When DevOps Meets Regulation - Integrating Continuous with Government

Explore how DevOps practices can be integrated with government regulations in this 48-minute conference talk from GOTO Copenhagen 2016. Discover the challenges of implementing modern digital service delivery approaches within the context of strict US Federal Government risk management protocols. Learn about continuous delivery, the extensive regulatory framework for information systems, and innovative solutions like CloudGov and OpenControl. Gain insights into balancing agile methodologies with security and privacy controls, and understand the process of obtaining Authority to Operate (ATO) in a highly regulated environment. Examine real-world examples and strategies for reconciling DevOps principles with government compliance requirements, presented by Jez Humble, co-author of Continuous Delivery.

Intro
What is continuous delivery
US government information systems checklist
Security and privacy controls
Authority to operate
The DevOps problem
CloudGov
OpenControl
QA
Low Baseline
Magic
Agile BPA
Question