Closed afeld closed 7 years ago
@mogul @joshuamckenty @afeld @pburkholder
I'd recommend a planning call/hangout on 7/28 that we can promote.
OpenControl is currently targeted at FISMA compliance. It makes sense to have the first meeting in DC. We could have a second meeting in DC, or have a joint meeting in DC at same time...
Any particular reason for 7/28?
@mogul Suggesting 7/28 (or 7/29) for urgency sake and get started before August. Would first week of August make more sense?
But I think we should decide today and get the word out. So maybe Aug 1 or 2nd works better so we can promote for week.
7/29 is easier for me. I'll set up a doodle. I disagree on the FISMA bias, though. We're using OpenControl for ICD-503, and investigating it for PCI, as well as the FISMA and FEDRAMP use cases.
Doodle poll for a planning call is up here: http://doodle.com/poll/ckqd5xfmzf7h27rw
Re: the dates and location for the actual event, maybe we put out another Doodle/survey later to see people's preferences, and go with the majority. I'm sure 18F can host in either city.
Did we pick a time
Are we on today for 3pm EDT?
+1 for a Google Hangout or the like for 3pm today EST/EDT
If Google hangout can someone not at GSA/18F setup the link as our Google Hangout doesn't allow for in room chat? Just post the link here
Here is a URL for a 3pm hangout:
https://plus.google.com/hangouts/_/govready.com/opencontrol-mtg
Perfect, thank you. Easier to use yours.
Sent from my iPhone
On Jul 29, 2016, at 8:31 AM, Greg Elin notifications@github.com wrote:
Here is a URL for a 3pm hangout:
https://plus.google.com/hangouts/_/govready.com/opencontrol-mtg
— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or mute the thread.
@joshuamckenty Is the survey up?
We can break these TODOs out to issues on some repository at some point.
Some bad news the cloud.gov team found out after the meeting yesterday: money is a bit tight on our side at the moment, so we're not going to be able to cover travel for our attendees 😞 Maybe we should try and re-orient around a distributed conference?
...much less host. I'm investigating options for virtual unconference (ad-hoc breakout sessions, etc)
Can anyone name other options as suited to this kind of interaction?
I'm putting out some emails on possible spaces. I'm assuming our ideal space is vendor neutral. So possible ideas include:
Draft of the survey is up: https://www.surveymonkey.com/r/CSV29MP
Please provide feedback, as I'd like to start circulating this.
The Pivotal office in DC is in the WeWork space, which has also been used for hosting the Cloud Native Meetup and the Cloud Foundry meetups. I can see if they would be willing to donate the space, or alternatively if there's a fair-share way to let attendees contribute.
See my note above...most of the 18F team isn't in DC, and we wouldn't be able to travel there (i.e. the answer to survey question 2 would be "no"). Should we send the survey even if it ends up being a distributed thing?
For the survey, I'd make volunteering to help a checkbox, then make the contact info a separate optional question so we can follow up with them. Also, those dates seem a bit soon, no?
@joshuamckenty the survey is excellent. Just a couple thoughts and I'm not strongly wedded to them.
I'm checking out https://www.excella.com/events/arlington-tech-exchange as a potential space. Accommodates up to 100.
Eastern-Foundry may be able to host in late Sep, Early Oct in their Rosslyn space at 1100 Wilson Avenue. The space has a large classroom plus a large co-working space. Would be very easy for us to use if event was on weekend. (cost is $71/hour for after hours HVAC on weekend). Bad dates for them are: September 18th, 26th, and 29th.
Nice conference survey for online conference here by AutomationGuild here:
Really like AutomationGuild's first survey question: "What is your single biggest automation challenge right now?"
We’re looking to host the first community event for the OpenControl community (http://open-control.org), a group of government staff and government contractors passionately pursuing Compliance-as-Code. We believe in both innovation and security and are developing tools necessary to align security assessments and authorization with modern, continuous software development and delivery.
We are currently conducting a survey to gauge audience. We currently expect attendance to range between 30 and 60 persons with a small chance of 100 persons. Attendees will be mostly DevOps-types with some security and information assurance professionals. We expect an even mix from federal agencies and contractors and vendors. Organizers include recognized names in govit and civic technologies.
The venue will be an un-conference with a couple of group plenary sessions in the morning. Wireless, power, and white boards will be important. We probably only need the plenary session area and one/two breakout room to have A/V.
