Security Compliance (6)

• Home | OpenSCAP portal (open-scap.org) tool
  NIST-certified SCAP tooling to assess and enforce security baselines, with community hardening guides
  Security Hardening Vulnerability #
• GitHub - ComplianceAsCode/content: Security automation content in SCAP, Bash, Ansible, and other formats (GitHub) repo
  SCAP/XCCDF/OVAL hardening profiles with generated Ansible and bash remediation for RHEL, Ubuntu, SLES
  Ansible Enterprise Linux Security Hardening #
• CIS Benchmarks® (CIS) reference
  consensus hardening baselines for 25+ product families; free PDFs, tailoring needs paid membership
  Free Tier Security Hardening #
• DISA STIGs (cyber.mil) reference
  US DoD Security Technical Implementation Guides, free public downloads
  Security Hardening #
• Introduction | RKE2 (docs.rke2.io) reference
  Rancher Kubernetes built for CIS benchmark and FIPS 140-2 pass; containerd, static-pod control plane
  Kubernetes SUSE #
• Introduction (Kyverno) reference
  Kubernetes-native policy engine governing declarative configuration and runtime behaviour
  Kubernetes Kubernetes Operator #