Linux hardening and CIS compliance with Ansible
Server hardening remains the best ratio between effort and risk reduction. It still has to be applied consistently, reproducibly and verifiably across the whole estate. This hands-on course industrializes Linux hardening and CIS benchmark compliance using Ansible.
Training objectives
- Identify a Linux server's attack surface and the priority measures.
- Harden remote access, accounts and password policies.
- Configure the firewall, kernel security parameters and brute-force protection.
- Set up audit logging and monitoring of sensitive files.
- Automate all measures into reusable roles.
- Check compliance against benchmarks and produce a gap report.
Target audience
- Systems administrators and infrastructure engineers.
- Operational security engineers.
- Compliance and technical audit teams.
Prerequisites
- Confirmed Linux administration.
- Ansible basics: playbooks and inventories.
Detailed program
Day 1 — Hardening measures
- Attack surface, compliance benchmarks and prioritizing measures
- Hardening remote access, accounts and passwords
- Firewall, kernel security parameters and brute-force protection
Day 2 — Industrialization and compliance
- Audit logging and sensitive file monitoring
- Building a reusable hardening role
- Compliance checking, assertions and gap reporting
Certification
At the end of this training, you will receive a certificate of participation issued by squint.
Other training courses that might interest you
FreeIPA and Red Hat IDM — centralized identity management on Linux
Présentiel et distancielFreeIPA, and its supported counterpart Red Hat Identity Management, bring to the Linux world what Active Directory offers to Windows: …
SOC Analyst Level 1 — detection, analysis and incident response
Présentiel et distancielThe security operations centre is an organization's first line of defence, and qualifying an alert is a profession in its …
Ready to develop your skills?
Join hundreds of professionals who have trusted squint for their skills.
View all our training courses