Zero Trust: Endpoint Security with Chef InSpec

With financial services organizations being subject to regulations such as FFIEC, PCI-DSS, and GDPR, managing compliance is a complex and dynamic process with a lot of moving parts. Between the myriad of international, federal, state, and local laws, industry-specific regulations, and company-specific requirements, achieving compliance in a robust financial regulatory environment can be challenging.

Watch on-demand to learn how to understand your risk profile, reduce audit cycle times and close the remediation loop, and identify security vulnerabilities and detect non-compliance.

Join Chef Windows experts Trevor Hess and Matt Wrock to learn how Chef helps clients dramatically lower the cost of supporting Windows server-based applications by providing a codified and consistent approach to defining, packaging, and delivering apps across server versions and environments.

In this webinar, Nick Rycar, Chef's Senior Technical Product Marketing Manager, will showcase how to use Chef InSpec to scan an Azure instance, flag possible issues, and outline mitigation steps to best manage cloud security.

When issues are found in the pipeline, either stale dependencies or insecure configurations, there needs to be a way to fix those issues quickly.  But why should we limit that scope to just containers?  The methodology followed should be effective against traditional infrastructure as well, so lets build all of our applications in a way that works great for containers, or for traditional IaaS/On-Prem deployments. Join Chefs, Galen Emery and Ken Langdon for a live webinar to learn how to build and secure Docker containers as part of continuous delivery pipelines.

In this webinar, we’ll review the new Chef offerings and what that means for you as a Partner. You’ll also hear about key improvements coming to the Chef Partner Kitchen, including a new streamlined login process, improved asset organizational structure, and two-step deal registration.

Security compliance is a continuous process. A lack of understanding of all the changing technologies and different communication processes can lead to increased vulnerabilities and risk. IT teams spend an incredible amount of time remediating and re-aligning operational environments. It’s difficult for security teams to keep up with the pace of innovation, often causing audit cycles and development pipelines to be lengthier than necessary.

Through Automation and Machine Learning, teams can spend more time examining specific environments and refining a security policy that teaches the environment to harden itself. In this live webinar, Chris Medina, Lead Solutions Architect at Chef, will showcase how DevSecOps can speed innovation and save you time, money, and effort, all while mitigating risk.

At Chef, we help organizations automate compliance by detecting and correcting compliance issues, making compliance an integral part of the software delivery lifecycle. The newly launched Chef Compliance helps enterprises maintain compliance and prevent security incidents across heterogeneous (hybrid, multi-cloud) estates while improving speed and efficiency.

Chef Compliance makes it easier than ever to maintain and enforce compliance across the enterprise, with standards-based audit and remediation content, easily tuned baselines to adapt to the organization’s needs, and visibility and control across hybrid and multi-cloud environments.

As teams have adopted continuous delivery practices to improve the velocity with which they are able to deploy applications, many have found it difficult to scale these processes across their environments. Between different programming languages, operating systems, runtime environments, and application architectures, it's not uncommon to have dozens, if not hundreds, of different ways to build, deploy, and manage applications in a single organization, each of which must be accounted for explicitly within pipeline tools like Jenkins.

Chef's approach to addressing this increasing complexity is to automate application definition itself with Chef Habitat. By providing a unified automation framework for application lifecycle management, uniform pipelines can be built even in a vastly heterogeneous estate. In this webinar, we'll showcase several practical examples of how Chef can help drastically simplify your Jenkins configurations, even as you manage diverse applications and deployment strategies.

Listen in with the Chef APAC team for a recap the highlights of ChefConf for you! Chef's CTO, Corey Scobie, and VP of Product, John Wyss, and Chef customers Westpac and Rakuten join to discuss the key announcements and favourite talks from ChefConf Online.

During the on-demand webinar, learn about key product announcements and how they can benefit your organisation. A panel of Chef customers discusses how they are already putting the latest Chef technology to use.

In these days of expanding remote work and work-from-home teams continuing to grow, organizations are finding it difficult to deploy and manage thousands of workstations (desktops/ laptops) and maintain them under continuous compliance.

With the newly launched Chef Desktop, organizations can eliminate the time-consuming, manual steps needed to configure, maintain, and trace any change events in a desktop/laptop fleet, giving organizations a dynamic way to enforce enterprise security and compliance. In this live webinar, the Chef team will showcase how Chef Desktop allows IT resource managers the ability to automate the deployment, management, and secure maintenance of a large fleet of laptop, desktop, and kiosk workstations from a centralized location on a range of operating systems.

