Upgrade to Pro — share decks privately, control downloads, hide ads and more …

DevOps at Large: Modernizing apps and infrastru...

DevOps at Large: Modernizing apps and infrastructure in the federal government

Aidan Feldman

May 18, 2016
Tweet

More Decks by Aidan Feldman

Other Decks in Technology

Transcript

  1. 15

  2. data !"" standards # !"" NIST-800-53.yaml !"" certifications # !""

    FedRAMP-low.yaml # !"" FedRAMP-med.yaml # $"" LATO.yaml $"" components !"" EC2 !"" Cloud Foundry !"" cloud.gov $"" Rails
  3. name: Access Control Policies for 18F references: # … verifications:

    - key: POLICY_DOC name: Policy Document path: https://github.com/18F/compliance-docs/blob/master/AC-Policy.md type: URL satisfies: - standard_key: NIST-800-53 control_key: AC-18 (1) narrative: … implementation_status: … covered_by: - verification_key: POLICY_DOC narrative: …
  4. Problems a Agencies are risk-averse b Hiring is complex and

    slow c Procurement is complex and slow
  5. Thanks! ! Tweet @aidanfeldman
 Follow @18F 
 Ship cloud.gov Learn

    18f.gsa.gov Chat chat.18f.gov (#devops-public) Comply github.com/18F/compliance-toolkit Help join.18f.gov
  6. Questions? Tweet @aidanfeldman
 Follow @18F 
 Ship cloud.gov Learn 18f.gsa.gov

    Chat chat.18f.gov (#devops-public) Comply github.com/18F/compliance-toolkit Help join.18f.gov