Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Compliance Masonry QuickStart

Avatar for Aidan Feldman Aidan Feldman
October 20, 2016
Technology
0
520

Compliance Masonry QuickStart

Presentation for http://open-control.org/event2016/.
Avatar for Aidan Feldman

Aidan Feldman

October 20, 2016
Tweet

More Decks by Aidan Feldman

See All by Aidan Feldman
Human-Centered DevOps
Avatar for Aidan Feldman aidanfeldman
0
16
Love and agony: containers in government
Avatar for Aidan Feldman aidanfeldman
0
250
Search for Static Sites
Avatar for Aidan Feldman aidanfeldman
2
650
Everything I think I understand about IT compliance
Avatar for Aidan Feldman aidanfeldman
1
220
DevOps at Large: Modernizing apps and infrastructure in the federal government
Avatar for Aidan Feldman aidanfeldman
0
590
Dabbling in Docker
Avatar for Aidan Feldman aidanfeldman
0
140
Git, Graphically
Avatar for Aidan Feldman aidanfeldman
0
270
Teaching Software to Tango
Avatar for Aidan Feldman aidanfeldman
0
37

Other Decks in Technology

See All in Technology
AWS CDK 開発を成功に導くトラブルシューティングガイド
Avatar for Ryota Nakajima wandora58
3
130
Coinbase™®️ USA Contact Numbers: Complete 2025 Support Guide
Avatar for Johnny Looper officialcoinbasehelpcenter
0
460
AWS CDKの仕組み / how-aws-cdk-works
Avatar for k.goto gotok365
8
300
「クラウドコスト絶対削減」を支える技術—FinOpsを超えた徹底的なクラウドコスト削減の実践論
Avatar for 株式会社DELTA delta_tech
4
180
スタートアップに選択肢を 〜生成AIを活用したセカンダリー事業への挑戦〜
Avatar for Nstock nstock
0
260
マーケットプレイス版Oracle WebCenter Content For OCI
Avatar for oracle4engineer oracle4engineer
PRO
3
970
What’s new in Android development tools
Avatar for Yuki Anzai yanzm
0
460
QuickSight SPICE の効果的な運用戦略～S3 + Athena 構成での実践ノウハウ～/quicksight-spice-s3-athena-best-practices
Avatar for emi emiki
0
120
OSSのSNSツール「Misskey」をさわってみよう（右下ワイプで私のOSCの20年を振り返ります） / 20250705-osc2025-do
Avatar for Akira Ouchi akkiesoft
0
170
[ JAWS-UG千葉支部 x 彩の国埼玉支部 ]ムダ遣い卒業！FinOpsで始めるAWSコスト最適化の第一歩
Avatar for sh_fk2 sh_fk2
2
140
United™️ Airlines®️ Customer®️ USA Contact Numbers: Complete 2025 Support Guide
Avatar for dobek566 flyunitedguide
0
420
開発生産性を組織全体の「生産性」へ！ 部門間連携の壁を越える実践的ステップ
Avatar for ussy / @sudo5in5k sudo5in5k
3
7.5k

Featured

See All Featured
Build your cross-platform service in a week with App Engine
Avatar for Jose L jlugia
231
18k
RailsConf & Balkan Ruby 2019: The Past, Present, and Future of Rails at GitHub
Avatar for Eileen M. Uchitelle eileencodes
138
34k
Practical Orchestrator
Avatar for Shlomi Noach shlominoach
189
11k
Easily Structure & Communicate Ideas using Wireframe
Avatar for Afnizar Nur Ghifari afnizarnur
194
16k
Optimizing for Happiness
Avatar for Tom Preston-Werner mojombo
379
70k
Practical Tips for Bootstrapping Information Extraction Pipelines
Avatar for Matthew Honnibal honnibal
PRO
20
1.3k
Building an army of robots
Avatar for Kyle Neath kneath
306
45k
Typedesign – Prime Four
Avatar for Hannes Fritz hannesfritz
42
2.7k
For a Future-Friendly Web
Avatar for Brad Frost brad_frost
179
9.8k
Measuring & Analyzing Core Web Vitals
Avatar for Philip Tellis bluesmoon
7
510
Design and Strategy: How to Deal with People Who Don’t "Get" Design
Avatar for Morgane Peng morganepeng
130
19k
Site-Speed That Sticks
Avatar for Harry Roberts csswizardry
10
690

Transcript

  1. Compliance Masonry Making compliance easier, faster, better. Aidan Feldman &

    James Scott, 18F eRegulations
  2. None

  3. Compliance documentation is the biggest bottleneck that impacts delivery

  4. MyApp cloud.gov Component AWS Component Cloud Foundry Component Compliance Masonry

    Inherits Inherits Inputs SSP Outputs CIS Webiste

  5. demo

  6. eRegs demo

  7. Potential benefits for reviewers • Automatically generate reports • Show

    reviewers what has changed • Ability to view subsets of the documentation • Tracking of dependent systems

  8. Continuously Validate and Verify

  9. Thanks!

  10. name: Identification and Authentication Policy for 18F satisfies: - standard:

    NIST-800-53 control: IA-8 (1) narrative: | PIV verification is subject to the delegated enterprise SSO system. ...
  11. None
  12. None