gccalvin

@gccalvin@lemmy.world

This is a remote user, information on this page may be incomplete. View original ↗

⁨Comment⁩ on ⁨Drop OSS - an open-source, self-hosted alternative to platforms like Steam and Epic.⁩ ⁨⁨3⁩ ⁨days⁩ ago⁩:
ISO 27002 is a guidance and reference document for the ISO 27001 standard. There is no ISO 27002 certification. Organizations that wish to be ISO 27001 certified only have to follow the requirements listed in the ISO 27001 standard, not ISO 27002.

Regardless, I just reviewed the latest releases (ISO 27001:2022 and ISO 27002:2022). There is no mention of containers or containerization within ISO 27001. Containerization and virtualization are both mentioned within the 27002 reference, as a potential method of isolating confidential data. If anything, the document is recommending the use of containers as a preventive control measure.