Comply 2.18.0 Release Announcement

[Puppet Product Updates]

We are excited to announce the official release of Puppet Comply v2.18.0, featuring a massively valuable update for enterprise customers! 

 

What are the highlights of this release? 

A new API for Puppet Comply, integration of the updated CIS-CAT® Pro Assessor, and updated CIS Benchmarks for multiple OSes. 

 

Why does this release matter? 

The functionality included in this release bolsters Puppet Comply’s enterprise grade product capabilities. It provides the following positive business outcomes: 

 

• Accelerate time to value and increase operational efficiency: The new RESTful API for Comply leverages OpenAPI standards to help customers use Comply and streamline compliance data flow among other tools in their stack. 
• Reduce risk associated with infrastructure: Center for Internet Security (CIS) Benchmark and Assessor updates help manage security baselines across various operating systems to ensure security coverage of their infrastructure. 

 

How does the new functionality help customers? 

 

Comply API 

• The Comply API allows customers to automate actions, retrieve Comply data, and share Comply data with other groups and tooling. 
• Puppet’s open and integrated approach ensures data sharing with enterprise tools (such as risk management and systems of record). It also enables greater data transparency, allowing separate teams to leverage the same data for improved productivity and cross-team collaboration. 
• Customers can extract both summary and raw data results at scale, from one node to a subset of nodes, or all nodes (up to 100,000 nodes).  

 

CIS-CAT Pro Assessor and CIS Benchmark updates  

• CIS Benchmarks are a key framework for ensuring that a customer’s enterprise infrastructure meets certain baselines for their cybersecurity posture. These internationally recognized benchmarks reduce the risk of cyberattacks and data breaches and improve overall system security. 
• By leveraging industry benchmarks like CIS, Puppet Comply helps ensure the enforcement of the controls responsible for protecting sensitive and valuable data. CIS Benchmarks are updated frequently, making it a constant game of catch-up for customers to manage this coverage matrix on their own. 
• Comply 2.18.0 includes integration of the latest CIS-CAT Pro Assessor (v4.36.0, Nov 2023) to ensure optimized compliance assessment coverage in Comply. 
• Comply 2.18.0 also includes updates to supported CIS Benchmarks for multiple operating systems: AlmaLinux, Oracle Linux, RHEL, Rocky Linux, Windows, and MacOS. 

 

Full details for this release are available in the release notes here.

Thank you to all teams for their work related to this important release and for helping the Comply team close 2023 strong!

This e-mail may contain information that is privileged or confidential. If you are not the intended recipient, please delete the e-mail and any attachments and notify us immediately.