Automating IT Security and Compliance with CIS and SaltStack

Applying baseline security standards across digital infrastructure should be a foundational practice for every organization. Yet, talent shortages, shrinking threat windows, and rapidly increasing infrastructure complexity can turn policy enforcement from no-brainer to pipe dream. 

In this paper we’ll describe how the Center for Internet Security (CIS) Benchmarks can be used to secure digital infrastructure, how CIS relates to other control frameworks and regulations including NIST, ISO, PCI, HIPAA, and DISA STIGs. We’ll also show how the SaltStack SecOps suite combines security policies and definitions with powerful, system-level infrastructure automation to help organizations of every size and across every industry make continuous IT compliance a reality.