As the role of IT Professionals becomes increasingly complex, do you have a plan for managing applications that scales with your business? If not, watch our on-demand webinar where James Massardo, Lead Customer Architect at Chef, and Lee Oommen, MTC Technical Architect for Azure at Microsoft, showcase how industry leaders are using application automation to change the game.

In this webinar, Jeff Vogt, Solutions Architect at Chef, will showcase how companies like Google and Facebook have modernized endpoint security compliance and validation with patterns such as Zero Trust and Beyondcorp, while leveraging datacenter-grade tools like Chef Infra and Chef InSpec for endpoint compliance at scale.

Watch this webinar and learn how to detect and correct security issues across your infrastructure (on-prem or in the cloud), rapidly gain and maintain constant visibility into your infrastructure security status, andautomate security compliance to eliminate risk and deliver software that is secure and compliant by design

In this webinar we'll provide an overview of all the new features available in Chef Infra Client 16, as well as of resources to help you upgrade from earlier versions. April 2020 also marks one year since updating our enterprise subscription model -- we'll review what's changed, and what Chef customers and community members need to know. From there we'll provide a live demonstration of some of those capabilities, and see just how easy automating configuration management can be!

Chef enables teams supporting edge computing devices to eliminate deployment failures and accelerate release schedules by providing a comprehensive automation solution that includes configuration, hardening, patch management, and application delivery. Join Eric Calabretta, Lead Solution Architect at Chef, for a live webinar to learn how to eliminate delivery failures, accelerate deployment frequency, and drive business agility at the edge.

Galen Emery, Lead Compliance Architect at Chef, and Alan Baptista, Product Marketing Director at Chef, will present the findings of the 2020 Chef Security & Compliance Survey. The survey surfaced clear distinctions between organizations that have adopted DevSecOps practices within their organizations and those that have not.

In this webinar, Nick Rycar, Technical Product Marketing Manager at Chef Software, will provide an overview of Chef's Identity and Access Management capabilities, and demonstrate how users with differing levels of access interact with Chef Automate.

Chef Habitat provides automation capabilities for defining, packaging, and delivering applications to almost any environment with any operating system on any platform. Over the last year, we’ve seen organizations like Alaska Airlines, Rakuten, Walmart, and Rizing address a broad range of application delivery automation challenges with Habitat. In this webinar, Eric Heiser, Field Solution Architect at Chef, will showcase how to improve developer productivity, reduce deployment failures, and deliver applications consistently across a variety of platforms and technologies.

Chef InSpec’s flexibility makes it a key tool choice for incorporating security into a complete continuous delivery workflow, reducing the risk of new features and releases breaking established host-based security guidelines. In this webinar, Mandi Walls, Technical Community Manager at Chef, will cover the basics of working with Chef InSpec, writing tests to reflect your organization’s security guidelines, and managing Chef InSpec as part of a high-velocity workflow.

Technology moves fast, and at some point, we all have to migrate from old environments to new ones. Migrations are painful, but they’re a fact of life. And even if you’ve built your applications in the cloud from the beginning, it’s very likely that you’ll want to service your applications from multiple regions, if not multiple providers.

Join Waldo Grunenwald, Tech Evangelist at Datadog, and Eric Heiser, Field Solutions Architect at Chef, for a live webinar to learn how Chef can make your migrations easier and repeatable, and how insight from Datadog can ensure your migrations are successful.

In this webinar, Nick Rycar, Sr. Technical Product Marketing Manager at Chef, and Brittany Woods, Automation Engineer at CARFAX, discuss the benefits of using Chef and ServiceNow together. They provide an overview Chef's ServiceNow functionality, discuss how CARFAX is driving innovation through automation, and give a brief demonstration of the ServiceNow integrations in action.

In this webinar, Nell Shamrell-Harrington, Principal Software Development Engineer and Community Engineering Lead at Chef, showcases how to build and deploy these packages with the intelligence to self-organize into topologies (no central orchestrator needed!). Learn how the dream of platform-agnostic and self-organizing packages is fulfilled today, and where it will evolve in the future.

In this webinar, Developer Advocates Jody Wolfborn and Robin Beck, will help you utilize Chef Effortless Infrastructure Suite to easily detect vulnerabilities in your infrastructure systems and quickly correct any outstanding issues, relieving your audit anxiety and freeing your engineers up to focus on company initiatives.

