Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Compliance Masonry QuickStart

Avatar for Aidan Feldman Aidan Feldman
October 20, 2016
Technology
0
520

Compliance Masonry QuickStart

Presentation for http://open-control.org/event2016/.
Avatar for Aidan Feldman

Aidan Feldman

October 20, 2016
Tweet

More Decks by Aidan Feldman

See All by Aidan Feldman
Human-Centered DevOps
Avatar for Aidan Feldman aidanfeldman
0
14
Love and agony: containers in government
Avatar for Aidan Feldman aidanfeldman
0
250
Search for Static Sites
Avatar for Aidan Feldman aidanfeldman
2
650
Everything I think I understand about IT compliance
Avatar for Aidan Feldman aidanfeldman
1
220
DevOps at Large: Modernizing apps and infrastructure in the federal government
Avatar for Aidan Feldman aidanfeldman
0
590
Dabbling in Docker
Avatar for Aidan Feldman aidanfeldman
0
130
Git, Graphically
Avatar for Aidan Feldman aidanfeldman
0
260
Teaching Software to Tango
Avatar for Aidan Feldman aidanfeldman
0
35

Other Decks in Technology

See All in Technology
newmo の創業を支える Software Architecture と Platform Engineering
Avatar for Yuki Ito 110y
5
590
ソフトウェアテスト 最初の一歩 〜テスト設計技法をワークで体験しながら学ぶ〜 #JaSSTTokyo / SoftwareTestingFirstStep
Avatar for nihonbuson nihonbuson
PRO
4
320
技術選定を突き詰める 懇親会LT
Avatar for Kaoru okaru
2
1.3k
非同期処理でも分散トレーシングしたい！- OpenTelemetry × Pub/Sub -
Avatar for Tomonori Hayashi phaya72
1
100
Docker Compose で手軽に手元環境を実現する / Simplifying Local Environments with Docker Compose #CinemaDeLT
Avatar for nabeo nabeo
0
270
Platform Engineering for Private Cloud
Avatar for Coté cote
PRO
0
100
10年もののアプリケーションを運用・開発するアプリケーションエンジニアのDatadog活用術
Avatar for miyamu miyamu
0
130
名単体テスト 禁断の傀儡（モック）
Avatar for iwamot iwamot
PRO
1
320
株式会社Awarefy(アウェアファイ)会社説明資料 / Awarefy-Company-Deck
Avatar for Awarefy awarefy
3
17k
KubeCon + CloudNativeCon Europe 2025 Recap: The GPUs on the Bus Go 'Round and 'Round / Kubernetes Meetup Tokyo #70
Avatar for Preferred Networks pfn
PRO
0
150
人間性を捧げる生成AI時代の技術選定
Avatar for yo4raw yo4raw
1
930
PCNW20250514(情シスはAIとどう向き合う？事例から学ぶ活用法)
Avatar for Suguru Ohishi suguru0719
0
110

Featured

See All Featured
What’s in a name? Adding method to the madness
Avatar for Product Marketing Alliance productmarketing
PRO
22
3.4k
CSS Pre-Processors: Stylus, Less & Sass
Avatar for Bermon Painter bermonpainter
357
30k
Performance Is Good for Brains [We Love Speed 2024]
Avatar for Tammy Everts tammyeverts
10
810
The Language of Interfaces
Avatar for Des Traynor destraynor
158
25k
Into the Great Unknown - MozCon
Avatar for Noah Learner thekraken
38
1.8k
Making Projects Easy
Avatar for Brett Harned brettharned
116
6.2k
RailsConf 2023
Avatar for Aaron Patterson tenderlove
30
1.1k
Automating Front-end Workflow
Avatar for Addy Osmani addyosmani
1370
200k
KATA
Avatar for Megan Lloyd mclloyd
29
14k
Code Review Best Practice
Avatar for Trisha Gee trishagee
68
18k
The World Runs on Bad Software
Avatar for Brandon Keepers bkeepers
PRO
68
11k
GitHub's CSS Performance
Avatar for Jon Rohan jonrohan
1031
460k

Transcript

  1. Compliance Masonry Making compliance easier, faster, better. Aidan Feldman &

    James Scott, 18F eRegulations
  2. None

  3. Compliance documentation is the biggest bottleneck that impacts delivery

  4. MyApp cloud.gov Component AWS Component Cloud Foundry Component Compliance Masonry

    Inherits Inherits Inputs SSP Outputs CIS Webiste

  5. demo

  6. eRegs demo

  7. Potential benefits for reviewers • Automatically generate reports • Show

    reviewers what has changed • Ability to view subsets of the documentation • Tracking of dependent systems

  8. Continuously Validate and Verify

  9. Thanks!

  10. name: Identification and Authentication Policy for 18F satisfies: - standard:

    NIST-800-53 control: IA-8 (1) narrative: | PIV verification is subject to the delegated enterprise SSO system. ...
  11. None
  12. None