Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Compliance Masonry QuickStart

Sponsored · Ship Features Fearlessly Turn features on and off without deploys. Used by thousands of Ruby developers. →
Avatar for Aidan Feldman Aidan Feldman
October 20, 2016
Technology
580
0

Compliance Masonry QuickStart

Presentation for http://open-control.org/event2016/.

Avatar for Aidan Feldman

Aidan Feldman

October 20, 2016

More Decks by Aidan Feldman

See All by Aidan Feldman
Human-Centered DevOps
Avatar for Aidan Feldman aidanfeldman
0
42
Love and agony: containers in government
Avatar for Aidan Feldman aidanfeldman
0
310
Search for Static Sites
Avatar for Aidan Feldman aidanfeldman
2
670
Everything I think I understand about IT compliance
Avatar for Aidan Feldman aidanfeldman
1
230
DevOps at Large: Modernizing apps and infrastructure in the federal government
Avatar for Aidan Feldman aidanfeldman
0
610
Dabbling in Docker
Avatar for Aidan Feldman aidanfeldman
0
180
Git, Graphically
Avatar for Aidan Feldman aidanfeldman
0
340
Teaching Software to Tango
Avatar for Aidan Feldman aidanfeldman
0
53

Other Decks in Technology

See All in Technology
『家族アルバム みてね』における インシデント対応との向き合い方 / Approach incident response in Family Album
Avatar for kohbis kohbis
2
280
AI駆動開発が変える、大規模開発の前提 ーHuman in the Loop から Human on the Loop へ / AIE2026
Avatar for Visional Engineering ＆ Design visional_engineering_and_design
1
170
Platform engineering for developers, architects & the rest of us (AI agents)
Avatar for danielbryantuk danielbryantuk
0
160
Claude Codeですべての日常業務を爆速化しよう！
Avatar for みのるん minorun365
PRO
17
16k
エンジニアは生成AIと どのように向き合うべきか？ ことばの意味という観点から
Avatar for Hitomi Yanaka verypluming
3
310
さきさん文庫の書籍ができるまで
Avatar for H.Saki sakiengineer
0
330
電子辞書Brainをネットに繋げてみた(自力編)
Avatar for らすぴー raspython3
0
400
「コーディング」しない人のための Claude Code 入門　ChatGPT の次の一歩 — 業務に組み込む 育成・共有・自動化
Avatar for ふくだ（fukuda ryu） rfdnxbro
2
970
OpenID Connectによるサービス間連携
Avatar for Shigeki Shoji takesection
0
150
AI-DLCを活用した高品質・安全なAI駆動開発実践 / AI Driven Development
Avatar for 吉田真吾 yoshidashingo
1
290
イベントストーミングとKiroの仕様駆動開発で実現する要件の認識合わせプロセス
Avatar for syobochim syobochim
7
1k
GoとSIMDとWasmの今。
Avatar for asuka askua
2
440

Featured

See All Featured
How to Create Impact in a Changing Tech Landscape [PerfNow 2023]
Avatar for Tammy Everts tammyeverts
55
3.4k
Are puppies a ranking factor?
Avatar for Jono Alderson jonoalderson
1
3.5k
Building a Scalable Design System with Sketch
Avatar for Laura Van Doore lauravandoore
463
34k
The Invisible Side of Design
Avatar for Vitaly Friedman smashingmag
302
52k
Intergalactic Javascript Robots from Outer Space
Avatar for Vicent Martí tanoku
273
27k
ReactJS: Keep Simple. Everything can be a component!
Avatar for Pedro Nauck pedronauck
666
130k
HTML-Aware ERB: The Path to Reactive Rendering @ RubyCon 2026, Rimini, Italy
Avatar for Marco Roth marcoroth
1
130
Navigating the Design Leadership Dip - Product Design Week Design Leaders+ Conference 2024
Avatar for Andy Polaine apolaine
1
330
AI Search:
Where Are We & What Can We Do About It?
Avatar for Aleyda Solis aleyda
0
7.5k
How STYLIGHT went responsive
Avatar for nonsquared nonsquared
100
6.1k
Cheating the UX When There Is Nothing More to Optimize - PixelPioneers
Avatar for Stéphanie Walter stephaniewalter
287
14k
Distributed Sagas: A Protocol for Coordinating Microservices
Avatar for Caitie McCaffrey caitiem20
333
22k

Transcript

  1. Compliance Masonry Making compliance easier, faster, better. Aidan Feldman &

    James Scott, 18F eRegulations
  2. None

  3. Compliance documentation is the biggest bottleneck that impacts delivery

  4. MyApp cloud.gov Component AWS Component Cloud Foundry Component Compliance Masonry

    Inherits Inherits Inputs SSP Outputs CIS Webiste

  5. demo

  6. eRegs demo

  7. Potential benefits for reviewers • Automatically generate reports • Show

    reviewers what has changed • Ability to view subsets of the documentation • Tracking of dependent systems

  8. Continuously Validate and Verify

  9. Thanks!

  10. name: Identification and Authentication Policy for 18F satisfies: - standard:

    NIST-800-53 control: IA-8 (1) narrative: | PIV verification is subject to the delegated enterprise SSO system. ...
  11. None
  12. None