Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Compliance Masonry QuickStart

Avatar for Aidan Feldman Aidan Feldman
October 20, 2016
Technology
0
530

Compliance Masonry QuickStart

Presentation for http://open-control.org/event2016/.

Avatar for Aidan Feldman

Aidan Feldman

October 20, 2016
Tweet

More Decks by Aidan Feldman

See All by Aidan Feldman
Human-Centered DevOps
Avatar for Aidan Feldman aidanfeldman
0
16
Love and agony: containers in government
Avatar for Aidan Feldman aidanfeldman
0
250
Search for Static Sites
Avatar for Aidan Feldman aidanfeldman
2
660
Everything I think I understand about IT compliance
Avatar for Aidan Feldman aidanfeldman
1
220
DevOps at Large: Modernizing apps and infrastructure in the federal government
Avatar for Aidan Feldman aidanfeldman
0
590
Dabbling in Docker
Avatar for Aidan Feldman aidanfeldman
0
140
Git, Graphically
Avatar for Aidan Feldman aidanfeldman
0
270
Teaching Software to Tango
Avatar for Aidan Feldman aidanfeldman
0
39

Other Decks in Technology

See All in Technology
オブザーバビリティが広げる AIOps の世界 / The World of AIOps Expanded by Observability
Avatar for Kento Kimura aoto
PRO
0
360
なぜSaaSがMCPサーバーをサービス提供するのか？
Avatar for SansanTech sansantech
PRO
8
2.8k
サラリーマンの小遣いで作るtoCサービス - Cloudflare Workersでスケールする開発戦略
Avatar for shinaps shinaps
2
420
これでもう迷わない！Jetpack Composeの書き方実践ガイド
Avatar for ZOZO Developers zozotech
PRO
0
320
会社紹介資料 / Sansan Company Profile
Avatar for Sansan, Inc. sansan33
PRO
6
380k
【初心者向け】ローカルLLMの色々な動かし方まとめ
Avatar for Aratako aratako
7
3.4k
今！ソフトウェアエンジニアがハードウェアに手を出すには
Avatar for mackee mackee
12
4.7k
フルカイテン株式会社 エンジニア向け採用資料
Avatar for FULL KAITEN fullkaiten
0
8.7k
下手な強制、ダメ！絶対！ 「ガードレール」を「檻」にさせない"ガバナンス"の取り方とは？
Avatar for Masataka Tsukamoto tsukaman
2
430
roppongirb_20250911
Avatar for Kuniaki IGARASHI igaiga
1
210
なぜスクラムはこうなったのか？歴史が教えてくれたこと/Shall we explore the roots of Scrum
Avatar for Genki Sano sanogemaru
5
1.6k
Aurora DSQLはサーバーレスアーキテクチャの常識を変えるのか
Avatar for TomoyaIwata iwatatomoya
1
900

Featured

See All Featured
Rails Girls Zürich Keynote
Avatar for Gregor Martynus gr2m
95
14k
Refactoring Trust on Your Teams (GOTO; Chicago 2020)
Avatar for Rebecca Miller-Webster rmw
34
3.1k
Templates, Plugins, & Blocks: Oh My! Creating the theme that thinks of everything
Avatar for Michelle Schulp Hunt marktimemedia
31
2.5k
Documentation Writing (for coders)
Avatar for Carmen Chung carmenintech
74
5k
Principles of Awesome APIs and How to Build Them.
Avatar for Keavy McMinn keavy
126
17k
Rebuilding a faster, lazier Slack
Avatar for samanthasiow samanthasiow
83
9.2k
Making the Leap to Tech Lead
Avatar for Ryan Cromwell cromwellryan
135
9.5k
GraphQLの誤解/rethinking-graphql
Avatar for sonatard sonatard
72
11k
実際に使うSQLの書き方 徹底解説 / pgcon21j-tutorial
Avatar for soudai sone soudai
PRO
188
55k
Why You Should Never Use an ORM
Avatar for John Nunemaker jnunemaker
PRO
59
9.5k
Side Projects
Avatar for Sacha Greif sachag
455
43k
ReactJS: Keep Simple. Everything can be a component!
Avatar for Pedro Nauck pedronauck
667
120k

Transcript

  1. Compliance Masonry Making compliance easier, faster, better. Aidan Feldman &

    James Scott, 18F eRegulations
  2. None

  3. Compliance documentation is the biggest bottleneck that impacts delivery

  4. MyApp cloud.gov Component AWS Component Cloud Foundry Component Compliance Masonry

    Inherits Inherits Inputs SSP Outputs CIS Webiste

  5. demo

  6. eRegs demo

  7. Potential benefits for reviewers • Automatically generate reports • Show

    reviewers what has changed • Ability to view subsets of the documentation • Tracking of dependent systems

  8. Continuously Validate and Verify

  9. Thanks!

  10. name: Identification and Authentication Policy for 18F satisfies: - standard:

    NIST-800-53 control: IA-8 (1) narrative: | PIV verification is subject to the delegated enterprise SSO system. ...
  11. None
  12. None