Hey friends! Today on The Adventures of Blink, we're going to tackle the base control from NIST 800-53 CM-3... on our journey toward a better relationship between Engineering and Compliance teams!
CM-3 comprises a base control and 8 enhancements - today we'll address the base control, and upcoming episodes will dig into each enhancement.
In this episode, we'll explore the concept of a Baseline (well, two different unrelated concepts... 'cause THAT's not confusing... 🙃) and follow this basic format for building a bridge between our teams:
- Read the control.
- Look at how it's been misinterpreted in the past.
- Explore a Developer-friendly means of meeting the control.
If you're a software engineer, you're going to learn how to communicate with "those Compliance folks". If you're "those Compliance folks"... I think you'll be surprised with just how deeply your engineering team actually cares about the stuff you're worried about.
Remember to 👍🏻, 💬, and subscribe... I love having you fellow adventurers on this journey with me and I want to open up dialogue!
Top comments (0)