The survey will give us feedback if a one-day or two-day event makes sense. We expect a one day event. Most likely during the week, but could be also be on a Saturday.
Food would be informal, like lunch boxes or pizza and snacks.
I don't expect interest to be limited to government, as we've seen a lot of interest from other regulated industries (financial services and healthcare). Looks good otherwise.
Sent from my iPhone
On Aug 3, 2016, at 7:41 AM, Greg Elin notifications@github.com wrote:
Draft description to describe event to venues:
We’re looking to host the first community event for the OpenControl community (http://open-control.org), a group of government staff and government contractors passionately pursuing Compliance-as-Code. We believe in both innovation and security and are developing tools necessary to align security assessments and authorization with modern, continuous software development and delivery.
We are currently conducting a survey to gauge audience. We currently expect attendance to range between 30 and 60 persons with a small chance of 100 persons. Attendees will be mostly DevOps-types with some security and information assurance professionals. We expect an even mix from federal agencies and contractors and vendors. Organizers include recognized names in govit and civic technologies.
The venu will be an un-conference with a couple of group plenary sessions in the morning. Wireless, power, and white boards will be important. We probably only need the plenary session area and one/two breakout room to have A/V.
The survey will give us feedback if a one-day or two-day event makes sense. We expect a one day event. Most likely during the week, but could be also be on a Saturday.
Food would be informal, like lunch boxes or pizza and snacks.
— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or mute the thread.
We’re looking to host the first community event for the OpenControl community (http://open-control.org), a group of government staff, government contractors, and other compliance-heavy tech fields who passionately pursuing Compliance-as-Code. We believe in both innovation and security and are developing tools necessary to align security assessments and authorization with modern, continuous software development and delivery.
We are currently conducting a survey to gauge audience. We currently expect attendance to range between 30 and 60 persons with a small chance of 100 persons. Attendees will be mostly DevOps-types with some security and information assurance professionals. We expect an even mix from federal agencies and contractors and vendors. Organizers include recognized names in govit and civic technologies.
The venue will be an un-conference with a couple of group plenary sessions in the morning. Wireless, power, and white boards will be important. We probably only need the plenary session area and one/two breakout room to have A/V.
The survey will give us feedback if a one-day or two-day event makes sense. We expect a one day event. Most likely during the week, but could be also be on a Saturday.
Food would be informal, like lunch boxes or pizza and snacks.
Subject: Survey for Compliance-as-Code Face-to-Face in Sep/Oct
Hi,
Those of who started http://Open-Control.org are passionate about the idea of Compliance-as-Code and a better, more DevOps-ish way to generate generate System Security Plans.
We want to host the the first convening and un-conference on Compliance-as-Code and get the community together discuss status and possibilities.
We thought this would interest you, so we set up poll to learn what would be the best location and place.
https://www.surveymonkey.com/r/CSV29MP
Hope to hear from you!
Note to myself: Remember to mention FedRAMP. And PCI. And ICD-503. And HIPAA. And other regimes.
We've had over 40 responses to the survey, and the data is pretty conclusive. Shall we host another team call to plan next steps? @gregelin would you coordinate?
@joshuamckenty Will organize. Thanks!
Survey results as of 8/19/2016: opencontrol-event-survey-results-mid-aug2016.pdf
Ongoing survey results: https://www.surveymonkey.com/results/SM-Z2NXMLLM/
Washington, DC it is, then.
19 people have volunteered to help out with the event as well.
So what's next for this -- can we move on week of Oct 3 before that window closes?
+1 on this.
On Aug 30, 2016, at 12:26 PM, Peter Burkholder (@pburkholder) notifications@github.com wrote:
So what's next for this -- can we move on week of Oct 3 before that window closes?
— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or mute the thread.
@pburkholder @joshuamckenty @afeld @mogul @JJediny I've confirmed Using Eastern-Foundry's collaboration space at 1100 Wilson Blvd, Rosslyn, VA for our all day event.
I'm thinking Thursday October 6, might be best day. We could also do weekend. But if we do weekend, we will need to pay a few hundred dollars for HVAC (not a big deal).
Do we think weekday or weekend is best?
I'm also getting a couple people to help me get the organizing going. So I can schedule some meetings starting next week to organize and promote.
