devops in government
5 Steps to Turn Your RMF Backlog Into a Continuous ATO: The CSRMC Migration Playbook
Let's be honest about the legacy Risk Management Framework (RMF): for the last decade, achieving an ATO has been less about actual cybersecurity and more about creative writing. We built three-year "snapshot" ...
Modernizing Federal DevSecOps for CMMC and Beyond
The Cybersecurity Maturity Model Certification (CMMC) 2.0 marks a clear shift from box-checking to modernization. Compliance is, of course, important. However, this evolution highlights the need to revise our approach to how ...
Mission Velocity, Mission Assurance: Why Federal Software Security Demands Both
Federal missions are moving faster than ever, and the demand for speed is matched only by the need for greater trust. From implementing zero-trust mandates to deploying AI-powered systems, today's agencies are ...
French Gov. Leaks 43 Million People’s Data — ‘France Travail’ Says Sorry
La grande cybermalveillance: French government’s employment agency loses control of citizens’ data after biggest breach in Gallic history ...
DoD Email Breach: Pentagon Tells Victims 12 Months Late
3TB Email FAIL: Personal info of tens of thousands leaks. Microsoft cloud email server was missing a password ...
Federal DevSecOps Leaders: It’s Time to Join The Conversation
Over the past three years, we’ve held the Federal DevSecOps Leadership Forum in Washington, D.C., where government decision-makers come together and share their DevSecOps journeys on stage with government leaders across the ...
Improving DevSecOps at the GSA
The U.S. General Services Administration has a number of roles in the U.S. government. For instance, the GSA is the world’s largest landlord. It administers all of the civilian federal government buildings ...
DevOps at the US Patent and Trademark Office
Discussions of DevOps in government are always popular because it is a tough subject. Few have successfully cracked the code, and, even if they have, it is a slow, uphill climb with ...
