Security Self-Assessment
Cadence does not yet have a published CNCF TAG Security and Compliance self-assessment. Opening a formal self-assessment is planned as a follow-up to this technical review, coordinated with TAG Security and Compliance once Cadence's Sandbox review is underway.
Planned Process
The Cadence project will:
- Nominate a security project leader
- Write a formal self-assessment
- Open a Joint Security Review issue in the CNCF TOC repository, which routes the request to TAG Security and Compliance
The remaining pages in this section (Cloud Native Security Tenets, Security Hygiene, and Cloud Native Threat Modeling) cover the same ground the self-assessment template asks for and can seed that document when it is opened. They should be viewed as speculative until the TAG Security and Compliance team has reviewed them as part of the Joint Security Review.