Continuous compliance allows organizations to fix issues before production, improving speed and lowering risk, which reduces the time and resources spent conducting audits. In this webinar, speakers from Center for Internet Security (CIS) and Chef will discuss how compliance-as-code helps maintain real-time and historical compliance status updates to appease scheduled and ad-hoc audit requests. Watch now to learn the state of compliance in the age of DevSecOps, what compliance as code and continuous compliance really mean, and how organizations can remain continuously compliant with code.

In this webinar, Nick Rycar, Chef's Technical Product Marketing Manager, will showcase how to use Chef Effortless Infrastructure Suite to scan a GCP instance, flag possible issues, and outline mitigation steps to best manage cloud securitys.

Watch now to learn how to run a Chef InSpec scan on Google Cloud, enable validation of cloud environments against trusted standards with Chef Effortless Infrastructure Suite, and maintain observability of security posture across cloud environments.

IT innovation comes with both risks and rewards. Continuous Delivery (CD) balances the innovation you need against those risks. Frequent, small, versioned changes are pushed across a release pipeline, and everything is automated and tracked, ensuring innovation at the pace the market demands.

In this webinar, Chef’s Scott Ford, Solutions Architect, and Nick Rycar, Technical Product Marketing Manager, will showcase how you can scale continuous delivery across all change events and reduce security breaches, remediate failures and innovate faster.

Chef’s Effortless Infrastructure Suite (EIS) combines Chef Infra and Chef InSpec, and is designed to give our customers a reference architecture to turbocharge these initiatives, which enables them to maximise the value they are able to drive using our products.

In this webinar, Jon Cowie, Chef's Principal Customer Architect, will dive into how each functions and how they can be combined to empower your infrastructure transformation projects. Learn how to maximise the value you gain from Chef's EIS, incorporate Chef's EIS in a modern DevOps workflow, and drive continuous compliance to enable your organisation to become a coded enterprise.

Chef's Trevor Hess, Lead Partner Solutions Architect, and Dan Choquette, Director of Services, will showcase how a major airline was able to capture and re-package their ASP.NET applications running on Windows Server 2008 and pipeline them to Azure in less than three hours. Whether your applications are still being worked on or if the teams have long since moved onto other projects, Chef can help you document, package, and pipeline your legacy applications and their dependencies onto modern systems.

Cloud computing has provided organizations with tools to create and scale environments with the push of a button. However, these benefits bring with them a host of new challenges and security threats that need to be understood and addressed to do business at enterprise scale.

In this webinar, Nick Rycar, Chef's Technical Product Marketing Manager, will showcase how to use Chef Effortless Infrastructure Suite to scan an AWS account, use the results to discover possible gaps in an organization's security posture, and provide strategies to mitigate the risks unique to managing a cloud environment.

More and more applications and data are moving to the cloud, and while this transition creates tremendous benefits, it also comes with information security challenges. Join Nick Rycar, Chef's Technical Product Marketing Manager, as he explores these concerns and showcases how a Continuous Audit approach, which helps identify and remediate compliance issues in minutes, can help organizations best plan for, identify, and address these cloud security issues.

Join Corey Scobie, Chef SVP of Product and Engineering to learn 1) answers to some of the biggest challenges currently facing DevSecOps teams, 2) about Chef’s own internal transformation and our move to an application-centric approach, 3) how to successfully build a coded enterprise, including tips and tricks we’ve seen from our customers.

Join our presenters from Chef and Microsoft as they demo how Habitat enables you to lift, shift and modernize your legacy applications and move them to the cloud by releasing them from the dependencies of underlying operating systems like Windows Server 2008/R2. In turn, you’ll modernize your application and pave way for cloud-native capabilities, even for the oldest, most complex applications in your stack.

Learn how Chef InSpec can be used to evaluate the compliance posture of an Ansible configured environment. We’ll walk through how to ensure audits are continuously applied to environments, providing actionable insights into the security of your configurations.

In this webinar, join Jason Nalewak, Chef's Federal Customer Architect, for a live demonstration on how moving compliance as code to the left with Chef InSpec provides more velocity and security in the application lifecycle.

As a financial institution, you are subject to a variety of governance and compliance regimes, but that doesn’t mean compliance regulations and audits have to slow you down. Using modern automation practices, organizations can dramatically reduce the burden of compliance audits and policy enforcement while gaining insight and visibility over their IT systems. In this webinar, we’ll dive into how FinServ IT operations, compliance, and security teams can transform how they approach audits through the adoption of continuous compliance.

