Puppet by Perforce Further Automates Day 1 and Day 2 Operations with Latest Compliance Releases

Perforce continues investment in compliance products with new release of Puppet Comply and updated Compliance Enforcement Modules (CEM)

MINNEAPOLIS — JUNE 29, 2023 — Puppet by Perforce, the industry standard for infrastructure automation, today announced Puppet Comply 2.14.0 and key updates to its Windows and Linux Compliance Enforcement Modules (CEM) — both extensions of Puppet Enterprise’s secured infrastructure capabilities. Key features of the update include greater visibility into a company’s complete multi-cloud infrastructure footprint, updated alignment with the latest CIS Benchmarks, and role-based access controls.

In 2022, Verizon reported that 82% of security incidents were attributable to human-related risk factors. A manual approach to IT compliance and security is increasingly untenable, with increased IT footprints across the private and public cloud, the growing threat landscape, and increased regulatory demands threatening to interrupt Day 1 and Day 2 operations – from provisioning through remediation and enforcement. Puppet’s 2023 State of DevOps Report found that automating governance, security, and compliance processes were top priorities for platform teams in more than 40% of companies. Increased visibility and expedited remediation reduce a company’s risk profile and mitigate the implications of non-compliance or a security incident.  

“With cybersecurity expertise in high demand and a lack of professionals to fill this space, everyone from developers to operations needs to make security and compliance a priority. It’s not just a nice-to-have for Day 1 and Day 2 operations – it’s a must,” said Claire McDyre, Product Manager, Puppet by Perforce. “Puppet compliance assessment and remediation automates and simplifies alignment with consensus regulatory standards and security processes by breaking down silos between teams. The solution allows teams to define their safest configurations against expert-declared security standards, empowering them to enforce those configurations continuously and stay ready to share proof of compliance when audit time comes.”  

How Puppet Comply and CEM Fit Into Day 1 and Day 2 Operations

• Provides compliance verification through policy as code during Day 1 operations to ensure servers are initially provisioned with a secure configuration.  
• Enforces servers desired state using popular security standards like CIS Benchmarks and DISA STIGs as a baseline to achieve compliance with compliance regulations and frameworks.  
• Frequently reevaluates and remediates configuration drift during Day 2 operations, guaranteeing continual adherence to mandated baselines.

Puppet’s compliance products are a continued investment to help streamline the process of bringing infrastructure into compliance to help operators:

• Decrease the financial and security risks associated with non-compliance.
• Increase organization-wide visibility into infrastructure compliance and security status and predictability of resolution.
• Reduce the time and resources needed to interpret scans, remediate compliance failures, and prepare for audits.
• Eliminate effort associated with keeping up with evolving standards.
• Increase the percentage of infrastructure that is fully compliant.

Puppet Comply offers continuous compliance monitoring with a holistic status view across hybrid infrastructure. Puppet’s Compliance Enforcement Modules (CEM) provide turnkey compliance remediation and enforcement of policy-as-code aligned with the latest CIS Benchmarks and DISA STIGs. Puppet Comply and CEM are extensions of Puppet Enterprise.

Additional Resources

• To learn more about the latest feature updates in Puppet Comply and CEM, please visit the website.
• Learn more about Puppet by Perforce
• Follow Puppet by Perforce on Twitter/X and LinkedIn
• Read the Puppet by Perforce blog