Using SIMP Compliance Engine and extendable compliance profiles
SIMP Compliance Engine is a service that takes compliance standards and converts them into Puppet module settings. These standards can then be selected by the user, which can then enforce all of those module settings 'one-click' via a provided Hiera backend.
Compliance Engine data can also be embedded as part of a module on the forge or provided independently as it's own module. Users can customize both the puppet settings and the 'compliance profiles' by adding files into their own Control Repos in Puppet.
Additionally Compliance Engine provides reports on the Puppet catalog sent to a host, and can integrate it with other services to provide reporting, for example in the SIMP ecosystem we can cross reference with SCAP results.
As attacks grow more complex your security, dev, and ops teams need tools built with the power and agility to meet these threats head on. With SIMP, your organization can have a tool that continuously monitors and remediates systems to sustain compliance with security baselines tailored to any organization’s needs.
Download the open source Community Edition at https://simp-project.com/
Request a FREE trial of the Enterprise Edition at https://www.onyxpoint.com/simp-ee-con...