Security compliance: A global perspective
summary
Explains how Red Hat reduces engineering overhead by validating five cryptographic modules (OpenSSL, others) and offering FIPS 140-3 rebranding to speed government procurement; notes NIST issues one FIPS 140-3 certificate in six months with ~146 queued, and FIPS certificates often last five years. Describes Common Criteria tradeoffs: EAL profiles versus protection profiles, international recognition often capped at EAL2 and 180‑day lab completion requirements. Covers service-level programs like FedRAMP and EU cyber regulation impacts on open source.
AI-written summary · about
chapters (4)
related talks
37mHow To Approach InfoSec Like a Fed(eral Auditor)
36mCommon Criteria Demystified
22mChallenges & Benefits of Certification for Security Hardware
22mEnterprise Linux crypto story
40mSecurity: Why It _has_to Be Open Source
59mSecurity in the Open: OSS and AWS
34mCan Open Source be Secure by Design?
30mTrust Engineering: Building Security Leadership at Early-Stage...