The Tanzu Kubernetes Grid (TKG) assessment, of the NIST SP 800-53 Rev. 5 security control standards, provides guidance for achieving compliance when using a shared responsibility model.
Many organizations are required to reference a standardized control framework when assessing the security and compliance of their information systems. Standardized control frameworks provide a model for how to protect information and data systems from threats, including malicious third parties, structural failures, and human error. NIST Special Publication 800-53 Rev. 5 is a comprehensive and commonly referenced framework. Adherence to these controls is required for many government agencies in the United States and for many private enterprises that operate within regulated markets, such as healthcare or finance. For example, the HIPAA regulations that govern the required protections for Personal Health Information (PHI) may be cross-referenced to the NIST SP 800-53 Rev. 5 control set.
Responsibility for any particular control may be assigned as indicated in the following table.
NIST SP 800-53 Control | Deployer Responsibility | TKG Provided | HYBRID (TKG and IaaS/Enterprise Share Responsibility) | Potential to Inherit from IaaS or Enterprise policy/tool | Security Control Baseline Moderate | Security Control Baseline High |
---|---|---|---|---|---|---|
AC-1 | Yes | Yes | x | x | ||
AC-2 | Yes | x | x | |||
AC-2(1) | Shared | x | x | |||
AC-2(2) | Yes | x | x | |||
AC-2(3) | Shared | x | x | |||
AC-2(4) | Shared | x | x | |||
AC-2(5) | Yes | x | x | |||
AC-2 (11) | Shared | x | ||||
AC-2(12) | Yes | x | ||||
AC-2 (13) | Shared | x | x | |||
AC-3 | Yes | x | x | |||
AC-4 | Shared | x | x | |||
AC-5 | Shared | x | x | |||
AC-6 | Yes | Yes | x | x | ||
AC-6(1) | Shared | x | x | |||
AC-6(2) | Shared | x | x | |||
AC-6 (3) | Yes | Yes | x | |||
AC-6(5) | Yes | x | x | |||
AC-6 (7) | Yes | Yes | x | x | ||
AC-6(9) | Yes | x | x | |||
AC-6(10) | Yes | x | x | |||
AC-7 | Yes | Yes | x | x | ||
AC-8 | Yes | x | x | |||
AC-10 | Shared | x | ||||
AC-11 | Yes | Yes | x | x | ||
AC-11(1) | Yes | Yes | x | x | ||
AC-12 | Shared | x | x | |||
AC-14 | Shared | x | x | |||
AC-17 | Yes | x | x | |||
AC-17(1) | Shared | x | x | |||
AC-17(2) | Shared | x | x | |||
AC-17(3) | Shared | x | x | |||
AC-17(4) | Shared | x | x | |||
AC-18 | N/A | x | x | |||
AC-18(1) | N/A | x | x | |||
AC-18 (3) | N/A | x | x | |||
AC-18 (4) | N/A | x | ||||
