State of Open Con 2025

In recent years, NIST has published several Special Publications focused on cloud application and network security. These documents provide comprehensive guidance and standards for security best practices. They address cloud security controls, Zero-Trust Architectures, and microservice security, while also examining the security implications of various cloud network topologies.

In this talk, Matt will summarize the key recommendations from these publications and outline practical steps for implementation. He'll also demonstrate how to maintain ongoing compliance with these controls using OSCAL and Lula.