Base
Hardened build
minimal ports, security patches applied at build time
Deming ISMS on Ubuntu 24.04
Azure
Security
run your ISO 27001 information security management system in one place: controls, security measures, risks, action plans and audits
Overview
Deming is an open source information security management system (ISMS) and governance, risk and compliance application. Security and compliance teams use it to run an ISO 27001 programme in one place: maintain the catalogue of security controls and the security measures that implement them, record and score risks, plan and track remediation actions, run internal audits and record observations, and report on the maturity of the whole management system. The ISO 27001:2022 control set ships pre-loaded, and the product also carries ISO 27001:2013, ISO 22301, DORA, NIS2, PCI DSS 4.0 and NIST 800-53 ready to import.
Why the cloudimg image
cloudimg ships the full Deming application assembled and hardened, served by nginx and PHP 8.4 with MariaDB, with the ISO 27001:2022 controls already imported, so a working ISMS answers within minutes of launch. There is no shared credential in the image: it carries no environment file, no application encryption key and no database schema, so the documented default administrator account does not exist in the image. On first boot each instance mints its own encryption key, database password and administrator password, imports the controls, rotates the seeded administrator to that per instance password and scrambles the demonstration accounts, then proves the defaults are dead before it will serve. The web server and PHP runtime are gated on a bootstrap marker, and public self registration is disabled, so an unprovisioned instance can never be reached.
Common uses
- Running an ISO 27001:2022 programme: controls, security measures and a maturity model
- Managing a risk register with configurable scoring, a risk matrix and action plans
- Internal audits, exceptions and compliance reporting across DORA, NIS2, PCI DSS and NIST 800-53
See it running
Real screenshots taken while testing this image against its deployment guide.
More in Security
2F
2FAuth on Ubuntu 24.04 LTS
Security
2FAuth is a free, open source, self hosted web app for managing your two factor authentication accounts.
Ad
acme-dns on Ubuntu 24.04 LTS
Security
The image installs acme-dns 2.0.2 from the official upstream release (github.com/acme-dns/acme-dns, the project formerly...
addy.io on Ubuntu 24.04
Security
Mail sent to an alias is forwarded to your real inbox, and you can reply from the alias so the other side never learns w...
AliasVault on Ubuntu 24.04
Security
AliasVault is an open source, end to end encrypted password manager combined with a private email alias service that you...
Apache SpamAssassin
Security
This image runs Apache SpamAssassin, the long established open source anti spam platform, fully configured and security ...
Apache Syncope on Ubuntu 24.04
Security
Apache Syncope is an open source identity management and identity governance platform.