# Request For Feedback: Security Operations Automation

**URL:** <https://forum.ansible.com/t/request-for-feedback-security-operations-automation/30998>\
**Category:** Ansible Project\
**Tags:** galaxy-ng\
**Created:** [August 9, 2019, 4:58am UTC](https://forum.ansible.com/t/request-for-feedback-security-operations-automation/30998 "2019-08-09T04:58:00Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![maxamillion](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/maxamillion/32/98_2.png) [@maxamillion](https://forum.ansible.com/u/maxamillion)\
**Post date:** [August 9, 2019, 4:58am UTC](https://forum.ansible.com/t/request-for-feedback-security-operations-automation/30998/1 "2019-08-09T04:58:00Z")

</div>

Hello all,  
&nbsp;&nbsp;&nbsp;&nbsp;This is a Request For Feedback (and potentially contributors if  
anyone is interested in joining the fun).

I've started creating an Ansible Collection[0][1] with  
modules/plugins/roles/etc focused on Security Operators[2], or  
basically anyone working in a Security Operations Center who might  
need to automate the types of software, utilities, appliances, etc  
that are found there. Examples of this would be Intrusion Detection  
Systems (IDS), Security Information Event Management (SIEM), Security  
Operations/Analytics/Reporting (SOAR) platforms, Firewalls, etc.

Something to note is that at this time I'm not directly targeting  
systems compliance for things like DISA STIG because there are already  
very capable and well maintained Ansible-powered options catering to  
those use cases[3][4][5].

With that in mind though, if there's enough interest I would like to  
establish a Security Automation Ansible Community Working Group[6] to  
focus on the full gamut of Information Security (or as much of it as  
we can) to bring together members of the community interested in all  
facets of Information Security around the goal of automating  
everything we possibly can in Information Security with Ansible.

My questions to everyone are these:

Does this interest you?

Would this be helpful to you in a real way? (personally, professionally, $other)

What specific things would you like to see automated with Ansible that  
aren't already?

Would you be interested in joining a Working Group, contributing code,  
or being involved as an user who regularly provides feedback?

[0] - [https://docs.ansible.com/ansible/devel/dev\_guide/collections\_tech\_preview.html](https://docs.ansible.com/ansible/devel/dev_guide/collections_tech_preview.html)  
[1] - [https://galaxy.ansible.com/docs/contributing/creating\_collections.html](https://galaxy.ansible.com/docs/contributing/creating_collections.html)  
[2] - [https://github.com/ansible-security/community](https://github.com/ansible-security/community)  
[3] - [https://github.com/mindpointgroup](https://github.com/mindpointgroup)  
[4] - [https://github.com/ComplianceAsCode/content/](https://github.com/ComplianceAsCode/content/)  
[5] - [https://github.com/openstack/ansible-hardening](https://github.com/openstack/ansible-hardening)  
[6] - [https://github.com/ansible/community](https://github.com/ansible/community)

---

<div class="post-metadata">

**Author:** ![Akasurde](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/akasurde/32/230_2.png) [@Akasurde](https://forum.ansible.com/u/Akasurde)\
**Post date:** [August 9, 2019, 5:42am UTC](https://forum.ansible.com/t/request-for-feedback-security-operations-automation/30998/2 "2019-08-09T05:42:17Z")

</div>

Sounds good to me. Count me in.