OpenChain Work Team Agenda 05-06-2019
•
0 likes•52 views
The document provides an antitrust policy notice for Linux Foundation meetings. It states that Linux Foundation meetings involve competitors and the Foundation intends to conduct activities in accordance with antitrust laws. It advises attendees to adhere strictly to meeting agendas and not engage in any prohibited conduct under antitrust laws. Examples of prohibited actions are described in the Foundation's antitrust policy and attendees are advised to consult counsel if they have any questions.
Report
Share
Report
Share
Download to read offline
Recommended
OpenChain Agenda Partner Meeting 08-05-2019
The Linux Foundation conducts meetings with industry competitors and intends to comply with antitrust and competition laws. Attendees are reminded to follow the meeting agenda and not engage in prohibited discussions or activities regarding prices, costs, production quotas, territories, or allocation of markets. Examples of prohibited actions are described in the Linux Foundation Antitrust Policy available online. Attendees are advised to consult their legal counsel or the Linux Foundation's legal counsel with any antitrust questions.
OpenChain Agenda 09-23-2019
The document provides an antitrust policy notice for Linux Foundation meetings. It states that Linux Foundation meetings involve competitors, so activities must adhere to antitrust laws. Examples of prohibited actions are described in the Foundation's antitrust policy, and attendees should contact their legal counsel if they have questions.
OpenChain Work Team Call 05-20-2019
The document summarizes an antitrust policy notice from the Linux Foundation. It states that Linux Foundation meetings involve competitors and must be conducted according to antitrust laws, and attendees should not participate in prohibited discussions. Examples of prohibited actions are described in the Foundation's antitrust policy available online. Attendees with questions should contact their legal counsel or the Foundation's counsel.
OpenChain Third Monday Work Team Call Agenda 2020-02-17
The document is an antitrust policy notice from the Linux Foundation. It summarizes that Linux Foundation meetings involve competitors and must be conducted according to antitrust laws. Attendees are instructed to follow the agenda and not participate in prohibited discussions about prices, costs, markets or customers. Examples of prohibited actions are described in the Linux Foundation Antitrust Policy available online. Attendees with questions should contact their legal counsel or the Linux Foundation's legal counsel.
OpenChain Work Team Agenda 04-01-2019
The document provides an antitrust policy notice for Linux Foundation meetings. It states that Linux Foundation meetings involve competitors and will be conducted according to antitrust laws, and attendees should adhere strictly to meeting agendas and not engage in any prohibited antitrust behaviors. Examples of prohibited behaviors are described in the Linux Foundation Antitrust Policy and attendees with questions should contact their legal counsel or the Linux Foundation's legal counsel.
OpenChain Germany Work Group Meeting # 2
The document summarizes the agenda for the OpenChain Germany Meeting #2. It includes reminders about antitrust policies for Linux Foundation meetings and a warning about following the meeting agenda. The agenda then lists topics to be covered: an ISO update scheduled for September 22nd, next steps for Software Bill of Materials and Reference Tooling, the current status of copyright trolling, and an open period for any other business. It closes by providing links for the OpenChain community and certification processes.
Openchain First Monday Agenda 01-07-2019
The document provides an antitrust policy notice for Linux Foundation meetings, stating that meetings involve industry competitors and must be conducted in accordance with antitrust laws, prohibiting activities like price fixing or allocating customers. Attendees are told to follow meeting agendas and not engage in prohibited antitrust behaviors, with examples provided in the Linux Foundation Antitrust Policy and contact information for legal counsel provided.
OpenChain Agenda 08-05-2019
The document provides the agenda and notes for a Linux Foundation meeting. It begins with an antitrust policy notice reminding attendees that Linux Foundation meetings involve competitors and must adhere to antitrust laws. The agenda then lists items including a project update, guest talk, curriculum comments, ISO spec review, and time for other business. Key discussion topics are an update on new OpenChain conformant companies, an upcoming OpenChain event, and a review of the ISO specification.