@gregelin let me know how I can help, I'd vote for a weekday Oct 6th works for me
Monday is the only day that week I can make it, so selfishly I would go for that. But generally I agree that a weekday is better.
@gregelin were you going to arrange another call?
@pburkholder @joshuamckenty @afeld @mogul @JJediny - I had less time to work on moving things forward last week than I expected, but myself and @mcupp93 are really ready to pick up the gauntlet this evening.
Three questions:
I don’t want to post the volunteer list, but I’ll email it to you if you provide an email :) I can do any time the week of the 10th or the week of the 24th, I believe.
On Sep 14, 2016, at 2:15 PM, Greg Elin notifications@github.com wrote:
@pburkholder @joshuamckenty @afeld @mogul @JJediny - I had less time to work on moving things forward last week than I expected, but myself and @mcupp93 are really ready to big up the gauntlet this evening.
Three questions:
• Can I get a hold of the list of volunteers @joshuamckenty mentioned?
• Do we want to push back to later in October, or still pursue for 2 to 3 weeks from now?
• I kind of really want @joshuamckenty to be there, you being on the web site and all. Is Monday the only day you do an all day in Oct?
— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or mute the thread.
Best way to reach me via email is gregelin@govready.com
Sent from my iPhone
On Sep 15, 2016, at 12:08 PM, Joshua McKenty notifications@github.com wrote:
I don’t want to post the volunteer list, but I’ll email it to you if you provide an email :) I can do any time the week of the 10th or the week of the 24th, I believe.
On Sep 14, 2016, at 2:15 PM, Greg Elin notifications@github.com wrote:
@pburkholder @joshuamckenty @afeld @mogul @JJediny - I had less time to work on moving things forward last week than I expected, but myself and @mcupp93 are really ready to big up the gauntlet this evening.
Three questions:
• Can I get a hold of the list of volunteers @joshuamckenty mentioned?
• Do we want to push back to later in October, or still pursue for 2 to 3 weeks from now?
• I kind of really want @joshuamckenty to be there, you being on the web site and all. Is Monday the only day you do an all day in Oct?
— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or mute the thread.
— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or mute the thread.
Are people available for a coordinating call on Monday or Tuesday next week?
I did express interest in coordinating the on-site a few weeks ago. However, my current work with 18F is pretty far afield from masonry, so I don't think I'd be able to justify coordination work under my current remit.
@joshuamckenty Reminder to please send me the volunteers? Thanks!
@mogul @joshuamckenty @gregelin @afeld @chipchilders @brittag @geramirez @jcscottiii @JJediny - Can people make a planning call for the face-to-face event either Tuesday 9/20 at 3:30 or Wed 9/21 at 3:00?
OpenControl Gathering Planning Meeting Tuesday, 9/20, 3:30 PM EST / 12:30 PM PST
Zoom video: https://zoom.us/j/7783218166 iPhone one-tap (US Toll): +14086380968,7783218166# or +16465588656,7783218166# Telephone: +1 408 638 0968 (US Toll) or +1 646 558 8656 (US Toll) Meeting ID: 778 321 8166
AGENDA
The Save the Date email prepared and ready to send. Please let me know addresses that should be included. See issue #13.
You are invited to first OpenControl Virtual Symposium!!
We are hosting a Virtual Symposium (via Zoom) to grow our OpenControl Community.
When: Oct 20, 2016 10:00 AM to 6:00 PM Eastern Time (US and Canada)
Please register to help us prepare better (you can attend without registering) https://zoom.us/meeting/register/395a70acf379371a66858a512be5123a
We are group of technologists, government staff, contractors and others in regulated fields committed to Compliance-as-Code. We are developing tools necessary to align security assessments and authorizations with modern, continuous software development and delivery.
Web: http://open-control.org Mailinglist: http://eepurl.com/cg0ZE1
Github: https://github.com/opencontrol Slack: https://opencontrol.slack.com Slack invite: https://opencontrol-slack-inviter.herokuapp.com Webinars: http://bit.ly/opencontrol-webinars
First Symposium seems to be a huge success. Closing this issue for now.
@mogul @joshuamckenty @gregelin and others have brought up the idea of having an in-person get-together (in San Francisco?) in the fall to sync up about OpenControl. Starting this discussion to figure out the things that need figuring out. Will continue adding to this list.