Compliance Masonry QuickStart

Transcript

1. 1.

   Compliance Masonry Making compliance easier, faster, better. Aidan Feldman &

   James Scott, 18F eRegulations
2. 2.

   None
3. 3.

   Compliance documentation is the biggest bottleneck that impacts delivery

4. 4.

   MyApp cloud.gov Component AWS Component Cloud Foundry Component Compliance Masonry

   Inherits Inherits Inputs SSP Outputs CIS Webiste
5. 5.

   demo

6. 6.

   eRegs demo

7. 7.

   Potential benefits for reviewers • Automatically generate reports • Show

   reviewers what has changed • Ability to view subsets of the documentation • Tracking of dependent systems
8. 8.

   Continuously Validate and Verify

9. 9.

   Thanks!

10. 10.

    name: Identification and Authentication Policy for 18F satisfies: - standard:

    NIST-800-53 control: IA-8 (1) narrative: | PIV verification is subject to the delegated enterprise SSO system. ...
11. 11.

    None
12. 12.

    None