Operations | Monitoring | ITSM | DevOps | Cloud

Policy as Code Tools + Examples to Make Better Infrastructure Easier, Anywhere

You’re scaling your IT infrastructure so you can do more – deploying across clouds and data center, adding servers, coding like crazy. Great! But how do you keep it all from falling apart? Policy as code is an approach to managing IT that strategically leverages infrastructure as code (IaC) and compliance as code to manage consistent policies across complex IT environments. Sounds perfect, right?

Sarbanes-Oxley (SOX) Compliance: How SecOps Can Stay Ready + Pass Your Next SOX Audit

Since its passing in 2002, the Sarbanes-Oxley Act (SOX) has become one of the leading regulatory compliance requirements for U.S. companies. It’s synonymous with corporate governance and financial reporting standards for publicly traded companies. Companies spend millions of dollars and thousands of hours ensuring SOX compliance. Scrutiny is high for organizations subject to it, and the penalties can be crushing.

IT Operations: Making IT Work Better with IT Ops Automation

IT ops is often so focused on solving problems that it can be easy to miss how IT ops contributes to an organization’s overall success, even if you’ve been in IT for a long time. When things get tossed over the wall from development to ops, anyone not in IT ops starts to ask, “What is IT ops?” and “What does IT operations do?” So let’s set the record straight.
Featured Post

Keeping up with European security and privacy compliance - the role of infrastructure and automation

The number of security and privacy-related regulations and compliance requirements in the UK and Europe continues to increase. The list reflects governments' growing concerns and emphasis on security and privacy, and for good reason. According to Steve Morgan, founder of Cybersecurity Ventures, if cybercrimes were measured as a country, it would represent the third-largest global economy after the United States and China.

The Future of Configuration Management Software is Policy Enforcement

The old way we’ve thought about configuration management software has passed — we need a new perspective that takes into account the importance of policy enforcement. Let’s dig deeper into what this means for DevOps, your overall security and compliance strategy, and IT.

Why You Should Avoid Windows Group Policy Management for CIS Compliance

Windows Group Policy Management is the default — but that doesn’t mean it’s the right fit for your organization when it comes to cybersecurity and compliance. In this blog, we’ll look specifically at the current standard for compliance through CIS benchmarks and offer up a new way to approach policy management without the default.

Get Started with Puppet: A Tutorial Guide for First-Timers

So you’re ready to get started with Puppet and you don’t know where to begin. That’s alright – this short, easy Puppet tutorial will help you get started with Puppet Enterprise. This tutorial blog walks through the first few steps you'll need to take to get Puppet Enterprise up and running so you can start automating your organization's IT infrastructure.

DoD Compliance + DoD Configuration Management: How to Get Compliant with Less Effort

DoD compliance is a set of rules and expectations for IT cybersecurity in organizations that do business with the US Department of Defense (DoD). Discover everything you need to know about DoD compliance and DoD configuration management in this blog – plus how to manage DoD compliance better and faster with Puppet.