AC-18 (5) | N/A | x | ||||
AC-19 | N/A | x | x | |||
AC-19(5) | N/A | x | x | |||
AC-20 | Yes | Yes | x | x | ||
AC-20(1) | Yes | Yes | x | x | ||
AC-20(2) | Yes | Yes | x | x | ||
AC-21 | Yes | Yes | x | x | ||
AC-22 | Yes | Yes | x | x | ||
AT-1 | Yes | Yes | x | x | ||
AT-2 | Yes | Yes | x | x | ||
AT-2(2) | Yes | Yes | x | x | ||
AT-2(3) | Yes | Yes | x | x | ||
AT-3 | Yes | Yes | x | x | ||
AT-4 | Yes | Yes | x | x | ||
AU-1 | Yes | Yes | x | x | ||
AU-2 | Shared | x | x | |||
AU-3 | Shared | x | x | |||
AU-3(1) | Shared | x | x | |||
AU-4 | Yes | x | x | |||
AU-5 | Yes | x | x | |||
AU-5(1) | Yes | x | ||||
AU-5(2) | Yes | x | ||||
AU-6 | Shared | x | x | |||
AU-6(1) | Yes | x | x | |||
AU-6(3) | Yes | Yes | x | x | ||
AU-6 (5) | Yes | x | ||||
AU-6 (6) | Yes | x | ||||
AU-7 | Shared | x | x | |||
AU-7(1) | Shared | x | x | |||
AU-8 | Yes | x | x | |||
AU-9 | Shared | x | x | |||
AU-9(2) | Shared | x | ||||
AU-9 (3) | Yes | x | ||||
AU-9(4) | Yes | x | x | |||
AU-10 | Yes | x | ||||
AU-11 | Shared | x | x | |||
AU-12 | Shared | x | x | |||
AU-12 (1) | Shared | x | ||||
AU-12 (3) | Shared | x | ||||
CA-1 | Yes | Yes | x | x | ||
CA-2 | Yes | Yes | x | x | ||
CA-2(1) | Yes | Yes | x | x | ||
CA-2(2) | Yes | Yes | x | |||
CA-3 | Shared | x | x | |||
CA-3(6) | Shared | x | ||||
CA-5 | Shared | x | x | |||
CA-6 | Yes | Yes | x | x | ||
CA-7 | Yes | Yes | x | x | ||
CA-7(1) | Yes | Yes | x | x | ||
CA-7(4) | Yes | Yes | x | x | ||
CA-8 | Yes | Yes | x | |||
CA-8(1) | Yes | Yes | x | |||
CA-9 | Yes | x | x | |||
CM-1 | Yes | Yes | x | x | ||
CM-2 | Yes | x | x | |||
CM-2(2) | Yes | x | x | |||
CM-2(3) | Yes | x | x | |||
CM-2 (7) | Yes | Yes | x | x | ||
CM-3 | Yes | Yes | x | x | ||
CM-3 (1) | Shared | x | ||||
CM-3 (2) | Shared | x | x | |||
CM-3 (4) | Yes | Yes | x | x | ||
CM-3 (6) | Yes | x | ||||
CM-4 | Yes | Yes | x | x | ||
CM-4 (1) | Yes | Yes | x | |||
CM-4(2) | Yes | Yes | x | x | ||
CM-5 | Shared | x | x | |||
CM-5(1) | Yes | x | ||||
CM-6 | Shared | x | x | |||
CM-6(1) | Shared | x | ||||
CM-6 (2) | Shared | x | ||||
CM-7 | Yes | x | x | |||
CM-7(1) | Yes | x | x | |||
CM-7(2) | Yes | x | x | |||
CM-7(5) | Yes | x | x | |||
CM-8 | Yes | x | x | |||
CM-8(1) | Yes | x | x | |||
CM-8 (2) | Yes | x | ||||
CM-8(3) | Yes | x | x | |||
CM-8 (4) | Yes | x | ||||
CM-9 | Yes | Yes | x | x | ||
CM-10 | Yes | Yes | x | x | ||
CM-11 | Yes | Yes | x | x | ||
CM-12 | Yes | x | x | |||
