Security in the workflow
Bring RHEL hardening, CIS checks and audit evidence into a repeatable Ansible and OpenSCAP process.
My current work includes hardening RHEL 9 servers with Ansible and checking their configuration against CIS benchmarks with OpenSCAP.
Configuration and evidence belong in the same workflow. A repeatable process makes it easier to identify drift, apply approved changes and prepare audit reports.
- Apply approved hardening configuration across servers.
- Run compliance scans and retain evidence for review.
- Assess application impact before changing authentication, auditing or security controls.
Security changes require the same care as a release: testing, a clear owner, a rollback plan and an understanding of the application.