Organizations often struggle to provide the right access privileges to their cloud assets, even when managing configurations with Chef. Join Saviynt and Chef to learn how you can provide secure access to your cloud resources while ensuring continuous compliance of your entire cloud estate. During this webinar Vibhuti Sinha, Chief Cloud Officer at Saviynt, and Nick Rycar, Technical Product Marketing Manager at Chef, will demonstrate how to manage access privileges and cloud security with Savyint and Chef Automate.

Modern, cloud-native platforms have emerged to enable increased speed and flexibility in application delivery. But getting there has proven difficult for even the most advanced organizations. Will one platform work for all applications? How to manage hybrid complexity? Can legacy applications move at high velocity?

Learn how to effectively use Habitat to deliver modern applications to Microsoft Azure. Habitat is a way to build, deploy and manage platform and provider-agnostic software that can run anywhere: any container orchestrator, virtual machines, or even bare metal -- without repackaging, and with an identical delivery workflow no matter what the target.

Chef 14 and ChefDK 3 is our easiest to use Chef yet. Included in Chef 14 are seven new core resources, four new Ohai plugins, and support for several new platforms, in addition to the usual plethora of bug fixes and performance improvements. Watch this recorded webinar for a deep-dive on all the new features in both Chef 14 and ChefDK 3, with hands-on examples and a demo of the functionality.

Learn what's new in InSpec 2.0. From performance improvements, to a library of new resources, to cloud and pipeline integrations, Dominik Richter and Nick Rycar will take you through what’s new in InSpec so you can kickstart your Continuous Compliance journey today!

Learn how to efficiently migrate apps to the cloud by enabling DevOps teams to standardize cloud and data center deployments with the same set of tools using the Infrastructure as Code approach.

In the first of two webinars, we’ll show you how to check your existing cookbooks for compatibility with Chef Client 14. We’ll use tools like Foodcritic to detect and remediate deprecated code in your cookbooks. And we’ll show you some of the improvements coming in Chef Client 14 to help you write better, more reusable cookbooks using a vastly simplified custom resource syntax.

Learn how to use Chef Automate with CloudBolt blueprints enabling you to quickly stand up your systems. Watch us provision machines with CloudBolt, apply their configuration with Chef cookbooks, and validate their compliance with InSpec profiles.

Learn how to Detect and Correct issues in your application infrastructure across both cloud and on-premise environments.

Learn about the factors involved in a successful migration to Amazon Web Services, including an overview of the risks and benefits involved. Plus, see how with Chef Automate you can manage your hybrid infrastructure through a single interface, and enforce security and compliance standards across your environments.

Microsoft Azure Government already enables compliance around your infrastructure. Chef Automate and InSpec are designed to enable you to make your systems themselves compliant. Learn how easy it is to take the existing CIS/STIG controls and translate them into InSpec, enabling teams to operate at velocity by automating their compliance and security posturing into their infrastructure development processes.

Learn how using the VSTS Chef Extension provides a cookbook pipeline so that on every commit all the cookbook tests are run and optionally Test Kitchen tests. Only when these have passed will the release phase publish the cookbook to the Chef Server. Now each developer is held to the same standards as the versions of the cookbook governed by the build pipeline.

Learn how with Chef Automate and DevOps best practices, you can rethink GDPR compliance and take a code driven approach. By introducing Compliance as Code to define security regulations, you turn these into small, modular, executable blocks, that can be put together to define any security policy.

Chef Automate makes it easy to apply necessary patches and ensure they are vetted against introducing unintended risk to your mission-critical applications. Discover how your teams can spend their time innovating instead of scrambling to patch systems.

Hear how and why Texas A&M leverages Chef software to automate their environments, ensuring that servers are configured consistently and able to be validated against the regulatory requirements Universities need to follow.

Discover how an enterprise shifts to offering effective Developer Services. In this webinar, we will examine the requirements for IT organizations to develop those services and effectively scale them to thousands of development teams.

Franklin Webber, Training and Technical Content Lead at Chef, explains Ohai’s plugin structure, walks through the core Ohai plugins, and shows you how to build and test a custom plugin. Finally, he talks about some further refinements you can add to the implementation.

Andre Elizondo, Technical Evangelist & Bakh Inamov, Field Solutions Architect discuss the different components of Chef Automate and talk about how it unifies Chef, InSpec, and Habitat into a comprehensive automation strategy for any company in today's digital world.

Ian Henry and Michael Ducy will show you how Habitat makes building, deploying, and running your applications in containers simple, no matter how complex the production environment. 

Part one of a four-part series. Review the overall challenges businesses face in the marketplace and how to gauge where you stand.

