Automating Governance: Collaborative Drafting & Risk Cataloging
Stop trading velocity for compliance. You can have both.
Following the success of our previous working sessions in Toronto and London, the Open SDLC Controls Framework working group is gathering in New York for its 4th OSFF interactive working session.
For most financial institutions, "Audit Season" remains a manual, friction-filled process of gathering screenshots and halting deployments. This workshop is designed to change that. Join industry leads Aaron Searle from Morgan Stanley, and Alex Kantor from Kosli to review recent progress, discuss the ongoing standards project, and collaboratively draft key risks and mitigations directly into the Controls Catalog.
In regulated industries, delivering software quickly and securely requires a delicate balance between enterprise policy and developer experience. Building on the momentum of Common Cloud Controls and the AI Governance Framework, this initiative provides a shared, technology-agnostic vocabulary for SDLC controls that the entire industry can adopt.
This New York session represents an active working milestone. We will move beyond high-level theory into the technical "brass tacks" of governance. Participants will engage in interactive working sessions to review, refine, and collaboratively draft risks and mitigations in the Controls Catalog—bridging the gap between what an auditor requires and what a CI/CD pipeline executes.
This session is designed to bring the "Three Lines of Defense" together:
Note: Priority will be given to individuals from FINOS Member financial institutions and regulated industries.
(if the form does not show up below because of company blocking, please try this link)