ATO prep - Githubissues

18F / atf-eregs

Container and styles for an ATF eRegs instance

https://regulations.atf.gov/

Other

9 stars 20 forks source link

ATO prep #446

Closed tadhg-ohiggins closed 6 years ago

tadhg-ohiggins commented 7 years ago

According to https://docs.google.com/document/d/1EG-tzRkYZ7_3gLd_hxA2wkV1st_-g8uANdKLnXwL0sE/edit our ATO expires 30 Nov 2016, but we thought that they had paid for longer than that.

[ ] If an updated document reflecting the extension does not exist, create it.
[ ] Link to the updated document with the extended date from this issue.
[ ] Update the title of this issue to reflect the actual expiration date.

yowill commented 7 years ago

Noting this: https://github.com/18F/Infrastructure/issues/694

NoahKunin commented 7 years ago

Now I'm confused - is ATF paid up on cloud.gov?

yowill commented 7 years ago

@NoahKunin Yes, for 2017 they renewed.

micahtaylor commented 7 years ago

Noting that there is an open question of who will own the ATO. 18F or ATF. My impression is it, ideally, should be ATF.

micahtaylor commented 7 years ago

Documenting the ATO conversation on slack - https://gsa-tts.slack.com/archives/C08ULFU22/p1500999065983226

micahtaylor commented 7 years ago

If transferring to ATF via Jay Huie,

Mason Mcdaniel is the CTO over at ATF and is awesome. Would suggest - whenever you do talk to ATF - you ask if you can meet w/ him to discuss the work, ATO, anything. He’s a cloud :fan: and gets it.

yowill commented 7 years ago

Two options for ATF ATO going forward (to be discussed with DOJ folks Thursday at 3 p.m. EST, invite sent):

ATF takes on compliance responsibility for ATF eRegs, using cloud.gov's FedRAMP JAB-approved PATO to make this process easier/faster. (cloud.gov takes care of most compliance controls for an ATO)
18F redirects some efforts during this well-timed engagement to ensure compliance, possibly by creating the required documentation or by converting the sites to a set of static pages (vastly reducing the attack service and allowing GSA to continue owning the ATO for the published static site at no additional cost).

micahtaylor commented 7 years ago

Phone call outcome: ATF has the takeaway to discuss among themselves their staffing capacity to take on the ATO and maintenance related or budget to contract with us to keep the ATO and maintain.

yowill commented 6 years ago

Thomas is going to connect with Micah and Kimber to work on the SSP software stack. Email connecting the three of them is in those folks mailboxes.

micahtaylor commented 6 years ago

GSA will continue to manage the ATO. Closing this and opening new issue to track implementation.