Creating Content for Automated Security Compliance
summary
Hands-on lab teaches how to convert policy text into executable checks and fixes using OpenSCAP and the ComplianceAsCode project, showing rule → profile composition, OVAL-based checks and how remediations are stored as Ansible remediations. Lab provides SCAP Workbench for editing, a VNC-accessible Fedora environment, and a static copy for offline practice; typical completion takes about two hours, with ~70% command-line work and step-by-step credentials and SSH/VNC setup.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 0:25Agenda
- 1:28Security Compliance
- 6:08Compliance
- 11:54What you will learn
- 13:14Practical considerations
- 13:49Workshop
- 15:51Demo
- 16:46Documentation
- 19:57References
- 20:44Chat
related talks
28mSecuring Infrastructure with OpenScap: The Automation Way!
05mHow To Automate Compliance If You Aren't Chuck Norris
36mImproving Security while Reducing Toil with DevSecOps
32mA Security State Of Mind: Compliance and ...
36mImproving Security while Reducing Toil with DevSecOps
25mTransform Your Security Practices With DevOps
17mEnhancing cloud security with continuous compliance
38mA Security State of Mind: Compliance and Vulnerability Audits for Containers