Container and Docker Security Audit Checklist

This container and Docker security audit checklist ensures compliance with CIS Docker Benchmark v1.5, NIST SP 800-190 Application Container Security Guide, and MITRE ATT&CK for Containers Matrix. Designed for DevSecOps teams and container platform administrators to harden container environments.

  • Industry: Telecommunications & IT
  • Frequency: Quarterly
  • Estimated Time: 30-40 minutes
  • Role: DevSecOps Engineer / Container Platform Admin
  • Total Items: 13
  • Compliance: CIS Docker Benchmark v1.5, NIST SP 800-190 Application Container Security Guide, MITRE ATT&CK for Containers Matrix, OWASP Docker Security Cheat Sheet, ISO/IEC 27001:2022 A.8.9 Configuration Management

Container Host Security

Host OS hardening and Docker daemon configuration.

  • Containers run on hardened, container-optimized OS (Bottlerocket/CoreOS/RHCOS)?
  • Docker daemon API protected with TLS if remote access is needed?
  • Docker socket (/var/run/docker.sock) not mounted into containers?
  • Docker-related file and directory audit logging configured (CIS 1.1.x)?

Image Security and Registry

Base image selection, vulnerability scanning, and registry controls.

  • Minimal base images used (Alpine, Distroless) to reduce attack surface?
  • Containers run as non-root USER specified in Dockerfile?
  • All images scanned in registry before deployment (Trivy/Snyk/Anchore)?
  • Container registry requires authentication; no anonymous pull access?

Runtime Security Controls

Container runtime restrictions and monitoring.

  • Containers use --read-only root filesystem where possible?
  • No containers running with --privileged flag in production?
  • Unnecessary Linux capabilities dropped (--cap-drop=ALL, add only required)?
  • Runtime security monitoring (Falco/Aqua/Sysdig) detecting anomalous behavior?
  • Container Security Audit Notes

Related IT & Data Security Checklists

Related Cybersecurity Checklists

Why Use This Container and Docker Security Audit Checklist?

This container and docker security audit checklist helps telecommunications & it teams maintain compliance and operational excellence. Designed for devsecops engineer / container platform admin professionals, this checklist covers 13 critical inspection points across 3 sections. Recommended frequency: quarterly.

Ensures compliance with CIS Docker Benchmark v1.5, NIST SP 800-190 Application Container Security Guide, MITRE ATT&CK for Containers Matrix, OWASP Docker Security Cheat Sheet, ISO/IEC 27001:2022 A.8.9 Configuration Management. Regulatory-aligned for audit readiness and inspection documentation.

Frequently Asked Questions

What does the Container and Docker Security Audit Checklist cover?

This checklist covers 13 inspection items across 3 sections: Container Host Security, Image Security and Registry, Runtime Security Controls. It is designed for telecommunications & it operations and compliance.

How often should this checklist be completed?

This checklist should be completed quarterly. Each completion takes approximately 30-40 minutes.

Who should use this Container and Docker Security Audit Checklist?

This checklist is designed for DevSecOps Engineer / Container Platform Admin professionals in the telecommunications & it industry. It can be used for self-assessments, team audits, and regulatory compliance documentation.

Can I download this checklist as a PDF?

Yes, this checklist is available as a free PDF download. You can also use it digitally in the POPProbe mobile app for real-time data capture, photo documentation, and automatic reporting.

Browse More Checklists