IT Grundschutz/ISO27001 + k8s + real life = 🖤 ??? Marcus Ross and Stephan Detmar

This talk explores the implementation of requirements from the BSI IT baseline protection catalog and ISO27001 in Kubernetes environments, using the Hamburg Port Authority as a case study. The speakers share practical experiences and challenges faced by their platform team while applying IT-Grundschutz building blocks in critical infrastructure production clusters, particularly in the APP.4.4 Kubernetes area. Participants will gain insights into secure Kubernetes setups that align with IT-Grundschutz and ISO27001, complete with real-life examples and demonstrations from the terminal, reflecting genuine experiences without promotional content.