https://sdlc.kosli.com/controls/runtime/ Recent content in Runtime Controls on Kosli's Software Development Lifecycle Hugo en-us https://sdlc.kosli.com/controls/runtime/change_records/ Mon, 01 Jan 0001 00:00:00 +0000 https://sdlc.kosli.com/controls/runtime/change_records/ All systems and services maintain a permanent record of changes, providing a forensic history of all deployments to production. https://sdlc.kosli.com/controls/runtime/deployment_controls/ Mon, 01 Jan 0001 00:00:00 +0000 https://sdlc.kosli.com/controls/runtime/deployment_controls/ Deployment controls are enforced in the pipeline and at runtime to ensure only compliant, approved software is deployed to production. https://sdlc.kosli.com/controls/runtime/secrets_managment/ Mon, 01 Jan 0001 00:00:00 +0000 https://sdlc.kosli.com/controls/runtime/secrets_managment/ Build and runtime secrets are stored securely in dedicated secrets management systems, with documented ownership, rotation schedules, and access controls. https://sdlc.kosli.com/controls/runtime/system_access/ Mon, 01 Jan 0001 00:00:00 +0000 https://sdlc.kosli.com/controls/runtime/system_access/ All access to runtime environments requires authentication via SSO and generates full audit trails for review. https://sdlc.kosli.com/controls/runtime/workload_monitoring/ Mon, 01 Jan 0001 00:00:00 +0000 https://sdlc.kosli.com/controls/runtime/workload_monitoring/ Production workloads are continuously monitored to detect and alert on any non-compliant or unauthorised changes in real time. https://sdlc.kosli.com/controls/runtime/drift_detection/ Mon, 01 Jan 0001 00:00:00 +0000 https://sdlc.kosli.com/controls/runtime/drift_detection/ Infrastructure and configuration are continuously monitored for drift from the approved baseline defined as code, detecting unauthorised or unintended changes. https://sdlc.kosli.com/controls/runtime/vulnerability_scanning_containers_runtime/ Mon, 01 Jan 0001 00:00:00 +0000 https://sdlc.kosli.com/controls/runtime/vulnerability_scanning_containers_runtime/ Container images already running in production are periodically re-scanned for vulnerabilities, so that CVEs disclosed after deployment are detected against live workloads.