Recommended
OpenChain Agenda Partner Meeting 08-05-2019
The Linux Foundation conducts meetings with industry competitors and intends to comply with antitrust and competition laws. Attendees are reminded to follow the meeting agenda and not engage in prohibited discussions or activities regarding prices, costs, production quotas, territories, or allocation of markets. Examples of prohibited actions are described in the Linux Foundation Antitrust Policy available online. Attendees are advised to consult their legal counsel or the Linux Foundation's legal counsel with any antitrust questions.
OpenChain Agenda 09-23-2019
The document provides an antitrust policy notice for Linux Foundation meetings. It states that Linux Foundation meetings involve competitors, so activities must adhere to antitrust laws. Examples of prohibited actions are described in the Foundation's antitrust policy, and attendees should contact their legal counsel if they have questions.
OpenChain Work Team Call 05-20-2019
The document summarizes an antitrust policy notice from the Linux Foundation. It states that Linux Foundation meetings involve competitors and must be conducted according to antitrust laws, and attendees should not participate in prohibited discussions. Examples of prohibited actions are described in the Foundation's antitrust policy available online. Attendees with questions should contact their legal counsel or the Foundation's counsel.
OpenChain Third Monday Work Team Call Agenda 2020-02-17
The document is an antitrust policy notice from the Linux Foundation. It summarizes that Linux Foundation meetings involve competitors and must be conducted according to antitrust laws. Attendees are instructed to follow the agenda and not participate in prohibited discussions about prices, costs, markets or customers. Examples of prohibited actions are described in the Linux Foundation Antitrust Policy available online. Attendees with questions should contact their legal counsel or the Linux Foundation's legal counsel.
OpenChain Work Team Agenda 04-01-2019
The document provides an antitrust policy notice for Linux Foundation meetings. It states that Linux Foundation meetings involve competitors and will be conducted according to antitrust laws, and attendees should adhere strictly to meeting agendas and not engage in any prohibited antitrust behaviors. Examples of prohibited behaviors are described in the Linux Foundation Antitrust Policy and attendees with questions should contact their legal counsel or the Linux Foundation's legal counsel.
OpenChain Germany Work Group Meeting # 2
The document summarizes the agenda for the OpenChain Germany Meeting #2. It includes reminders about antitrust policies for Linux Foundation meetings and a warning about following the meeting agenda. The agenda then lists topics to be covered: an ISO update scheduled for September 22nd, next steps for Software Bill of Materials and Reference Tooling, the current status of copyright trolling, and an open period for any other business. It closes by providing links for the OpenChain community and certification processes.
Openchain First Monday Agenda 01-07-2019
The document provides an antitrust policy notice for Linux Foundation meetings, stating that meetings involve industry competitors and must be conducted in accordance with antitrust laws, prohibiting activities like price fixing or allocating customers. Attendees are told to follow meeting agendas and not engage in prohibited antitrust behaviors, with examples provided in the Linux Foundation Antitrust Policy and contact information for legal counsel provided.
OpenChain Agenda 08-05-2019
The document provides the agenda and notes for a Linux Foundation meeting. It begins with an antitrust policy notice reminding attendees that Linux Foundation meetings involve competitors and must adhere to antitrust laws. The agenda then lists items including a project update, guest talk, curriculum comments, ISO spec review, and time for other business. Key discussion topics are an update on new OpenChain conformant companies, an upcoming OpenChain event, and a review of the ISO specification.
Openchain First Monday Agenda 02-04-2019
The document summarizes the agenda and discussions from an OpenChain Workgroup meeting held by The Linux Foundation. It notes that antitrust laws must be followed during discussions and provides examples of prohibited actions. It also provides updates on specification work, onboarding processes, and engagement in various countries. Meeting topics included project updates, specification reviews, and the path to conformance.
EU Safe Harbor – What Now?
The document summarizes a webinar discussing the implications of the European Court of Justice's ruling that invalidated the EU-US Safe Harbor framework for international data transfers. The webinar addressed clarifying the scope of the ruling, steps companies can take in response, risks of enforcement, and the likelihood of a new Safe Harbor agreement being developed. Speakers from TRUSTe and the EU delegation answered questions from attendees about compliance options, enforcement timelines, and the potential for a diplomatic solution between the EU and US.
