turnover ○ Threat model ○ New and disruptive technologies, e.g., quantum computers Key rotation: compliance PCI DSS v3.2.1 3.5 Document and implement procedures to protect keys used to secure stored cardholder

Kubernetes 時，面臨的最大挑戰是什麼？ • In-house skills / manpower • Company culture • Tooling • Security & Compliance 10 Canonical (Ubuntu) – K8S Operation Survey @2021/Nov, 1300 受訪者 Click to edit Master title style

Minimization of Attack Surface f. Network Security g. Auditing h. Authentication and Authorization i. Compliance j. File System Permissions k. User Account Management 所有強化在發佈前都經過測試驗證 您不再需要每回合升級都從頭來過

备份策略、备份方式、恢复方式、备份管理等等。 Disaster Recovery & High Availability Failover/Switchover、多可用区、数据恢复等等。 Security & Compliance 访问控制、审计、安全链接、加密存储等等。 Patching & Upgrades 小版本升级、大版本升级、安全漏洞修复等等。 Data Migrations 迁移、同步、清洗、跨地域、灾备、多活等等。