OpenChain Germany Work Group Meeting 1

1. OpenChain Germany Work Group
Meeting # 1

2. Antitrust Policy Notice
› Linux Foundation meetings involve participation by industry competitors, and it is the
intention of the Linux Foundation to conduct all of its activities in accordance with
applicable antitrust and competition laws. It is therefore extremely important that
attendees adhere to meeting agendas, and be aware of, and not participate in, any
activities that are prohibited under applicable US state, federal or foreign antitrust
and competition laws.
› Examples of types of actions that are prohibited at Linux Foundation meetings and in
connection with Linux Foundation activities are described in the Linux Foundation
Antitrust Policy available at http://www.linuxfoundation.org/antitrust-policy. If you
have questions about these matters, please contact your company counsel, or if you
are a member of the Linux Foundation, feel free to contact Andrew Updegrove of the
firm of Gesmer Updegrove LLP, which provides legal counsel to the Linux
Foundation.
2

3. 1. Welcome, Introduction and News
2. OpenChain as an ISO standard
3. Developments in our Regional Work Groups
4. Developments in our Global Automotive Work Group
5. Overview of OpenChain Partner Activity
6. Things Coming Next
7. Discussion: German Work Group Focus in 2020
8. Any Other Business?
OpenChain Germany WG – 2020-06-02

4. Welcome, Introduction and News

5. Open Compliance Program Solutions
Processes
Bill of Materials
Tooling
https://compliance.linuxfoundation.org/

6. The OpenChain Project defines the key requirements of
a quality open source compliance program.

7. outbound
upstream downstream
inbound
Training
Policy
Process
OpenChain Defines Inflection Points

8. Result: Predictable B2B Compliance Activity

9. Our Online Self-Certification Questionnaire

11. 11

12. 12

13. Big cheer for Inno3 in France!
Latest Conformant Organization

14. OpenChain had its “general consumer”
debut at CES via collaboration with the
AGL Project. This saw OpenChain
volunteers manning a booth for three
days and sharing information with 100s
of people.
Shane Coughlan, OpenChain General
Advisor, has been named as an advisory
to the open source activities of the United
Nations Technology Innovation Labs.
Some Cool Stuff: CES + United Nations

15. OpenChain as an ISO Standard

16. OpenChain in ISO (6月2019~)
The OpenChain Project is submitting our specification to ISO via
Publicly Available Specification (PAS) in Joint Technical Committee 1
(JTC-1).
Working in partnership with in partnership with Joint Development
Foundation we expect to become a formal standard in the 1st half of
2020.
We are referring to the ISO formatted version as OpenChain 2.1.
However, it is functionally identical to OpenChain 2.0 and all
OpenChain 2.0 companies will also be ISO conformant.

17. OpenChain in ISO (6月2019~)
The ISO submission version is available at:
https://wiki.linuxfoundation.org/_media/openchain/openchainspec-
2.1.draft.pdf
Past readers of the spec might find the marked up version useful:
https://wiki.linuxfoundation.org/_media/openchain/OpenChainSpec-
2.1.draft.MarkUp.pdf
We are not seeking edits but we do advise everyone to review.

18. Developments in our Regional Work Groups

19. OpenChain China – Next Meeting 3月3

20. OpenChain Japan – Next Meeting 2月18

21. OpenChain in Korea – Next Meeting 3月19

22. OpenChain in India – Next Meeting 3月~

23. OpenChain Taiwan – Next Meeting 2~3月~

24. OpenChain Germany – First Meeting 2月6
Siemens Nuremburg
38 People
29 Companies

25. Michael from Facebook has kindly offered us space at their offices in
Palo Alto for the first USA Work Group meeting.
We will be promoting the meeting this week and expect a kick-off
session with 10~20 people from various Silicon Valley companies.
OpenChain USA – First Meeting 3月13

26. Andrew from Moorcrofts is going to be the primary host of the first
OpenChain UK Work Group meeting. More details as the date and
venue is locked down.
OpenChain UK – First Meeting 4~5月

27. Developments in our Global Automotive Work Group

28. • This work group has membership from most major automotive
companies, Tier 1 suppliers, and a substantial number of Tier 2 and
3 companies.
• It held a face-to-face meeting beside CES in Las Vegas during
January. This meeting naturally included an excellent opportunity to
build out increased mindshare with US automotive companies.
Automotive Work Group (7月2019~)
https://groups.io/g/openchain-automotive-work-group/topics

29. Overview of OpenChain Partner Activity

30. Partner Program (2x in 2019)
30

31. 31
Partner Program – Newest Participant

32. Global Third-Party Certification (Mar 2019~)

33. OpenChain Services: PwC Global Certification
https://www.youtube.com/watch?v=_2hcHanjv7M&feature=youtu.be

34. The OpenChain standard can be met by:
Self-Certification
Independent Compliance Assessment
Third Party Certification
Freedom of Choice for Customers and Suppliers

35. Self-Certification is at the heart of the OpenChain
industry standard. Companies can access a series of
yes/no questions to determine if they have
implemented the key requirements of a quality open
source compliance program. These questions can be
found here:
https://certification.openchainproject.org
Self-Certification

36. Independent Compliance Assessment works in the
same was as the Independent Security Assessment in
ISO26262. An independent party such as a law firm,
consultancy or accounting firm reviews the product of
an OpenChain Self-Assessment and offers guidance on
whether they perceive it as complete.
Independent Compliance Assessment

37. Third-Party Certification is a process whereby a
certification authority guides a company through an
OpenChain Conformance Process. The certification
authority then issues a formal certification document.
This activity maps precisely to the forms of third-party
certification observed around automotive,
infrastructure and similar fields.
Third-Party Certification

38. The OpenChain industry standard has been carefully
designed by user companies to identify the inflection
points where a process, policy or training should be
implemented in an open source compliance program.
Our experience shows that self-certification is an
effective method of reducing risk and increasing
efficiency. That said, the choice of self-certification,
independent compliance assessment or third-party
certification depends on each business sector and
customer base. We seek to provide freedom of choice.

39. OpenChain is run by user companies for user
companies.

40. Things Coming Next

41. • Global Education Work Group
A work group focused on ensuring the OpenChain education
material is up-to-date and available across multiple languages. This
is a similar role to our original curriculum work team but more
focused on a specific work outcome.
• Global Telecommunications Work Group
A work group focused on how telecommmunication companies can
build on their leadership position to ensure smooth industry
adoption in a manner similar to the automotive work group.
New Global Work Groups (2月2020~)

42. Discussion: German Work Group Focus in 2020

43. Any Other Business?