Compliance, Remediation, Service Desk Integration
From my understanding of puppet a lot of things can be achieved using modules so I'm assuming when it comes to operational compliance I would populate my modules with desired policies.
However, I'd like to know how Security and Regulatory(HIPAA,PCI, SOX etc) compliance are maintained/ enforced. What approach is currently supported by Puppet and are there accompanying remediation packages with these?
More so, what service desk integration tools are currently supported by puppet for closed loop compliance purposes