[IAD-421] [CAR-29] Payment Manager improvements for strength security scanning and resolving vulnerabilities

[mojaloopci]

Migrated from Jira: IAD-421

Original Issue Details:

• Issue Type: Epic
• Priority: Medium
• Status: To Do
• Reporter: paul.baker
• Assignee: Unassigned
• Created: 08/01/2026

---

Business Value
Increase trust in the DRPP with all stakeholders (Regulator, Participant organisations, DRPP hub operations, ...) by providing a secure service that can be operationally managed.
Impact / Risk
Payment manager compromise or operational fragility; inability to securely manage participant txn integrity.
Value Statement
As a participant organisation
**I would like to **ensure that the payment manager docker base solution is secure and support operational monitoring
**So that I **can operate a safe and reliable connection using this platform

Acceptance Criteria

1. Verify that a security assessment for Docker Compose Payment Manager is performed.
2. Verify that thesecurity assessment mitigations for Docker Compose Payment Manager are performed.
3. Verify that the appropriate documentation is Improve inline with the findings - Deployment System Requirement and Prerequisites