CM-12(1) | Yes | x | x | |||
CP-1 | Yes | Yes | x | x | ||
CP-2 | Yes | Yes | x | x | ||
CP-2(1) | Yes | Yes | x | x | ||
CP-2(2) | Yes | Yes | x | |||
CP-2(3) | Yes | Yes | x | x | ||
CP-2 (5) | Yes | Yes | x | |||
CP-2(8) | Yes | Yes | x | x | ||
CP-3 | Yes | Yes | x | x | ||
CP-3 (1) | Yes | Yes | x | |||
CP-4 | Yes | Yes | x | x | ||
CP-4(1) | Yes | Yes | x | x | ||
CP-4 (2) | Yes | Yes | x | |||
CP-6 | Yes | Yes | x | x | ||
CP-6 (1) | Yes | Yes | x | x | ||
CP-6 (2) | Yes | Yes | x | |||
CP-6 (3) | Yes | Yes | x | x | ||
CP-7 | Yes | Yes | x | x | ||
CP-7 (1) | Yes | Yes | x | x | ||
CP-7 (2) | Yes | Yes | x | x | ||
CP-7 (3) | Yes | Yes | x | x | ||
CP-7 (4) | Yes | Yes | x | |||
CP-8 | Yes | Yes | x | x | ||
CP-8 (1) | Yes | Yes | x | x | ||
CP-8 (2) | Yes | Yes | x | x | ||
CP-8 (3) | Yes | Yes | x | |||
CP-8 (4) | Yes | Yes | x | |||
CP-9 | Shared | x | x | |||
CP-9(1) | Shared | x | x | |||
CP-9 (2) | Shared | x | ||||
CP-9 (3) | Shared | x | ||||
CP-9 (5) | Shared | x | ||||
CP-9(8) | Shared | x | x | |||
CP-10 | Shared | x | x | |||
CP-10(2) | Shared | x | x | |||
CP-10 (4) | Shared | x | ||||
IA-1 | Yes | Yes | x | x | ||
IA-2 | Shared | x | x | |||
IA-2(1) | Shared | x | x | |||
IA-2(2) | Shared | x | x | |||
IA-2 (5) | Shared | x | ||||
IA-2(8) | Shared | x | x | |||
IA-2(12) | Shared | x | x | |||
IA-3 | Shared | x | x | |||
IA-4 | Yes | x | x | |||
IA-4(4) | Shared | x | x | |||
IA-5 | Shared | x | x | |||
IA-5(1) | Shared | x | x | |||
IA-5 (2) | Shared | x | x | |||
IA-5 (6) | Yes | x | x | |||
IA-6 | Shared | x | x | |||
IA-7 | Yes | x | x | |||
IA-8 | Yes | Yes | x | x | ||
IA-8(1) | Yes | Yes | x | x | ||
IA-8(2) | Yes | Yes | x | x | ||
IA-8(4) | Yes | Yes | x | x | ||
IA-11 | Yes | Yes | x | x | ||
IA-12 | Yes | Yes | x | x | ||
IA-12(2) | Yes | Yes | x | x | ||
IA-12(3) | Yes | Yes | x | x | ||
IA-12(4) | Yes | Yes | x | |||
IA-12(5) | Yes | Yes | x | x | ||
IR-1 | Yes | Yes | x | x | ||
IR-2 | Yes | Yes | x | x | ||
IR-2 (1) | Yes | Yes | x | |||
IR-2 (2) | Yes | Yes | x | |||
IR-3 | Yes | Yes | x | x | ||
IR-3(2) | Yes | Yes | x | x | ||
IR-4 | Yes | Yes | x | x | ||
IR-4(1) | Yes | Yes | x | x | ||
IR-4 (4) | Yes | Yes | x | |||
IR-4(11) | Shared | x | ||||
IR-5 | Shared | x | x | |||
IR-5 (1) | Shared | x | ||||
IR-6 | Yes | Yes | x | x | ||
IR-6(1) | Yes | Yes | x | x | ||
IR-6(3) | x | x | ||||
IR-7 | Yes | Yes | x | x | ||
IR-7(1) | Yes | Yes | x | x | ||
