TSYS Group » Chief Operations Officer » Known Element Enterprises - Technology & Facility Services

Parent/umbrella: #311 (OAM - Security Hardening Auditing and Compliance).

Finish system hardening to pass the CIS Debian 13 (trixie) benchmark checklist as reported by Wazuh SCA.

Scope¶

• Finish SSH config tweaks to pass CIS Debian 13 checklist
• Finish auditd/journald config to pass CIS checklist
• Synthesize upstream CIS sources into KNELIAC roles:
  • https://github.com/ansible-lockdown/DEBIAN12-CIS
  • https://github.com/ovh/debian-cis
  • https://www.cisecurity.org/benchmark/debian_linux
• Validate against CIS checklist in Wazuh dashboard
• Promote validated roles from sectestbed-* to prod

Context¶

• Roles executed via tsys-awx (AWX).
• Validate in sectestbed-* before prod.
• Partial work done: SSH hardening via KNELIAC security_ssh role.

Dependencies¶

Depends on #379 (test lab). Blocks #382 (STIG/SCAP), #383 (audit tooling), #389 (Greenbone).