Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Compliance Masonry QuickStart

Avatar for Aidan Feldman Aidan Feldman
October 20, 2016
Technology
590
0

Compliance Masonry QuickStart

Presentation for http://open-control.org/event2016/.

Avatar for Aidan Feldman

Aidan Feldman

October 20, 2016

More Decks by Aidan Feldman

See All by Aidan Feldman
Human-Centered DevOps
Avatar for Aidan Feldman aidanfeldman
0
50
Love and agony: containers in government
Avatar for Aidan Feldman aidanfeldman
0
320
Search for Static Sites
Avatar for Aidan Feldman aidanfeldman
2
680
Everything I think I understand about IT compliance
Avatar for Aidan Feldman aidanfeldman
1
240
DevOps at Large: Modernizing apps and infrastructure in the federal government
Avatar for Aidan Feldman aidanfeldman
0
610
Dabbling in Docker
Avatar for Aidan Feldman aidanfeldman
0
190
Git, Graphically
Avatar for Aidan Feldman aidanfeldman
0
360
Teaching Software to Tango
Avatar for Aidan Feldman aidanfeldman
0
56

Other Decks in Technology

See All in Technology
研究開発部の紹介 / Sansan R&D Profile
Avatar for Sansan, Inc. sansan33
PRO
4
24k
オートロックマンションなのに、各部屋は施錠なし！？ 攻撃者が組織内ネットワークで大暴れする理由 / The Front Door Is Locked, but the Rooms Are Wide Open: Why Attackers Move Freely Inside Enterprise Networks
Avatar for NTT docomo Business nttcom
1
1.6k
Bill One 開発エンジニア 紹介資料
Avatar for Sansan, Inc. sansan33
PRO
7
19k
修正PRを食べてレビュースキルが賢くなる：Claude Codeによる自己改善サイクル
Avatar for um(うめ) yuyaumetsu
6
1.4k
AIは実装を速くする。では、私たちは何を今作るべきか？－立場を越えてリリースに向き合ったチーム開発の実践 / 20260801 Hiromi Nakaya and Naoki Takahashi
Avatar for SHIFT EVOLVE shift_evolve
PRO
3
450
FORENSIA: ローカルLLMフォレンジックハーネス
Avatar for S.Nakano sumeshi
2
350
Digitization部 紹介資料
Avatar for Sansan, Inc. sansan33
PRO
2
7.7k
AI ネイティブな組織に Gemini Enterprise Agent Platform がなぜ必要なのか
Avatar for Asei Sugiyama asei
1
190
【CEDEC2026】『ウマ娘 プリティーダービー』 英語版のキャラクターの方言や口調をローカライズするための創造的アプローチ
Avatar for Cygames, Inc. cygames
PRO
1
200
SmartHR Engineering Team Deck
Avatar for SmartHR Recruit smarthr
1
1.4k
サイバー捜査員研修（後半）
Avatar for Nomizo Nomizo nomizone
1
810
Software Supply Chain Attackからクラウド環境を守るためにできること
Avatar for LHazy lhazy
2
220

Featured

See All Featured
How to build an LLM SEO readiness audit: a practical framework
Avatar for Nick Samuel nmsamuel
1
850
Documentation Writing (for coders)
Avatar for Carmen Chung carmenintech
77
5.4k
Navigating Weather and Climate Data
Avatar for Ryan Abernathey rabernat
0
460
Collaborative Software Design: How to facilitate domain modelling decisions
Avatar for Kenny Baas-Schwegler baasie
1
270
Leading Effective Engineering Teams in the AI Era
Avatar for Addy Osmani addyosmani
9
2.2k
How to train your dragon (web standard)
Avatar for Monica Dinculescu notwaldorf
97
6.7k
Practical Orchestrator
Avatar for Shlomi Noach shlominoach
191
12k
Building Experiences: Design Systems, User Experience, and Full Site Editing
Avatar for Michelle Schulp Hunt marktimemedia
0
570
Fight the Zombie Pattern Library - RWD Summit 2016
Avatar for Marcelo Somers marcelosomers
234
17k
Max Prin - Stacking Signals: How International SEO Comes Together (And Falls Apart)
Avatar for Tech SEO Connect techseoconnect
PRO
0
360
From Legacy to Launchpad: Building Startup-Ready Communities
Avatar for Dug Song dugsong
0
290
Measuring Dark Social's Impact On Conversion and Attribution
Avatar for Stephen Akadiri stephenakadiri
2
250

Transcript

  1. Compliance Masonry Making compliance easier, faster, better. Aidan Feldman &

    James Scott, 18F eRegulations
  2. None

  3. Compliance documentation is the biggest bottleneck that impacts delivery

  4. MyApp cloud.gov Component AWS Component Cloud Foundry Component Compliance Masonry

    Inherits Inherits Inputs SSP Outputs CIS Webiste

  5. demo

  6. eRegs demo

  7. Potential benefits for reviewers • Automatically generate reports • Show

    reviewers what has changed • Ability to view subsets of the documentation • Tracking of dependent systems

  8. Continuously Validate and Verify

  9. Thanks!

  10. name: Identification and Authentication Policy for 18F satisfies: - standard:

    NIST-800-53 control: IA-8 (1) narrative: | PIV verification is subject to the delegated enterprise SSO system. ...
  11. None
  12. None