TLG Keep Your Head IN the Cloud Webinar (05-05-15)
This document summarizes a presentation about protecting businesses that use cloud computing. It discusses the three main types of cloud services, the benefits and risks of cloud computing, applicable laws and regulations, and key legal issues to consider in cloud computing contracts. The presentation was given by attorneys from the law firm Technology Law Group, which specializes in telecommunications and technology law. They advise understanding applicable laws to protect client interests and ensure balanced client-provider relationships when using cloud services.
International Transactions Program
Winston & Strawn partners Peter Crowther, Nicholas Usher, and Eva Davis hosted a discussion on the latest developments in international corporate transactions and antitrust/competition law.
Among other topics, they discussed current market practices for U.S. companies doing transactions in Europe, as well as key takeaways from some of the recent matters they have handled.
International Outsourcing Forum - Best Practice in International Outsourcing
Seminar given to IOF in Dallas, TX, June 2013 on legal, regulatory and contractual best practice in international outsourcing deals, focusing on practical risk management.
DFARS compliance
The Defense Federal Acquisition Regulation Supplement (DFARS) is a set of cybersecurity requirements imposed on external contractors and suppliers by the Department of Defense (DoD). DoD contractors should be able to save a lot of time and money by outsourcing their DFARS Compliance work to Linqsgroup.com.
Online regulation and effective regulatory engagement
The document discusses online regulation and effective regulatory engagement with the UK Office of Fair Trading (OFT). It provides an overview of the OFT's remit, priorities, and enforcement powers. Typical infringements involve issues like unfair terms in consumer contracts, misleading advertising practices, and failures to deliver goods or provide refunds. The document advises engaging early and strategically with OFT investigations to ensure the process is being followed properly. Proactive engagement can help determine if and how the OFT has a duty to act regarding certain issues. Questions from attendees are invited at the end.
Data Sovereignty and the Cloud
Thou shalt be aware of complex legal and risk issues surrounding data hosting and jurisdiction when using cloud services. National, local, and international laws may apply differently to data stored in the cloud. Additionally, over a third of data breaches involve mistakes by third parties like cloud providers. Proper vetting of cloud providers is important to understand what data will be subject to what laws and ensure adequate security, privacy, and insurance protections are in place.
OpenChain Legal Work Group - 2023-06-29
This document provides notices about anti-trust policies for Linux Foundation meetings. It states that meetings involve industry competitors, so activities must adhere to anti-trust laws. Examples of prohibited actions are described in the Foundation's anti-trust policy and questions can be directed to legal counsel. Previous Legal Work Group calls discussed model contract provisions for OpenChain standards adoption. The current call will involve live editing the newest draft of these model provisions.
Openchain AI Study Group 2024-01-23.pptx
The document summarizes an agenda for an OpenChain AI Study Group meeting. It begins with a notice about complying with antitrust laws during Linux Foundation meetings. The agenda then lists the meeting setup and format as the first item, followed by a discussion of goals for the study group around establishing industry agreements on AI management, developing AI principles for supply chain trust, and discussing AI ethics. It poses achieving the goals through weekly meetings and commitment to progress. It concludes by opening the floor for any other business.
OpenChain Export Control Work Group 2024-01-09
This document summarizes an OpenChain Export Control meeting that will take place on January 9, 2023. It includes an anti-trust policy notice reminding participants that Linux Foundation meetings must comply with antitrust laws. The agenda has two items: discussing how the SPDX project's proposed operations profile and export control schema can help with export control work, and reviewing the status of a stalled crypto law survey book to decide how to move it forward.
OpenChain Japan Work Group Meeting #16 - Remote Meeting #3
The document discusses the International Standard for Open Source Compliance and provides key information about the OpenChain project. It notes that OpenChain is now an ISO international standard and will receive an ISO number within five weeks. It also highlights that those who conform to OpenChain 2.0 will automatically conform to the new ISO 5230 standard. Additionally, it recognizes the large community that has formed around OpenChain, particularly in Japan, and encourages organizations to get started with OpenChain.
OpenChain Work Team Agenda 04-15-2019
The document summarizes an OpenChain Workgroup meeting that covered the following topics:
1) An antitrust policy notice reminding attendees to adhere to meeting agendas and not participate in prohibited antitrust activities.