IR-8 | Yes | Yes | x | x | ||
MA-1 | Yes | Yes | x | x | ||
MA-2 | Yes | Yes | x | x | ||
MA-2 (2) | Yes | x | ||||
MA-3 | Yes | Yes | x | x | ||
MA-3 (1) | Yes | Yes | x | x | ||
MA-3 (2) | Yes | Yes | x | x | ||
MA-3 (3) | Yes | Yes | x | x | ||
MA-4 | Yes | Yes | x | x | ||
MA-4 (3) | Yes | Yes | x | |||
MA-5 | Yes | Yes | x | x | ||
MA-5 (1) | Yes | Yes | x | |||
MA-6 | Yes | Yes | x | x | ||
MP-1 | Yes | Yes | x | x | ||
MP-2 | Yes | Yes | x | x | ||
MP-3 | Yes | Yes | x | x | ||
MP-4 | Yes | Yes | x | x | ||
MP-5 | Yes | Yes | x | x | ||
MP-6 | Yes | Yes | x | x | ||
MP-6 (1) | Yes | Yes | x | |||
MP-6 (2) | Yes | Yes | x | |||
MP-6 (3) | Yes | Yes | x | |||
MP-7 | Yes | Yes | x | x | ||
PE-1 | Yes | Yes | x | x | ||
PE-2 | Yes | Yes | x | x | ||
PE-3 | Yes | Yes | x | x | ||
PE-3 (1) | Yes | Yes | x | |||
PE-4 | Yes | Yes | x | x | ||
PE-5 | Yes | Yes | x | x | ||
PE-6 | Yes | Yes | x | x | ||
PE-6 (1) | Yes | Yes | x | x | ||
PE-6 (4) | Yes | Yes | x | |||
PE-8 | Yes | Yes | x | x | ||
PE-8 (1) | Yes | Yes | x | |||
PE-9 | Yes | Yes | x | x | ||
PE-10 | Yes | Yes | x | x | ||
PE-11 | Yes | Yes | x | x | ||
PE-11 (1) | Yes | Yes | x | |||
PE-12 | Yes | Yes | x | x | ||
PE-13 | Yes | Yes | x | x | ||
PE-13 (1) | Yes | Yes | x | x | ||
PE-13 (2) | Yes | Yes | x | |||
PE-14 | Yes | Yes | x | x | ||
PE-15 | Yes | Yes | x | x | ||
PE-15 (1) | Yes | Yes | x | |||
PE-16 | Yes | Yes | x | x | ||
PE-17 | Yes | Yes | x | x | ||
PE-18 | Yes | Yes | x | |||
PL-1 | Yes | Yes | x | x | ||
PL-2 | Yes | Yes | x | x | ||
PL-4 | Yes | Yes | x | x | ||
PL-4(1) | Yes | Yes | x | x | ||
PL-8 | Shared | x | x | |||
PL-10 | Yes | Yes | x | x | ||
PL-11 | Yes | Yes | x | x | ||
PS-1 | Yes | Yes | x | x | ||
PS-2 | Yes | Yes | x | x | ||
PS-3 | Yes | Yes | x | x | ||
PS-4 | Yes | Yes | x | x | ||
PS-4 (2) | Yes | Yes | x | |||
PS-5 | Yes | Yes | x | x | ||
PS-6 | Yes | Yes | x | x | ||
PS-7 | Yes | Yes | x | x | ||
PS-8 | Yes | Yes | x | x | ||
PS-9 | x | x | ||||
RA-1 | Yes | Yes | x | x | ||
RA-2 | Yes | Yes | x | x | ||
RA-3 | Yes | Yes | x | x | ||
RA-3(1) | Yes | Yes | x | x | ||
RA-5 | Yes | x | x | |||
RA-5(2) | Yes | x | x | |||
RA-5 (4) | Yes | x | ||||
RA-5(5) | Yes | x | x | |||
RA-5(11) | Yes | Yes | x | x | ||
RA-7 | Yes | x | x | |||
RA-9 | Yes | Yes | x | x | ||
SA-1 | Yes | Yes | x | x | ||
SA-2 | Yes | Yes | x | x | ||
SA-3 | Yes | Yes | x | x | ||
SA-4 | Yes | Yes | x | x | ||
