Puppet Enters Compliance Partnership with Center for Internet Security
August 24, 2020

Puppet announced a partnership with the Center for Internet Security, Inc. (CIS).

By formally partnering with CIS, Puppet is able to harness the power of CIS’s global community of security and compliance professionals to build better solutions for customers.

“CIS literally wrote the rule book on compliance - their Benchmarks have become industry standard for compliance across the IT industry,” said Yvonne Wassenaar, CEO of Puppet. “With this partnership, we’ll be able to unite CIS’s extensive body of knowledge with Puppet’s deep IT and automation expertise, making it easier for our customers to achieve the enforcement of compliance they need across their increasingly complex infrastructure environments.”

In May, Puppet announced a service offering aimed at alleviating this compliance pain point, ensuring that customers are equipped to pass audits quickly through the enforcement of CIS Benchmarks, CIS’s best practices for securing IT systems and data.

According to a report from Ponemon Institute, “the average cost for organizations that experience non-compliance problems is $14.82 million, a 45 percent increase from 2011.” However, companies that incorporate automation and continuous compliance policies into their infrastructure can save thousands of dollars and countless hours by reducing the complexities of audits, as well as hardening their systems against exploits and vulnerabilities. By leveraging CIS Benchmarks, Puppet is able to provide an end-to-end compliance solution for customers that enforces CIS standards across all systems and addresses gaps as they are identified.

Curt Dukes, CIS EVP & GM, Security Best Practices, said: “This partnership reinforces our commitment to helping others improve their compliance and overall security posture.”

Share this

Industry News

January 23, 2025

Progress announced the launch of Progress Data Cloud, a managed Data Platform as a Service designed to simplify enterprise data and artificial intelligence (AI) operations in the cloud.

January 23, 2025

Sonar announced the release of its latest Long-Term Active (LTA) version, SonarQube Server 2025 Release 1 (2025.1).

January 23, 2025

Idera announced the launch of Sembi, a multi-brand entity created to unify its premier software quality and security solutions under a single umbrella.

January 22, 2025

Postman announced the Postman AI Agent Builder, a suite empowering developers to quickly design, test, and deploy intelligent agents by combining LLMs, APIs, and workflows into a unified solution.

January 22, 2025

The Cloud Native Computing Foundation® (CNCF®), which builds sustainable ecosystems for cloud native software, announced the graduation of CubeFS.

January 21, 2025

BrowserStack and Bitrise announced a strategic partnership to revolutionize mobile app quality assurance.

January 21, 2025

Render raised $80M in Series C funding.

January 16, 2025

Mendix, a Siemens business, announced the general availability of Mendix 10.18.

January 16, 2025

Red Hat announced the general availability of Red Hat OpenShift Virtualization Engine, a new edition of Red Hat OpenShift that provides a dedicated way for organizations to access the proven virtualization functionality already available within Red Hat OpenShift.

January 16, 2025

Contrast Security announced the release of Application Vulnerability Monitoring (AVM), a new capability of Application Detection and Response (ADR).

January 15, 2025

Red Hat announced the general availability of Red Hat Connectivity Link, a hybrid multicloud application connectivity solution that provides a modern approach to connecting disparate applications and infrastructure.

January 15, 2025

Appfire announced 7pace Timetracker for Jira is live in the Atlassian Marketplace.

January 14, 2025

SmartBear announced the availability of SmartBear API Hub featuring HaloAI, an advanced AI-driven capability being introduced across SmartBear's product portfolio, and SmartBear Insight Hub.

January 14, 2025

Azul announced that the integrated risk management practices for its OpenJDK solutions fully support the stability, resilience and integrity requirements in meeting the European Union’s Digital Operational Resilience Act (DORA) provisions.

January 14, 2025

OpsVerse announced a significantly enhanced DevOps copilot, Aiden 2.0.