Anyone have some experience with #SCAP using something like #OpenSCAP and #ComplianceAsCode?

I'm looking to do some tailoring, both removing and adding rules. E.g. CIS Benchmark L2 Server's have a federal ssh warning. But my institution has it's own. So I'd need to remove that rule from a custom profile but add another one.

I love my editor! Huge thank you to Kezia Endsley and the entire editorial team at Wiley who have worked so hard to make my book so much better.

Getting closer. Preorder your copy today:
https://buff.ly/3qSHVtV

#DevSecOps #ComplianceAsCode #digitaltransformation