Security

IBM Z and Cloud Modernization Stack follows IBM Security and Privacy by Design (SPbD). SPbD at IBM is a set of focused security and privacy practices, including vulnerability management, threat modeling, penetration testing, privacy assessments, security testing, and patch management. Learn more at IBM Security and Privacy by Design.

Securing a Kubernetes environment, such as Red Hat® OpenShift® Container Platform can be a complex process, with many options for fine-grained adjustments. IBM z/OS® also offers many options for configuring and managing security.

IBM Z and Cloud Modernization Stack provides a secure set of default settings, as required for product certification by IBM® and Red Hat®. However, default settings in Red Hat® OpenShift® Container Platform can be overridden by administrators of Red Hat® OpenShift® Container Platform clusters and those changes can impact the overall security profile for any products that run on the cluster.

The documentation provided here aims to be a high-level guide with links to more comprehensive and detailed security documentation that is provided by Red Hat® OpenShift® Container Platform and IBM z/OS®. To get a complete picture of your security options and any limitations, you must thoroughly review the security documentation for Red Hat® OpenShift® Container Platform and IBM z/OS:

• Security and compliance for Red Hat OpenShift Container Platform .
• IBM z/OS documentation.

Additionally, products and components in IBM Z and Cloud Modernization Stack may have specific security guidelines or requirements. To learn more, see the documentation for each product or component.