![The Adventures of Blink S6e1: The Audit [NIST 800-53 CM(3)]](https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F3lt7vbb3w3c3thd7zeoh.png)
Hey friends, welcome to SEASON 6! We're kicking off this season's Youtube videos on a journey we've been building up to for the past few weeks! We are going to tackle the dreaded beast of Compliance by examining NIST 800-53 CM-3: Change Management!
We've spent years - maybe even decades, at this point - avoiding each other. Devs think that Compliance work is "beneath them". Auditors think developers don't care about safety. They're both only half-right, and this talking past each other ends NOW.
While we're picking a specific set of controls to examine, the real goal of this season is to start thinking about Compliance work differently:
- Governance folks need to understand that the ways they've tried to achieve their goals are unsustainable.
- Software Engineers need to understand that Governance isn't the Bad Guy.
So even if this particular control isn't something your organization uses, I want you to focus on the APPROACH. You can adapt this to whatever set of controls your organization uses!
Leave me a 👍🏻 or a 💬, subscribe so you won't miss any episodes along the way. It's going to be a good season!
This article was originally published by DEV Community and written by Ben Link.
Read original article on DEV Community