Hey friends, welcome to SEASON 6! We're kicking off this season's Youtube videos on a journey we've been building up to for the past few weeks! We are going to tackle the dreaded beast of Compliance by examining NIST 800-53 CM-3: Change Management!
We've spent years - maybe even decades, at this point - avoiding each other. Devs think that Compliance work is "beneath them". Auditors think developers don't care about safety. They're both only half-right, and this talking past each other ends NOW.
While we're picking a specific set of controls to examine, the real goal of this season is to start thinking about Compliance work differently:
- Governance folks need to understand that the ways they've tried to achieve their goals are unsustainable.
- Software Engineers need to understand that Governance isn't the Bad Guy.
So even if this particular control isn't something your organization uses, I want you to focus on the APPROACH. You can adapt this to whatever set of controls your organization uses!
Leave me a 👍🏻 or a 💬, subscribe so you won't miss any episodes along the way. It's going to be a good season!
Top comments (0)