2) A project update mentioning new partners in Italy and India and increased discussions around automotive.
3) An introduction to the tool ScanCode by guest speaker Michael Herzog.
Openchain Third Monday Agenda 02-18-2019
The document summarizes an agenda for an OpenChain Workgroup meeting held by The Linux Foundation. It reminds attendees that Linux Foundation meetings involve industry competitors and that antitrust laws must be followed. It provides an example of prohibited actions and information on where to find the antitrust policy. It then outlines the agenda items which include a project update on new members and publications, and working on the next version of the OpenChain specification, including seeking public comments.
OpenChain Monthly Meeting North America and Asia - 2024-03-19
The document summarizes the agenda for an OpenChain Monthly North America / Europe Meeting on 2024-03-19. It includes:
1) A notice about complying with antitrust laws and avoiding prohibited discussions.
2) The regular agenda covers sharing news, working on standards and core materials, reference materials, and other business.
3) News items include webinars on GitHub Copilot and export controls, and an OpenChain AI study group call.
4) Work includes discussing issues on the license compliance specification and a security assurance specification on GitHub.
5) Reference and support work involves the OpenChain education study group and supplier education leaflet.
OpenChain North America and Europe Meeting - 2023-04-04
The OpenChain monthly meeting covered the following:
1) An anti-trust policy notice reminding attendees to adhere to meeting agendas and not participate in prohibited antitrust activities.
2) Specification news including OpenChain events in China and a webinar on SBOMs.
3) Work on OpenChain security and licensing standards including proposed issues to address around vulnerability triage, program objectives, and licensing definitions.
4) Announcements from the TODO group on new research on OSPOs and an upcoming survey, and networking opportunities at an upcoming conference.
OpenChain AI Study Group - Europe and Asia Recap - 2024-04-11 - Full Recording
The document summarizes a meeting of the OpenChain AI Study Group that recapped a previous workshop on AI compliance in the supply chain. It discusses identifying commonalities between AI compliance and the ISO 5230 standard on software supply chain security. It provides examples of reviewing and redlining the ISO 5230 standard and a related thinking document. The document also suggests starting a review of the ISO 42001 standard on AI management systems while noting it is not freely available. It asks if there is any other business and concludes by thanking and saying goodbye to attendees.
SFSCON23 - Niharika Singhal - The ZOOOM Framework Legal aspects of FOSS and ...
SFSCON23 - Niharika Singhal - The ZOOOM Framework Legal aspects of FOSS and ...South Tyrol Free Software Conference
License compliance efforts for software projects involve not only legal-oriented actions, but also governance elements such as organizational processes and community management. The larger the community or the organization working collectively, the more complex a compliance program for software projects may become. Free Software licenses being direct licensing models are easier to comply with in comparison to proprietary licenses. This talk will give an overview of the Free Software licensing compliance practices, including initiatives such as REUSE for streamlining copyright and license information for software projects.OpenChain Monthly Meeting (US / Europe) 2023-01-03
The OpenChain monthly meeting covered the following topics:
1. An announcement that six organizations are providing support services for adoption of the OpenChain Security Assurance Specification 1.1.
2. Interneuron completed self-certification of conformance with the Security Assurance Specification in collaboration with Source Code Control.
3. The Security Assurance Specification was handed over to the Joint Development Foundation to undergo the ISO PAS Transposition Process with expected graduation in mid-late 2023.
4. Other meeting items included SPDX Python tool updates, upcoming OSPOlogy events, OpenChain automation work, potential specification improvements, and general community updates.
AI Study Group North America - Europe 2024-02-06
The document summarizes discussions from an OpenChain AI Study Group meeting on anti-trust policy and building trust in the open source AI supply chain. It recaps previous discussions, defines the scope as establishing how to ensure "compliance artifacts" like data cards and model cards can be trusted throughout the supply chain. It also lists AI regulatory frameworks and discusses using cases like delivering pre-trained models or datasets. The appendix section asks for any other business and recaps goals of establishing industry agreements on AI management and developing principles for transparency and bias.
