Page 6 of the DSE IT knowledge center, with source-backed guidance and practical next steps.
Production-minded guidance for endpoints, servers, updates, cloud services, administration, and supportable operations.
A CI/CD pipeline carries source through build, test, package, and deployment operations. Protect each transition, identity, dependency, artifact, approval, and evidence record in the path.
Read the playbook
Microservices depend on APIs and shared architectural services. Define how each service authenticates, authorizes, discovers peers, protects traffic, limits load, records events, and fails.
Read the guide
A proxy-based service mesh can centralize important service-to-service functions. Govern its identity, trust, policy, telemetry, availability, bypass paths, and change control as production security infrastructure.
Read the checklist
Block, file, object, virtualized, and cloud storage bring distinct control and recovery paths. Inventory data flows, management planes, identities, isolation, protection, restoration, and encryption as one system.
Read the guide
VM traffic may traverse virtual switches, overlays, host paths, and distributed controls. Design segmentation, redundancy, traffic enforcement, and monitoring against the real path.
Read the checklist
Cryptography depends on keying material that must be created, protected, used, rotated, recovered, archived, revoked, and destroyed according to its purpose and risk.
Read the guide
TLS security depends on protocol versions, algorithms, certificates, extensions, endpoints, and application behavior. Inventory and test both sides before removing an old path or enabling a new one.
Read the checklist
FIPS 203 specifies ML-KEM for establishing shared secret keys. Adoption still requires a supported protocol binding, implementation, parameter choice, key lifecycle, interoperability test, and rollback plan.
Read the guide
FIPS 204 specifies ML-DSA for digital signatures. Production use also depends on formats, identity binding, key protection, verification support, archival needs, revocation, performance, and current errata.
Read the guide
SP 800-171 Rev. 3 applies recommended confidentiality requirements to nonfederal system components that process, store, transmit, or protect CUI. Start with authoritative scope and data flow.
Read the guide