Welcome to the SIMP documentation!

This is the documentation for the 6.6.0-2 release of SIMP.

SIMP is generally compatible with Red Hat Enterprise Linux (RHEL) and RHEL-derived distributions.

Microsoft Windows support is available via the commercial Sicura product.

This guide walks users through the process of installing and managing a SIMP system. It also provides a mapping of security features to security requirements, which can be used to document a system’s security conformance.


Sponsors

We would like to thank the following for sponsoring the continued development of the SIMP project:

Sicura

images/Sicura_Logo.svg

Sicura is on a mission to automate security and compliance so that the organizations that power the world’s critical technology systems can operate securely and efficiently.

https://www.sicura.us


The Guide

Warning

Be EXTREMELY CAREFUL when performing copy/paste operations from this document!

Different web browsers and operating systems may substitute incompatible quotes and/or line endings in your files.

The System Integrity Management Platform (SIMP) is an Open Source framework designed around the concept that individuals and organizations should not need to repeat the work of automating the basic components of their operating system infrastructure.

Expanding upon this philosophy, SIMP also aims to take care of routine policy compliance to include NIST 800-53, FIPS 140-2, the DISA STIG, and the SCAP Security Guide.

By using the Puppet automation stack, SIMP is working toward the concept of a self-healing infrastructure that, when used with a consistent configuration management process, will allow users to have confidence that their systems not only start in compliance but remain in compliance over time.

Finally, SIMP has a goal of remaining flexible enough to properly maintain your operational infrastructure. To this end, where possible, the SIMP components are written to allow all security-related capabilities to be easily adjusted to meet the needs of individual applications.

Level of Knowledge

SIMP targets users with a strong background in Linux systems management. The core technologies that require prerequisite knowledge are:

SIMP handles as much of the initial setup and management of these tools as possible However, you will need at least some understanding of them in order to tailor a SIMP system to fit the desired environment. You will also need a general understanding of how to control and manipulate these tools from the command line interface (CLI); SIMP does not provide a graphical user interface (GUI).

Knowledge of scripting and Ruby programming will also help to further customize a SIMP install but is not required for routine use.