Continuous ATOs

Welcome back to This is Fine - the podcast all about navigating the complex world of government technology and cybersecurity. Today’s guest is a true pioneer in government software development: Bryon Kroger. As co-founder of Kessel Run, the Department of Defense’s first software factory, Bryon proved that government agencies can develop and deliver software with the speed and agility of Silicon Valley. Now, as CEO of Rise8, he’s applying those lessons to drive even greater innovation. Bryon is the mastermind behind DoD’s first continuous Authority to Operate, turning a massive security bottleneck with debatable security impact into a value add daily practice. His work is all about dismantling the bureaucratic barriers that prevent agencies from delivering effective, user-focused software. We’re excited to dive into what it really takes to transform government technology with someone who’s not only taken on the system but reshaped it for the better. Episode Chapters: 00:00 Introduction to Government Technology Transformation 01:21 Brian Kroger's Journey: From Air Force to Kessel Run 03:29 Understanding the Acquisition Process in Government 07:09 Bureaucracy Hacking: Navigating Complex Systems 15:23 The Role of Culture in Bureaucracy Hacking 20:53 Pairing as a Tool for Cultural Change 25:41 Implementing Continuous ATOs: Challenges and Insights 27:20 Understanding Security Assessment Challenges 30:14 The Evolution of CATO and Its Implementation 34:39 Continuous Monitoring and Risk Management 39:35 Streamlining Processes for Efficiency 43:47 Scaling Agility in Large Organizations