FINOS June 2018 Members Meeting - How FINOS Collaboration Works - Aaron Willi...
How FINOS Collaboration Works during the FINOS June 2018 Members Meeting by Aaron Williamson, General Counsel & Director, FINOS
OpenChain AI Study Group - North America and Europe - 2024-02-20
The document summarizes the agenda and discussion from an OpenChain AI study group meeting on building trust in the open source AI supply chain. The group discussed defining compliance artifacts and how they can be trusted throughout the supply chain. They also considered what constitutes a high-risk artifact and whether compliance should be based on risk type. Additionally, the group discussed achieving transparency in AI systems as models move towards more closed structures, and how to meet the study group's goals of establishing industry agreements on AI management principles.
More Related Content
What's hot
Openchain First Monday Agenda 02-04-2019
The document summarizes the agenda and discussions from an OpenChain Workgroup meeting held by The Linux Foundation. It notes that antitrust laws must be followed during discussions and provides examples of prohibited actions. It also provides updates on specification work, onboarding processes, and engagement in various countries. Meeting topics included project updates, specification reviews, and the path to conformance.
EU Safe Harbor – What Now?
The document summarizes a webinar discussing the implications of the European Court of Justice's ruling that invalidated the EU-US Safe Harbor framework for international data transfers. The webinar addressed clarifying the scope of the ruling, steps companies can take in response, risks of enforcement, and the likelihood of a new Safe Harbor agreement being developed. Speakers from TRUSTe and the EU delegation answered questions from attendees about compliance options, enforcement timelines, and the potential for a diplomatic solution between the EU and US.
TLG Keep Your Head IN the Cloud Webinar (05-05-15)
This document summarizes a presentation about protecting businesses that use cloud computing. It discusses the three main types of cloud services, the benefits and risks of cloud computing, applicable laws and regulations, and key legal issues to consider in cloud computing contracts. The presentation was given by attorneys from the law firm Technology Law Group, which specializes in telecommunications and technology law. They advise understanding applicable laws to protect client interests and ensure balanced client-provider relationships when using cloud services.
International Transactions Program
Winston & Strawn partners Peter Crowther, Nicholas Usher, and Eva Davis hosted a discussion on the latest developments in international corporate transactions and antitrust/competition law.
Among other topics, they discussed current market practices for U.S. companies doing transactions in Europe, as well as key takeaways from some of the recent matters they have handled.
International Outsourcing Forum - Best Practice in International Outsourcing
Seminar given to IOF in Dallas, TX, June 2013 on legal, regulatory and contractual best practice in international outsourcing deals, focusing on practical risk management.
DFARS compliance
The Defense Federal Acquisition Regulation Supplement (DFARS) is a set of cybersecurity requirements imposed on external contractors and suppliers by the Department of Defense (DoD). DoD contractors should be able to save a lot of time and money by outsourcing their DFARS Compliance work to Linqsgroup.com.
Online regulation and effective regulatory engagement
The document discusses online regulation and effective regulatory engagement with the UK Office of Fair Trading (OFT). It provides an overview of the OFT's remit, priorities, and enforcement powers. Typical infringements involve issues like unfair terms in consumer contracts, misleading advertising practices, and failures to deliver goods or provide refunds. The document advises engaging early and strategically with OFT investigations to ensure the process is being followed properly. Proactive engagement can help determine if and how the OFT has a duty to act regarding certain issues. Questions from attendees are invited at the end.
Data Sovereignty and the Cloud
Thou shalt be aware of complex legal and risk issues surrounding data hosting and jurisdiction when using cloud services. National, local, and international laws may apply differently to data stored in the cloud. Additionally, over a third of data breaches involve mistakes by third parties like cloud providers. Proper vetting of cloud providers is important to understand what data will be subject to what laws and ensure adequate security, privacy, and insurance protections are in place.
