Skip to main content
Hannah Braswell
Associate Product Security Engineer
View all authors

Cloud Native Security Controls Catalog: Refreshed, Structured, and Machine-Readable

ยท 3 min read
Sonu Preetam
Product Security Engineer
Jennifer Power
Principal Product Security Engineer
Hannah Braswell
Associate Product Security Engineer

Revised security guidance has been released by CNCF advisors to streamline cloud-native project security assessments.

Initially created in 2022 by CNCF's TAG Security and Compliance (TAG-SC), the Cloud Native Security Controls Catalog (CNSC Catalog) is a direct, actionable list of controls mapped to NIST SP 800-53 Rev. 5. To incorporate emerging technologies, tools, and research, a new version of the catalog has been created and released in 2026.