Yasmin Rajabi and Simone Van Cleve

1. Puppet
Camp 2021
Get Compliance Under Control
Simone Van Cleve
Product Marketing Manager
Yasmin Rajabi
Director of Services Strategy

2. Investing in Our Future
2
2020 brought more...
Remote Workers
Reliance on
Technology
Rapid Innovation
2

3. 3
The Before Times Now

4. 4
The Before Times Reality

5. 5
Home WiFi secure? Bad actors around

6. 6
6
Bye Bye Patience Productivity???

7. 7
7
CIO Priorities
Move more workloads to cloud
Improve agility and time to market
Better management of regulatory and compliance risks

8. 8
52% of CIOs cite security and
compliance requirements as a
barrier to pursuing IT
modernization.

9. 9
9
Technology has outpaced regulation

10. 10

11. 11

13. What’s next?

14. 14
Time for a quick
puppy break

15. Built on Our Foundation
15
Automatically
eliminate drift
Keep systems compliant
with automatic drift
detection and remediation
Enforce compliance at
scale
Consistently apply policy
across OSs and environments
Define policy as code
Codify compliant
configurations
1
3 2

16. End-to-End Compliance Solution
16
Scan
and Report
Create
Custom Content
Continuously
Enforce Compliance

17. From 50 percent
to 92 percent
compliant with Puppet
Puppet Overview
17

18. Greater than 90 percent
compliance for all Windows
versions
Puppet Overview
18

19. Puppet Overview
19
100 percent
CIS compliance on
Windows 10 desktop fleet

20. Investing in Our Future
20
Where organizations land:
Just Starting Out
Regularly Preparing for
Audits
Proactive Automation
20

21. Investing in Our Future
21
Where organizations land:
Just Starting Out
Regularly Preparing for
Audits
Proactive Automation
21
● Lack of guidance
● Manual process
● Land of unknowns

22. Investing in Our Future
22
Where organizations land:
Just Starting Out
Regularly Preparing for
Audits
Proactive Automation
22
● Lack of guidance
● Manual process
● Land of unknowns
● Regular audits
● Manual scripts
● All hands on deck

23. Investing in Our Future
23
Where organizations land:
Just Starting Out
Regularly Preparing for
Audits
Proactive Automation
23
● Lack of guidance
● Manual process
● Land of unknowns
● Regular audits
● Manual scripts
● All hands on deck
● Automated reporting
● Automated enforcement
● Proactively expanding

24. 24
24

25. Compliance &
Security
Speed &
Innovation

26. Make Compliance a Competitive Advantage

27. The Defensive Approach

28. The Advantage of Playing Offense

29. 29
29 https://xkcd.com/1205/

30. 30
30
Upcoming Talks
Applying the Roles and Profiles Method to Compliance Code
Heston Snodgrass, Sr. Services Development Engineer, Puppet
Automating STIG Compliance and Reporting
Chris Southall, Principal Engineer, Kinney Group
Automating Compliance by Taking a Model-Driven Approach
Alex Hin, Principal Product Manager, Puppet