Skip to content

Compliance as code

Turn compliance frameworks into automated, continuously-evidenced controls: CIS/NIST/SOC 2/PCI mapped to a shared control set, policy-as-code with OPA/Conftest and admission, evidence automation and continuous audit, drift as a compliance signal, and IaC compliance gates — embedded in DevSecOps and scaled with inherited guardrails.

Advanced5 sections · 15 lessons · ~9h total · 60-question self-test

01

Frameworks & controls

3 lessonsTest yourself

01Frameworks demystifiedCIS, SOC 2, PCI, NIST, ISO as checkable controls.30 min 02Controls & mappingPreventive/detective/corrective, owned, mapped.30 min 03CIS Benchmarks as controlsAutomated hardening assessment, continuously.30 min

02

Policy as code

3 lessonsTest yourself

01OPA & Rego for complianceControls as declarative, tested policy.35 min 02Conftest in CIGate configs against policy, shift-left.30 min 03Policy at admissionGatekeeper/Kyverno as the runtime backstop.30 min

03

Evidence & continuous audit

3 lessonsTest yourself

01Evidence automationControls that evidence themselves, mapped.35 min 02Continuous complianceAlways-on evaluation vs point-in-time.30 min 03Audit trails & attestationTamper-evident, attested, reusable evidence.30 min

04

Drift & IaC gates

3 lessonsTest yourself

01Drift as a compliance signalOut-of-band change = potential control failure.30 min 02IaC compliance gatesCheckov/tfsec/Terrascan mapped to frameworks.30 min 03Remediation & preventionAuto-fix the safe cases; guardrail the rest.30 min

05

Compliance at scale

3 lessonsTest yourself

01Compliance at scaleInherited guardrails, secure-by-default accounts.30 min 02Audit readinessAudit prep as a query, not a scramble.25 min 03Compliance in DevSecOpsControls built into the pipeline and platform.30 min

Progress is saved in this browser only — no account required.

Final exam

Test yourself on everything

60 questions drawn from all 5 sections — every answer explained as you pick.

Start final exam