Part two of a four-part series. Explore the role of automated compliance solutions and discuss which industry metrics demonstrate your successful efforts to mitigate risk.

Part three of a four-part series. Discover industry metrics that demonstrate you’re shipping faster successfully. We'll explore why continuous delivery is about more than just having build pipelines.

Part four of a four-part series. Discover how to decrease change failure rates. Join us to learn how to achieve resiliency by optimizing for failure recovery.

Franklin Webber, Training and Technical Content Lead at Chef, will show you techniques that bring elegance to a cookbook’s tests. You’ll learn how to eliminate redundancy, rebuild common patterns into helpers, and extract those helpers into a portable library.

Franklin Webber, Training and Technical Content Lead at Chef, will show you some approaches to testing complex recipes. He’ll explain mocking and stubbing and then apply those techniques to verify recipes that use search, resource guards, and helper methods.

Chef is built in Ruby - a conscious choice for its great flexibility and developer friendliness. For some people, learning the language can feel difficult because most examples lack your perspective as a Chef practitioner. In this interactive webinar, we invite you to follow along in your favorite editor as we dive through the source code to teach you core Ruby concepts.

Learn about Chef’s modular and flexible approach to certification. We explain why we use “badges” and how this allows us to be agile to change within Chef’s product portfolio and evolution of the wider ecosystem.

Explore how InSpec can improve compliance across your applications and infrastructure.

An overview of the Chef Server--how it’s designed, how it’s packaged, and general advice on operating it at scale (monitoring, troubleshooting, etc). We’ll talk about each of the Chef server components and how they fit together. Next, we’ll explain the Omnibus system, which lets you build native packages for different platforms. Finally, we’ll show you a few troubleshooting techniques.

Discover multiple techniques for retrieving secrets from Vault using Chef. As infrastructure increases in complexity, so to does our need to secure it. Watch to learn how you can use Chef and Vault to secure your infrastructure and accelerate application delivery.

Aaron Kalin of DNSimple goes over the lessons learned in budgeting, hiring, and onboarding their first ever apprentice along with why and how you might want to start a similar program at your company. Aaron will conclude with an update of where their apprentice is now and answer any questions you might have.

Nathen Harvey, VP of Community Development at Chef, sits down with the 2016 Awesome Community Chefs and talk about what makes the Chef Community special and discuss the upcoming Chef Community Summits.

Packaging 13 year old technology and running in modern compute environments. Most cloud migration journeys at some point involve the need to migrate legacy applications from outdated and unsupported versions of Windows to more modern operating system. This is never a simple task. Attempting such a migration using manual methodologies simply does not scale and cannot be easily replicated across environments.

Bringing a DevOps approach to network device compliance. Enterprises are under increasing pressure to demonstrate to auditors the security and compliance of their entire IT infrastructure. This includes critical network equipment such as switches, routers, and firewalls. Yet the physical network device layer has been one in which the level of automation is low: Gartner estimates that only 10% of network infrastructure has been automated today. Lack of automation around change management and security of network equipment configurations is both a business and security risk.

Reduce the risk and increase the efficiency of your AWS applications by automating compliance with OpsWorks for Chef Automate. OpsWorks for Chef Automate is a managed solution delivered by AWS that easily lets you set up “Chef Automate as a service” freeing you from routine tasks involved with operating and maintaining instances of Chef Automate, enabling you to define and continually inspect/maintain the state of your EC2 system configurations in AWS and beyond.

Customers using Chef and InSpec for infrastructure and compliance automation respectively, need a way to respond to automation errors quickly. These errors could indicate that a critical service is down, or, more seriously, that systems have drifted out of compliance. ServiceNow is an enterprise-grade, hosted IT Service Management (ITSM) system with several modules including Incident Management. We will demonstrate the newly-released integration between Chef Automate and ServiceNow Incident Management and how it allows such errors to notify the right teams and, if necessary, be paged in order to quickly triage and resolve failures.

Preparing for audits can be time-consuming and stressful without automation. Security regressions introduced in-between audits often go uncaptured, and existing tools and practices often scan systems only in production, where identified issues can be costly to remediate.

What do you do with business critical legacy applications written in a pre-cloud era that create drag on your ability to deliver customer value: painfully rewrite them, or lift-and-shift them, which doesn’t address the underlying technical debt?

Today’s point-of-sale (POS) systems increasingly resemble cloud or datacenter-based IT applications. So why can’t we innovate on the POS at the same speed as our mobile teams or other web leaders?