Automate Compliance with Puppet Compliance Enforcement Modules (CEM)

Take the manual work out of enforcement and stay in line with security benchmarks through automated compliance configuration. 

READ THE SOLUTION BRIEF  🧑‍💻 REQUEST A DEMO

What are Compliance Enforcement Modules?

Compliance Enforcement Modules (CEM) are self-enforcing policy as code modules directly aligned to CIS and DISA STIG benchmarks. With CEM, you can set and preserve compliant infrastructure configurations and keep up to date with ever-evolving standards. CEM are created, supported, and updated by Puppet, and are available within Puppet Enterprise.

Find with Puppet Comply, Fix with CEM

Puppet Comply works with Puppet Enterprise to give you a holistic view of your organization’s compliance status. With CEM, you can automatically take action to enforce desired state operations in line with industry standards across your system configurations.

Eliminate Manual Compliance Management

Turning compliance policies into enforceable code can be complex and extremely time-consuming. With CEM, you can automate compliance enforcement and eliminate the pain of implementing and updating compliance configurations manually.

Stay Up to Date with the Latest Benchmark Versions

CEM are maintained and updated as new CIS and STIG recommendations become available, ensuring that you’re always up to date with the latest standards. Reduce your overall compliance risk by ensuring that your systems remain in a compliant state.

Customized to Your Environment

CEM are highly flexible and customizable. Comprehensive configuration options allow you to tailor the content to fit your environment, easily disable controls that aren’t applicable to your organization, and track and monitor known compliance exceptions with Puppet Comply.

Supported Operating Systems

Puppet Comply and Compliance Enforcement Modules support a range of operating systems and versions for finding and fixing compliance issues, including Windows and Linux. See below for a full list.

Download CEM for Windows     Download CEM for Linux

Operating System
Version
Find
Fix
 
CIS
STIG
CIS
STIG
Alma Linux
8
--
--
--
Amazon Linux 2
2
--
--
CentOS
6
--
--
--
7
--
--
Debian Linux
9
--
--
--
10
--
--
--
11
--
--
--
Apple macOS
10.15 Catalina
--
--
--
11.0 Big Sur
--
--
--
12.0 Monterey
--
--
--
Oracle Linux
6
--
--
--
7
--
--
--
8
--
--
--
9
--
--
--
Red Hat Enterprise Linux (RHEL)
6
--
--
--
7
8
9
--
--
--
Rocky Linux
8
--
--
--
SUSE Linux Enterprise Server (SLES)
12
--
--
--
15
--
--
--
Ubuntu
16.04 LTS
--
--
--
18.04 LTS
--
--
--
20.04 LTS
--
--
22.04 LTS
--
--
--
Windows Server
10 Enterprise
--
--
11 Enterprise
--
--
--
2012 non R2
--
--
--
2012 R2
--
--
--
2016
--
2019
--
2022
--
--
--
Windows Server Azure Compute
2019
--
--
--

Get a Free Trial of Puppet Enterprise

Run the full-featured Puppet Enterprise instance on up to 10 nodes today with no commitment.

START FREE TRIAL

CEM Solution Brief

Read the PDF on the Compliance Enforcement Modules

DOWNLOAD PDF

Speak To An Expert

Want to know what Puppet can do for your org? Drop us a line.

CONTACT US