Chef InSpec users wrestle with compliance as code

Learning the ins and outs of the Chef InSpec product is only half the battle for compliance as code. The thornier task for some enterprises is to bridge the gap between compliance expertise and DevOps execution. CHICAGO -- Chef InSpec offers a framework to automate enterprise compliance policies, but converting compliance controls into code can require tricky organizational alchemy. Chef InSpec and Chef Automate are often used in tandem to detect and remediate systems that have drifted out of compliance with regulatory and security mandates -- a bundle sold as Chef Compliance. For organizations that use these tools successfully, security and compliance as code have made life easier.