SA-4(1) | Yes | Yes | x | x | ||
SA-4(2) | Yes | Yes | x | x | ||
SA-4(5) | Yes | Yes | x | |||
SA-4(9) | Yes | Yes | x | x | ||
SA-4 (10) | Yes | Yes | x | x | ||
SA-5 | Yes | Yes | x | x | ||
SA-8 | Yes | Yes | x | x | ||
SA-9 | Yes | Yes | x | x | ||
SA-9(2) | Yes | Yes | x | x | ||
SA-10 | Yes | Yes | x | x | ||
SA-11 | Yes | Yes | x | x | ||
SA-15 | Yes | Yes | x | x | ||
SA-15(3) | Yes | Yes | x | x | ||
SA-16 | Yes | Yes | x | |||
SA-17 | Yes | Yes | x | |||
SA-21 | Yes | Yes | x | |||
SA-22 | Yes | x | x | |||
SC-1 | Yes | Yes | x | x | ||
SC-2 | Yes | x | x | |||
SC-3 | Yes | x | ||||
SC-4 | Yes | x | x | |||
SC-5 | Yes | x | x | |||
SC-7 | Yes | x | x | |||
SC-7(3) | Yes | x | x | |||
SC-7(4) | Yes | x | x | |||
SC-7(5) | Yes | x | x | |||
SC-7 (7) | N/A | x | x | |||
SC-7(8) | Yes | x | x | |||
SC-7(18) | Yes | x | ||||
SC-7 (21) | Yes | x | ||||
SC-8 | Yes | x | x | |||
SC-8(1) | Yes | x | x | |||
SC-10 | Yes | x | x | |||
SC-12 | Yes | x | x | |||
SC-12 (1) | Yes | x | ||||
SC-13 | Yes | x | x | |||
SC-15 | N/A | x | x | |||
SC-17 | Yes | x | x | |||
SC-18 | Yes | x | x | |||
SC-20 | Yes | x | x | |||
SC-21 | Yes | x | x | |||
SC-22 | Yes | x | x | |||
SC-23 | Yes | x | x | |||
SC-24 | Yes | x | ||||
SC-28 | Yes | x | x | |||
SC-28(1) | Yes | x | x | |||
SC-39 | Yes | x | x | |||
SI-1 | Yes | Yes | x | x | ||
SI-2 | Yes | x | x | |||
SI-2(2) | Yes | x | x | |||
SI-3 | Yes | x | x | |||
SI-4 | Yes | x | x | |||
SI-4(2) | Yes | x | x | |||
SI-4(4) | Yes | x | x | |||
SI-4(5) | Yes | x | x | |||
SI-4(10) | Yes | x | ||||
SI-4(12) | Yes | x | ||||
SI-4 (14) | N/A | x | ||||
SI-4 (20) | Shared | x | ||||
SI-4 (22) | Yes | x | ||||
SI-5 | Yes | x | x | |||
SI-5 (1) | Yes | x | ||||
SI-6 | Shared | x | ||||
SI-7 | Yes | x | x | |||
SI-7(1) | Yes | x | x | |||
SI-7 (2) | Yes | x | ||||
SI-7 (5) | Yes | x | ||||
SI-7(15) | Yes | x | ||||
SI-8 | Yes | Yes | x | x | ||
SI-8(3) | Yes | Yes | x | x | ||
SI-10 | Yes | x | x | |||
SI-11 | Yes | x | x | |||
SI-12 | Yes | x | x | |||
SI-16 | Yes | x | x | |||
SR-1 | Yes | Yes | x | x | ||
SR-2 | Yes | Yes | x | x | ||
SR-2(1) | Yes | Yes | x | x | ||
SR-3 | Yes | Yes | x | x | ||
SR-5 | Yes | Yes | x | x | ||
SR-6 | Yes | Yes | x | x | ||
SR-8 | Yes | x | x | |||
SR-9 | Yes | x | ||||
S9-9(1) | Yes | x | ||||
SR-10 | Yes | Yes | x | x | ||
SR-11 | Yes | Yes | x | x | ||
SR-11(1) | Yes | Yes | x | x | ||
SR-11(2) | Yes | x | x | |||
SR-12 | Shared | x | x |