Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Compliance Masonry QuickStart

Sponsored · SiteGround - Reliable hosting with speed, security, and support you can count on. →
Avatar for Aidan Feldman Aidan Feldman
October 20, 2016
Technology
590
0

Compliance Masonry QuickStart

Presentation for http://open-control.org/event2016/.

Avatar for Aidan Feldman

Aidan Feldman

October 20, 2016

More Decks by Aidan Feldman

See All by Aidan Feldman
Human-Centered DevOps
Avatar for Aidan Feldman aidanfeldman
0
45
Love and agony: containers in government
Avatar for Aidan Feldman aidanfeldman
0
310
Search for Static Sites
Avatar for Aidan Feldman aidanfeldman
2
670
Everything I think I understand about IT compliance
Avatar for Aidan Feldman aidanfeldman
1
230
DevOps at Large: Modernizing apps and infrastructure in the federal government
Avatar for Aidan Feldman aidanfeldman
0
610
Dabbling in Docker
Avatar for Aidan Feldman aidanfeldman
0
180
Git, Graphically
Avatar for Aidan Feldman aidanfeldman
0
340
Teaching Software to Tango
Avatar for Aidan Feldman aidanfeldman
0
55

Other Decks in Technology

See All in Technology
Oracle AI Database@AWS：サービス概要のご紹介
Avatar for oracle4engineer oracle4engineer
PRO
4
3k
生成 AI 実践ガイド (概略版) AIガバナンス編
Avatar for Asei Sugiyama asei
0
150
クレデンシャル流出 ― 攻撃 3 時間 vs 復旧 10 時間。この非対称性にどう備えるか
Avatar for kazzpapa3 kazzpapa3
2
440
AWS Security Agent といっしょに脅威モデリングをやってみよう
Avatar for amarelo_n24 amarelo_n24
1
190
2026年6月23日 Syncable Tech + Start Python Club にて
Avatar for Kimikazu Kato hamukazu
0
140
【Cyber-sec+】経営層を"動かす"ための考え方
Avatar for Hisashi Hibino hssh2_bin
0
200
気軽に使える"情報のハブ"としてのNotion活用　〜フロー情報の集積点 と、 Claude Code × Notion AI〜
Avatar for Ryo Okubo syucream
1
160
AIはどのように 組織のアジリティを変えるのか？
Avatar for J.K junki
4
1.1k
【セミナー資料】Claude Code をセキュアに使うための考え方と設定の勘どころ / Claude Code Webinar 20260616
Avatar for MasahiroKawahara masahirokawahara
2
440
Flow 不死：AI 時代 DevOps 的不變本質
Avatar for Cheng-Wei Chen cheng_wei_chen
2
440
SONiCのLinuxベースを活かしたZabbix監視
Avatar for SONiC Users Group Japan sonic
0
260
SONiCで構築・運用する生成AI向けパブリッククラウドネットワーク ～実装編～
Avatar for SONiC Users Group Japan sonic
0
320

Featured

See All Featured
How to make the Groovebox
Avatar for あそなす asonas
2
2.2k
The Success of Rails: Ensuring Growth for the Next 100 Years
Avatar for Eileen M. Uchitelle eileencodes
47
8.2k
How to Align SEO within the Product Triangle To Get 
Buy-In & Support - #RIMC
Avatar for Aleyda Solis aleyda
2
1.5k
16th Malabo Montpellier Forum Presentation
Avatar for AKADEMIYA2063 akademiya2063
PRO
0
150
Google's AI Overviews - The New Search
Avatar for Barry Adams badams
0
1k
Understanding Cognitive Biases in Performance Measurement
Avatar for Philip Tellis bluesmoon
32
2.9k
My Coaching Mixtape
Avatar for mlcsv mlcsv
0
150
Optimising Largest Contentful Paint
Avatar for Harry Roberts csswizardry
37
3.7k
The Illustrated Children's Guide to Kubernetes
Avatar for Chris Short chrisshort
51
52k
A better future with KSS
Avatar for Kyle Neath kneath
240
18k
Fantastic passwords and where to find them - at NoRuKo
Avatar for Phil Nash philnash
52
3.7k
[RailsConf 2023 Opening Keynote] The Magic of Rails
Avatar for Eileen M. Uchitelle eileencodes
31
10k

Transcript

  1. Compliance Masonry Making compliance easier, faster, better. Aidan Feldman &

    James Scott, 18F eRegulations
  2. None

  3. Compliance documentation is the biggest bottleneck that impacts delivery

  4. MyApp cloud.gov Component AWS Component Cloud Foundry Component Compliance Masonry

    Inherits Inherits Inputs SSP Outputs CIS Webiste

  5. demo

  6. eRegs demo

  7. Potential benefits for reviewers • Automatically generate reports • Show

    reviewers what has changed • Ability to view subsets of the documentation • Tracking of dependent systems

  8. Continuously Validate and Verify

  9. Thanks!

  10. name: Identification and Authentication Policy for 18F satisfies: - standard:

    NIST-800-53 control: IA-8 (1) narrative: | PIV verification is subject to the delegated enterprise SSO system. ...
  11. None
  12. None