1. Managing Compliance in
Container Environments

2. Today’s Speakers
Adam Greenfield
Senior Director of Enterprise Architecture, ClearDATA
Tech-savvy professional, expert in the Service Provider space:
ClearDATA, HOSTING, Idle Pattern and Site5
Patrick Maddox
Senior Director of Solutions Architecture, Twistlock
Leads Twistlock Solutions Architecture team
20 years of IT experience, recently at Puppet and Verizon Enterprise

3. Software is being written and deployed
at an increasing pace
© 2017 Source: Forrester Data Global Business Technographics® Developer Survey, 2017
of developers build
multiple times
a day
34%
of developers say
they release code
monthly or faster
36%

4. DevOps, linked with container adoption, is
driving digital transformation
© 2017 Source: Cloud Foundry 2016 Container Report
of organizations
are already utilizing
containers or evaluating
their use50%

5. Enterprises are continually being measured
against more compliance standards
© 2017

6. HIPAA violations can cost companies
dearly
© 2017
Sources: TrueVault – What is the penalty for a HIPAA violation? | BDO.com – 6 Things to Know about Healthcare’s Cyber Threat Landscape
Per incident cost with
failure to protect
information
$50,000
The average cost of
a healthcare data
breach
$7M

7. Cloud
native
cyber
security
from top to
bottom of
the stack
Cloud native cyber security
from beginning to end of the
dev lifecycle
© 2017 Confidential 7

8. Why Twistlock?
Technology pioneer and innovator
Started in early 2015 as the first ever purpose-built solution for
containers and cloud native security
13 patents pending
3 container related 0-days discovered by our research team
Market leader
Customers across US, EMEA, APAC
Enterprise grade global support with 24/7/365 SLA
Ecosystem leader
We built the authorization framework in Docker and OpenShift
and secrets management in Docker Swarm
Lead author of NIST SP 800-190, the Container Security Guide
The launch partners for Amazon, Google, and Microsoft’s
container services
© 2017 Confidential 8
Open source and standards work
Partnerships
Awards & press

9. Twistlock platform
© 2017 Confidential 9
Access control
Compliance
Runtime defense
Cloud native firewalling
Vulnerability management

10. © 2017 Confidential 10
Twistlock Architecture
Host OS
Metal / VM / IaaS
Docker Engine
AppA
AppA’
AppB
AppB’
AppB’
AppA’
AppA’
AppA’
Intelligence
Stream
Host OS
Metal / VM / IaaS
Docker Engine
AppC
AppC’
AppD
AppD’
AppD’
AppD’
AppD’
AppD’
Console
Defender
Threats and CVEs Intel Stream
Policy
Events
CI Plugins
Intel
Registries

11. Compliance
© 2017 Confidential 11
>90 out of the box checks for
covering the Docker and
Kubernetes CIS Benchmarks,
customizable via OpenSCAP
Trusted Images for precise
control over what images are
allowed to run where
Compliance Explorer
dashboard tracks what’s
important to you

12. Compliance rules
© 2017 12Confidential

13. HEALTHCARE
Exclusive
CLOUD
SECURITY
Experts
CERTIFIED
Experience
• BAA with the most coverage of any
leading provider
• Incorporates existing infrastructure
BAAs into a single BAA
THE CLEARDATA DIFFERENCE
ENHANCED
BAA

14. 14PROPRIETARY & CONFIDENTIAL
Containerized Network Isolation
for Sensitive Healthcare Applications

15. © 2017 Confidential 15
ClearDATA Secures Container Development
ClearDATA secures container deployment by managing PHI-capable container clusters in a
HIPAA compliant infrastructure.

16. © 2017 Confidential 16
ClearDATA PHI Container Reference Architecture

17. © 2017 Confidential 17
• Simplified HIPAA / FDA
compliance guidelines
• Access to obscure security data
from disparate systems
• Mitigate HIPAA audit risk
Compliance and Security
Safeguards Dashboard

18. © 2017 Confidential 18
Summary and
detailed history
HIPAA rules
reference and
interpretation
Direct access to
raw and
consolidated logs
GMP rules
reference and
interpretation

19. Questions