Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Compliance Masonry QuickStart

Sponsored · Ship Features Fearlessly Turn features on and off without deploys. Used by thousands of Ruby developers. →
Avatar for Aidan Feldman Aidan Feldman
October 20, 2016
Technology
0
560

Compliance Masonry QuickStart

Presentation for http://open-control.org/event2016/.

Avatar for Aidan Feldman

Aidan Feldman

October 20, 2016
Tweet

More Decks by Aidan Feldman

See All by Aidan Feldman
Human-Centered DevOps
Avatar for Aidan Feldman aidanfeldman
0
28
Love and agony: containers in government
Avatar for Aidan Feldman aidanfeldman
0
270
Search for Static Sites
Avatar for Aidan Feldman aidanfeldman
2
660
Everything I think I understand about IT compliance
Avatar for Aidan Feldman aidanfeldman
1
230
DevOps at Large: Modernizing apps and infrastructure in the federal government
Avatar for Aidan Feldman aidanfeldman
0
610
Dabbling in Docker
Avatar for Aidan Feldman aidanfeldman
0
160
Git, Graphically
Avatar for Aidan Feldman aidanfeldman
0
320
Teaching Software to Tango
Avatar for Aidan Feldman aidanfeldman
0
45

Other Decks in Technology

See All in Technology
15 years with Rails and DDD (AI Edition)
Avatar for Andrzej Krzywda andrzejkrzywda
0
190
Amazon Bedrock Knowledge Basesチャンキング解説！
Avatar for 野口碧生 aoinoguchi
0
140
AzureでのIaC - Bicep? Terraform? それ早く言ってよ会議
Avatar for Toru Makabe torumakabe
1
530
AIと新時代を切り拓く。これからのSREとメルカリIBISの挑戦
Avatar for ktykogm 0gm
0
900
Sansan Engineering Unit 紹介資料
Avatar for Sansan, Inc. sansan33
PRO
1
3.8k
外部キー制約の知っておいて欲しいこと - RDBMSを正しく使うために必要なこと / FOREIGN KEY Night
Avatar for soudai sone soudai
PRO
12
5.4k
Tebiki Engineering Team Deck
Avatar for Tebiki, Inc. tebiki
0
24k
Amazon S3 Vectorsを使って資格勉強用AIエージェントを構築してみた
Avatar for usanchuu usanchuu
3
450
Bill One急成長の舞台裏 開発組織が直面した失敗と教訓
Avatar for SansanTech sansantech
PRO
2
370
AIエージェントを開発しよう！-AgentCore活用の勘所-
Avatar for YukiOgawa yukiogawa
0
160
Introduction to Sansan for Engineers / エンジニア向け会社紹介
Avatar for Sansan, Inc. sansan33
PRO
6
68k
Agile Leadership Summit Keynote 2026
Avatar for seki at druby.org m_seki
1
610

Featured

See All Featured
How to Ace a Technical Interview
Avatar for Jacob Kaplan-Moss jacobian
281
24k
Leo the Paperboy
Avatar for Maya Tellez mayatellez
4
1.4k
GraphQLとの向き合い方2022年版
Avatar for Yosuke Kurami quramy
50
14k
Into the Great Unknown - MozCon
Avatar for Noah Learner thekraken
40
2.3k
Stop Working from a Prison Cell
Avatar for Chris Michel hatefulcrawdad
273
21k
Marketing to machines
Avatar for Jono Alderson jonoalderson
1
4.6k
Breaking role norms: Why Content Design is so much more than writing copy - Taylor Woolridge
Avatar for UX Y'all uxyall
0
160
No one is an island. Learnings from fostering a developers community.
Avatar for Antonio thoeni
21
3.6k
Docker and Python
Avatar for Tania Allard trallard
47
3.7k
Responsive Adventures: Dirty Tricks From The Dark Corners of Front-End
Avatar for Vitaly Friedman smashingmag
254
22k
CoffeeScript is Beautiful & I Never Want to Write Plain JavaScript Again
Avatar for Sam Stephenson sstephenson
162
16k
Why Mistakes Are the Best Teachers: Turning Failure into a Pathway for Growth
Avatar for Umar Saidu Auna auna
0
51

Transcript

  1. Compliance Masonry Making compliance easier, faster, better. Aidan Feldman &

    James Scott, 18F eRegulations
  2. None

  3. Compliance documentation is the biggest bottleneck that impacts delivery

  4. MyApp cloud.gov Component AWS Component Cloud Foundry Component Compliance Masonry

    Inherits Inherits Inputs SSP Outputs CIS Webiste

  5. demo

  6. eRegs demo

  7. Potential benefits for reviewers • Automatically generate reports • Show

    reviewers what has changed • Ability to view subsets of the documentation • Tracking of dependent systems

  8. Continuously Validate and Verify

  9. Thanks!

  10. name: Identification and Authentication Policy for 18F satisfies: - standard:

    NIST-800-53 control: IA-8 (1) narrative: | PIV verification is subject to the delegated enterprise SSO system. ...
  11. None
  12. None