Compliance on Eric The IT Guyhttps://itguyeric.com/tags/compliance/Recent content in Compliance on Eric The IT GuyHugoen-USFri, 12 Jun 2026 09:00:00 -0500What to know about community support versus vendor supporthttps://itguyeric.com/blog/ciq-community-vs-vendor-support/Fri, 12 Jun 2026 09:00:00 -0500https://itguyeric.com/blog/ciq-community-vs-vendor-support/I wrote this for the CIQ blog: an honest look at when community Rocky Linux support covers you and when a production environment needs the vendor support RLC Pro adds.RLC Pro AI and RLC Pro Hardened: Which variant fits your needshttps://itguyeric.com/blog/ciq-rlc-pro-ai-vs-hardened/Thu, 04 Jun 2026 09:00:00 -0500https://itguyeric.com/blog/ciq-rlc-pro-ai-vs-hardened/I wrote this for the CIQ blog: how to choose between RLC Pro AI and RLC Pro Hardened depending on whether you are running AI infrastructure or working under strict compliance.KernelCare: How Teams Stay Secure Without Rebootshttps://itguyeric.com/blog/tuxcare-kernelcare-no-reboots/Fri, 23 Jan 2026 09:00:00 -0600https://itguyeric.com/blog/tuxcare-kernelcare-no-reboots/I wrote this for TuxCare to explain, step by step, how KernelCare applies kernel patches to running memory so teams stay secure without rebooting.KernelCare Agent v3: Upgrade Now for Signed Patch Securityhttps://itguyeric.com/blog/tuxcare-kernelcare-v3-signed/Fri, 12 Dec 2025 09:00:00 -0600https://itguyeric.com/blog/tuxcare-kernelcare-v3-signed/I wrote this for TuxCare as the signed-patch switchover arrived, urging teams still on older KernelCare agents to upgrade to v3 before coverage gaps appear.How to Build a FIPS + FedRAMP-Ready Environment in 2026: AlmaLinux & Rocky Linuxhttps://itguyeric.com/blog/tuxcare-fips-fedramp-2026/Mon, 01 Dec 2025 09:00:00 -0600https://itguyeric.com/blog/tuxcare-fips-fedramp-2026/I wrote this for TuxCare on building a FIPS and FedRAMP-ready environment on community Linux, and how TES fills the gaps the base OS can&rsquo;t.Choosing the Right Enterprise Support Tier with TuxCarehttps://itguyeric.com/blog/tuxcare-support-tiers/Fri, 10 Oct 2025 09:00:00 -0500https://itguyeric.com/blog/tuxcare-support-tiers/I wrote this for TuxCare to break down the Essential, Enhanced, and Custom support tiers so teams can match coverage to their real risk profile.TuxCare vs. Red Hat / SUSE / Canonical / Oracle: A Feature, Cost, and Performance Comparisonhttps://itguyeric.com/blog/tuxcare-vs-competitors/Wed, 08 Oct 2025 09:00:00 -0500https://itguyeric.com/blog/tuxcare-vs-competitors/I wrote this for TuxCare: a fact-based comparison of TES against Red Hat, SUSE, Canonical, and Oracle across pricing, rebootless patching, and compliance.KernelCare Agent v3 Has Arrivedhttps://itguyeric.com/blog/tuxcare-kernelcare-v3-arrived/Wed, 17 Sep 2025 09:00:00 -0500https://itguyeric.com/blog/tuxcare-kernelcare-v3-arrived/I wrote this for TuxCare to announce KernelCare Agent v3, which introduces signed patch validation while keeping live patching disruption-free.The New TuxCare Enterprise Support: Premium Coverage for AlmaLinux and Rocky Linuxhttps://itguyeric.com/blog/tuxcare-enterprise-support-alma-rocky/Tue, 16 Sep 2025 09:00:00 -0500https://itguyeric.com/blog/tuxcare-enterprise-support-alma-rocky/I wrote this for TuxCare on the relaunch of Enterprise Support, which now covers AlmaLinux and Rocky Linux together with 24x7 support and compliance-ready patching.What Is Patch Aware, and Why Should You Care?https://itguyeric.com/blog/tuxcare-patch-aware/Tue, 02 Sep 2025 09:00:00 -0500https://itguyeric.com/blog/tuxcare-patch-aware/I wrote this for TuxCare to explain what patch-aware scanning means, why traditional scanners get Linux wrong, and how it makes audits far less painful.Using TuxCare's ePortal as a Proxy for Radar Scanshttps://itguyeric.com/blog/tuxcare-radar-eportal-proxy/Tue, 26 Aug 2025 09:00:00 -0500https://itguyeric.com/blog/tuxcare-radar-eportal-proxy/I wrote this for TuxCare to show how ePortal can proxy Radar scans, so locked-down fleets route data through one internal server instead of each host phoning home.Working in GovTech: What's Different? | The IT Guy Show Ep. 12https://itguyeric.com/blog/itguyshow-ep12-govtech/Tue, 26 Aug 2025 09:00:00 -0500https://itguyeric.com/blog/itguyshow-ep12-govtech/Joel Krooswyk and I compare public sector and government tech work, covering compliance, modernization, AI, and career shifts.Best Practices for TuxCare Radar Security Scanshttps://itguyeric.com/blog/tuxcare-radar-best-practices/Tue, 19 Aug 2025 09:00:00 -0500https://itguyeric.com/blog/tuxcare-radar-best-practices/I wrote this for TuxCare on building real-world Radar routines, from tagging systems by risk zone to trading bloated spreadsheets for audit-ready reports.Standardization and Management at Scale | Up and Running with Red Hat Satellite 04https://itguyeric.com/blog/satellite-04-scale/Fri, 13 Sep 2024 09:00:00 -0500https://itguyeric.com/blog/satellite-04-scale/The finale of the Satellite miniseries, where Richard and I use Ansible system roles, host groups, and OpenSCAP to standardize and manage RHEL at scale.Building Compliant Images with Image Builder | RHEL Presents Ep. 67https://itguyeric.com/blog/rhelpresents-ep67-compliant-images/Thu, 19 Oct 2023 09:00:00 -0600https://itguyeric.com/blog/rhelpresents-ep67-compliant-images/Terry Bowling, Amy Farley, and Mohit Goyal join us to show how Image Builder can bake compliance profiles right into your RHEL golden images.Building Security-Compliant Images with Red Hat Enterprise Linux Image Builderhttps://itguyeric.com/blog/rhel-image-builder-compliant-images/Wed, 04 Oct 2023 09:00:00 -0500https://itguyeric.com/blog/rhel-image-builder-compliant-images/I show how to build security-compliant golden images with Image Builder and OpenSCAP profiles.Security: System Auditing | Into the Terminal 64https://itguyeric.com/blog/into-the-terminal-ep64-system-auditing/Fri, 31 Mar 2023 09:00:00 -0500https://itguyeric.com/blog/into-the-terminal-ep64-system-auditing/Configuring <code>auditd</code> and writing audit rules.