Any company that handles credit card data, especially in the United States, is subject to the Payment Card Industry Data Security Standard (PCI DSS), and already knows how difficult and time-consuming PCI audits can be. Gathering relevant data that demonstrates how each and every configuration item in the cardholder data environment (CDE) is compliant and has been over time, is often a manual […]
Read MoreCategory: compliance
Chef Announcements: New Products, Content, and Learning Resources
This week Progress Software announced a number of new capabilities across the Chef portfolio meant to accelerate time to value for our customers. With the acquisition close earlier this month, Chef became part of Progress and adds DevSecOps capabilities and expertise that help organizations succeed with their digital efforts. Together, we’re building on Chef’s momentum […]
Read MoreChef Recognized for “Class-leading” Governance and Compliance Features in Forrester Wave report
On August 10, 2020, Chef was named a Strong Performer in The Forrester Wave™: Infrastructure Automation Platforms, Q3 2020. In particular, the Forrester report stated: “Chef Software’s solution is a good fit for customers that want class-leading governance and compliance features.” We believe this result acknowledges the significant progress Chef has made, along with our […]
Read MoreAutomated Application Rollback with Chef
This is a follow up to the post Automated Rollback the Ultimate Application Release Insurance Policy in which we discuss key implementation considerations related to application rollback and rollforward. Chef Habitat is an open-source automation solution that enables you to define, package and deliver your applications to any environment without rewriting or refactoring. The software […]
Read MoreAutomated Application Rollback Insurance for Release Teams
Sometimes in IT certain terms take on a life of their own. They push past their original meaning and become something different, rollback is one of these terms. In the language of enterprise IT, “rollback” means getting the system back into a working state. This ensures a system can be immediately restored if a system […]
Read MoreChef Announcements: New Products and Portfolio Enhancements
Today Chef announced several new products and significant enhancements to the Chef portfolio during our ChefConf Online event. While things certainly have been different from past ChefConf events, we are energized by our community and customers, and we remain committed to helping them succeed. We are delivering products aligned to the workloads our customers value, […]
Read MoreNow Available: Chef Compliance
Building on Chef’s long history of innovation in compliance automation, Chef Compliance, available today, builds on Chef InSpec to help enterprises maintain compliance and prevent security incidents across heterogeneous hybrid and multi-cloud estates while improving speed and efficiency. Standards-based audit and remediation content, easily-tuned baselines, and comprehensive visibility and control make it easy to maintain […]
Read MoreChef InSpec Profile for Critical Salt Vulnerabilities
On April 30, 2020, two critical security vulnerabilities were identified with the SaltStack open source project (github.com/saltstack/salt). These vulnerabilities are critical and must be patched to avoid potential take over of your systems. This vulnerability has been assigned the highest severity rating, 10.0, according to the Common Vulnerability Scoring System, an open framework for communicating […]
Read MoreEdge Computing: Compliance, Developer Productivity, and Configuration Inconsistencies Top the List of Key Challenges
The edge computing term has become one of the next big buzz words in the IT world. The concept of edge computing is not new and has been around for a while. In fact, almost every organization probably already has one or more use cases that would fall into the bucket of edge computing. Edge […]
Read MoreSurvey Results: DevSecOps Drives Efficiency, Security, and Agility
Recently, Chef commissioned a survey of security professionals in order to provide greater insight into what security leaders are most concerned with and how collaboration with I&O (Infrastructure & Operations) is needed within enterprise-sized organizations. We sought out to determine how important DevSecOps is within the Software Development Life Cycle (SDLC), the importance of Audits […]
Read More