Upgrade to Pro — share decks privately, control downloads, hide ads and more …

DevOps at Large: Modernizing apps and infrastru...

DevOps at Large: Modernizing apps and infrastructure in the federal government

Avatar for Aidan Feldman

Aidan Feldman

May 18, 2016
Tweet

More Decks by Aidan Feldman

Other Decks in Technology

Transcript

  1. 15

  2. data !"" standards # !"" NIST-800-53.yaml !"" certifications # !""

    FedRAMP-low.yaml # !"" FedRAMP-med.yaml # $"" LATO.yaml $"" components !"" EC2 !"" Cloud Foundry !"" cloud.gov $"" Rails
  3. name: Access Control Policies for 18F references: # … verifications:

    - key: POLICY_DOC name: Policy Document path: https://github.com/18F/compliance-docs/blob/master/AC-Policy.md type: URL satisfies: - standard_key: NIST-800-53 control_key: AC-18 (1) narrative: … implementation_status: … covered_by: - verification_key: POLICY_DOC narrative: …
  4. Problems a Agencies are risk-averse b Hiring is complex and

    slow c Procurement is complex and slow
  5. Thanks! ! Tweet @aidanfeldman
 Follow @18F 
 Ship cloud.gov Learn

    18f.gsa.gov Chat chat.18f.gov (#devops-public) Comply github.com/18F/compliance-toolkit Help join.18f.gov
  6. Questions? Tweet @aidanfeldman
 Follow @18F 
 Ship cloud.gov Learn 18f.gsa.gov

    Chat chat.18f.gov (#devops-public) Comply github.com/18F/compliance-toolkit Help join.18f.gov