Compliance Framework - An Open Source OSCAL Compliance Automation Framework - Ian Miell

Open Source In Finance Forum 2024 - London
Presented by Ian Miell, Container Solutions

Title: Compliance Framework - An Open Source OSCAL Compliance Automation Framework
Abstract: The Compliance Framework is an open source project Container Solutions has started that seeks to both automate and improve real-time visibility of an organisation's audit and compliance position. Building on open standards such as OSCAL and Common Cloud Controls (CCC), we seek to leverage the help of the community to: - Reduce the toil of regular control audits - Enable compliance teams with real-time reporting and alerting on compliance status - Get organisations ready for DORA This project was borne out of frustration with the amount of unnecessary and repeated manual work still performed in controls and compliance audit, and the piecemeal and self-serving approaches of the many proprietary tools emerging in this space. It seeks to build on the open approaches of OSCAL and CCC standards out into practical implementation. This talk introduces the work completed so far, the architectural roadmap, and the people already involved. The longer term goal is to donate this work to the community, as Container Solutions has done with the Kubernetes Java SDK, and the External Secrets Operator. To this end this talk seeks to recruit others at FINOS and elsewhere to the cause.

Find more info about FINOS:
On the web: https://www.finos.org/
Twitter: https://x.com/finosfoundation
LinkedIn:   / finosfoundation  
OSFF London: https://events.linuxfoundation.org/op...