FINOS FDC3 & Common Cloud Controls - Rob Moffat, FINOS

FINOS FDC3 & Common Cloud Controls - Rob Moffat, FINOS

Author: FINOS June 18, 2026 Duration: 20:58

Rob Moffat (Chief Architect at FINOS) maps out the intersection of workspace interoperability, open-source AI deployment, and multi-cloud security frameworks. He compares MCP (Model Context Protocol) with FDC3, tracks the rollout of the Common Cloud Controls (CCC) live validator tool, and reveals how open-source standards prevent multi-vendor lock-in at the desktop and infrastructure layers.🇬🇧 Join us in London! Dive into FDC3 Con and CCC working sessions on June 23-24, ahead of OSFF London on June 25, 2026: https://hubs.ly/Q041YV9Z0 (Use Code: 26YTOSFFLN20C)🕒 Timestamps:0:00 AI Integration Realities: MCP vs. FDC3 Context Paradigms0:41 Podcast Intro, Key Dates, and Global Showcase Streaming1:25 Shout-Out to Our Key Sponsors and Foundation Supporters2:50 The Evolution of FDC3: Moving Past the 2.0 Era into Context Sharing4:15 Why Request-Response Frameworks Fail at Complex Desktop Interop5:40 Empowering AI Agents with the FDC3 Semantic Context Matrix7:22 Introducing FDC3 Con: What to Expect at the Dedicated London Workshop8:50 Common Cloud Controls (CCC): Standardizing the Infrastructure Defense Layer10:35 The Hyperscaler Drift: Translating Security Requirements Natively12:15 Unveiling the CCC Live Validator: Testing Configurations via Code14:40 Breaking Down Multi-Vendor Lock-In from the Desktop to the Cloud16:15 Getting Involved: How to Contribute to Open Banking Workspaces18:10 Logistics and Free Pass Perks: Food, Networking, and Community Benefits📊 The Problem: Fragmented API Protocols and Multi-Cloud Configuration DriftFinancial technology stacks are heavily fractured at both ends of the architecture. On the desktop, the emergence of Model Context Protocol (MCP) handles basic request-response data queries but misses the rich, stateful orchestration layer needed to tie legacy banking applications together. Meanwhile, at the infrastructure layer, cloud security teams are forced to manually translate uniform security constraints into completely distinct vendor syntaxes, creating systemic compliance drift and massive platform team overhead.🏗️ The Solution: Unified Context Surfaces and Open Compliance ValidatorsRob Moffat details how open-source abstractions are resolving fragmentation at every level of the financial enterprise:FDC3 as the Agent Interface: Providing an operational workspace framework that allows AI agents to read, interact with, and seamlessly drive multi-application workflows natively without massive API custom coding.Common Cloud Controls Taxonomy: Building a vendor-agnostic catalog that translates core compliance mandates into predictable, repeatable infrastructure configurations.The CCC Live Validator: Rolling out code-driven validation tools that automatically check native cloud environments against the master CCC schema to detect configuration drift instantly.⚙️ Why This Matters for Financial EngineeringSecuring the Desktop Supply Chain: Ensuring that as banks add AI assistance to trade execution or client onboarding screens, those tools use pre-vetted semantic security context lines.Neutral Governance Pipelines: Bypassing proprietary SaaS cloud-security products in favor of open, community-maintained validation infrastructure that scales natively across AWS, Azure, and Google Cloud.🌐 More about FINOS: https://www.finos.org/📧 Join our newsletter: https://www.finos.org/sign-up🎙️ Listen to our Open Source in Finance Podcast: https://www.youtube.com/@FINOS/podcastsLinkedIn: https://www.linkedin.com/company/finosfoundation#FINOS #OSFFLondon #FDC3 #CommonCloudControls #MCP #CloudSecurity #Interoperability #FinTechArchitecture #MultiCloud


The FINOS Open Source in Finance Podcast, presented by FINOS, delves into the practical realities of applying open source principles within the financial sector. This isn't a theoretical discussion; it's a series of conversations with industry experts who share their direct experiences implementing specific technologies. Episodes explore the tangible benefits and challenges of projects focused on areas like desktop interoperability, which streamlines how complex applications work together, and low-code platforms that accelerate development. Listeners will hear detailed analysis on using synthetic data for testing and innovation, as well as approaches to effective data modeling. The dialogue extends into organizational strategy, covering best practices for establishing successful inner source programs and fostering collaborative development cultures inside large institutions. Each episode of this podcast focuses on a concrete use case or a pressing question at the intersection of finance and open collaboration, providing actionable insights rather than abstract concepts. It's a resource for professionals who want to understand how open source is actively shaping tools, processes, and competitive advantages in financial services today.
Author: Language: English Episodes: 50

FINOS Open Source in Finance Podcast
Podcast Episodes
Exploring Interoperability Dan Schleifer - President, interop.io [not-audio_url] [/not-audio_url]

Duration: 31:59
In this episode of the FINOS Open Source in Finance podcast, Grizz Griswold interviews Dan Schleifer, CEO and Co-Founder of interop.io and ChartIQ. They discuss the impact of the 'toggle tax' on productivity and envision…
Regulatory Challenges in Finance Insights from Leo Labeis, Regnosys [not-audio_url] [/not-audio_url]

Duration: 52:52
In this episode of the FINOS Open Source in Finance podcast, Head of Marketing Grizz Griswold interviews Leo Labeis, CEO of Regnosys. They explore regulatory challenges in finance, focusing on the Rune project and Common…
Colin Eberhardt - CTO, Scott Logic [not-audio_url] [/not-audio_url]

Duration: 32:27
In this episode of the podcast, Grizz sits down with Colin Eberhardt - CTO, Scott Logic. We talk about Colin's journey to CTO, ai, ai, ai, and ai. Colin Eberhardt: ⁠⁠⁠https://www.linkedin.com/in/colin-eberhardt-1464b4a/…
Andrew Aitken - Chief Open Source Officer, Hedera [not-audio_url] [/not-audio_url]

Duration: 43:34
In this episode of the podcast, Grizz sits down with Andrew Aitken - Chief Open Source Officer, Hedera. We talk about open source in finance, past, present, and future and how Web3 factors in. Andrew Aitken: ⁠⁠https://ww…
Lee Faus - Global Field CTO, GitLab [not-audio_url] [/not-audio_url]

Duration: 45:34
In this episode of the podcast, Grizz sits down with Lee Faus - Global Field CTO, GitLab. We talk about Lee's developer journey from high school teacher to GitLab, software development evolution and devops, intelligent d…
FINOS May 24 2024 Debrief - with Eddie Knight, Sonatype [not-audio_url] [/not-audio_url]

Duration: 1:02:50
In this episode of the podcast, Grizz and Eddie Knight of Sonatype return to our FINOS Debrief episodes that wrap up the past month or so in the FINOS Ecosystem - and look forward to the next month and beyond. Save 20% o…
Alex Scammon - Head of Open Source Development at G-Research [not-audio_url] [/not-audio_url]

Duration: 39:54
In this episode of the podcast, Grizz sits down with Alex Scammon - Head of Open Source Development at G-Research. We talk about Alex's building of an OSPO at G-Research, and how you need to be intrepid when you do somet…
Donald Fischer - CEO & CoFounder at Tidelift [not-audio_url] [/not-audio_url]

Duration: 45:25
In this episode of the podcast, Grizz sits down with Donald Fischer - CEO and CoFounder at Tidelift (a new Member of FINOS). We talk about Donald's journey through open source in the 90s to today, paying open source main…