommendations.

The NIST team develops security standards that help protect hundreds of millions of PCs and servers around the world, and NIST 800 series Special Publications are seen as the gold standard for understanding the threats and countermeasures for protecting critical software infrastructure. The SP 800-190 guide takes the same consistent threat modeling approach as previous NIST SPs and applies it to the cloud native stack from hypervisor to container runtime to orchestrator and across the whole application lifecycle, from the beginning of the CI process to production.

John Morello, CTO of Twistlock, partnered with NIST to author SP 800-190 and had this to say about the SP and Twistlock's companion guide: "The existence of the container security SP is a great validation of containers as a first tier enterprise technology. One of the great things about containers is their flexibility and versatility which means it can be challenging to adopt recommendations into your own operating environment and processes. The Twistlock NIST Companion Guide sets out to solve those challenges, taking a prescriptive approach to the steps required to enforce NIST compliance, so it acts as a sort of deployment template. By enabling countermeasures through Twistlock, organizations can implement the NIST recommendations with centralized control and monitoring."

In the past, Twistlock has contributed many security capabilities to Docker and OpenShift in the open source community. Beyond the code, Twistlock has also been actively contributing to the body of knowledge around best practices for container security. The NIST SP Container Security Companion Guide is the latest example of how Twistlock contributes to shaping best practices for organizations using containers, and Twistlock has similar companion guides for PCI and HIPAA--both of which support technical and compliance teams who work with containers in the cardholder data environment and the medical communities, respectively.

To check out the new NIST Companion Guide from Twistlock, please visit www.twistlock.com/NIST.

Additional Resources:

• Check out the Twistlock blog
• Follow us on Twitter
• Follow us on LinkedIn

About Twistlock

Twistlock is the leading provider of container and cloud native cybersecurity solutions for modern applications.  From precise, actionable vulnerability management to automatically deployed runtime protection and firewalls, Twistlock protects applications across the development lifecycle and into production.  Purpose built for containers, serverless, and other leading technologies - Twistlock gives developers the speed they want, and CISOs the controls they need. Twistlock's mission is to provide a full, enterprise-grade security stack for containers, so organizations can confidently adopt and maximize the benefits of containers in their production environment. For more information, please visit www.twistlock.com

Twistlock Contacts
Jeannie Christensen
415.341.6713
[email protected] 

Media Relations
Rachel Nelson
415-299-6600
[email protected]

SOURCE Twistlock

Related Links

https://www.twistlock.com