What's hot (8)
TLG Keep Your Head IN the Cloud Webinar (05-05-15)
TLG Keep Your Head IN the Cloud Webinar (05-05-15)
International Outsourcing Forum - Best Practice in International Outsourcing
International Outsourcing Forum - Best Practice in International Outsourcing
Online regulation and effective regulatory engagement
Online regulation and effective regulatory engagement
Similar to OpenChain Work Team Agenda 05-06-2019
OpenChain Legal Work Group - 2023-06-29
This document provides notices about anti-trust policies for Linux Foundation meetings. It states that meetings involve industry competitors, so activities must adhere to anti-trust laws. Examples of prohibited actions are described in the Foundation's anti-trust policy and questions can be directed to legal counsel. Previous Legal Work Group calls discussed model contract provisions for OpenChain standards adoption. The current call will involve live editing the newest draft of these model provisions.
Openchain AI Study Group 2024-01-23.pptx
The document summarizes an agenda for an OpenChain AI Study Group meeting. It begins with a notice about complying with antitrust laws during Linux Foundation meetings. The agenda then lists the meeting setup and format as the first item, followed by a discussion of goals for the study group around establishing industry agreements on AI management, developing AI principles for supply chain trust, and discussing AI ethics. It poses achieving the goals through weekly meetings and commitment to progress. It concludes by opening the floor for any other business.
OpenChain Export Control Work Group 2024-01-09
This document summarizes an OpenChain Export Control meeting that will take place on January 9, 2023. It includes an anti-trust policy notice reminding participants that Linux Foundation meetings must comply with antitrust laws. The agenda has two items: discussing how the SPDX project's proposed operations profile and export control schema can help with export control work, and reviewing the status of a stalled crypto law survey book to decide how to move it forward.
OpenChain Japan Work Group Meeting #16 - Remote Meeting #3
The document discusses the International Standard for Open Source Compliance and provides key information about the OpenChain project. It notes that OpenChain is now an ISO international standard and will receive an ISO number within five weeks. It also highlights that those who conform to OpenChain 2.0 will automatically conform to the new ISO 5230 standard. Additionally, it recognizes the large community that has formed around OpenChain, particularly in Japan, and encourages organizations to get started with OpenChain.
OpenChain Work Team Agenda 04-15-2019
The document summarizes an OpenChain Workgroup meeting that covered the following topics:
1) An antitrust policy notice reminding attendees to adhere to meeting agendas and not participate in prohibited antitrust activities.
2) A project update mentioning new partners in Italy and India and increased discussions around automotive.
3) An introduction to the tool ScanCode by guest speaker Michael Herzog.
Openchain Third Monday Agenda 02-18-2019
The document summarizes an agenda for an OpenChain Workgroup meeting held by The Linux Foundation. It reminds attendees that Linux Foundation meetings involve industry competitors and that antitrust laws must be followed. It provides an example of prohibited actions and information on where to find the antitrust policy. It then outlines the agenda items which include a project update on new members and publications, and working on the next version of the OpenChain specification, including seeking public comments.
OpenChain Monthly Meeting North America and Asia - 2024-03-19
The document summarizes the agenda for an OpenChain Monthly North America / Europe Meeting on 2024-03-19. It includes:
1) A notice about complying with antitrust laws and avoiding prohibited discussions.
2) The regular agenda covers sharing news, working on standards and core materials, reference materials, and other business.
3) News items include webinars on GitHub Copilot and export controls, and an OpenChain AI study group call.
4) Work includes discussing issues on the license compliance specification and a security assurance specification on GitHub.
5) Reference and support work involves the OpenChain education study group and supplier education leaflet.
OpenChain North America and Europe Meeting - 2023-04-04
The OpenChain monthly meeting covered the following:
1) An anti-trust policy notice reminding attendees to adhere to meeting agendas and not participate in prohibited antitrust activities.
2) Specification news including OpenChain events in China and a webinar on SBOMs.
3) Work on OpenChain security and licensing standards including proposed issues to address around vulnerability triage, program objectives, and licensing definitions.
4) Announcements from the TODO group on new research on OSPOs and an upcoming survey, and networking opportunities at an upcoming conference.
OpenChain AI Study Group - Europe and Asia Recap - 2024-04-11 - Full Recording
The document summarizes a meeting of the OpenChain AI Study Group that recapped a previous workshop on AI compliance in the supply chain. It discusses identifying commonalities between AI compliance and the ISO 5230 standard on software supply chain security. It provides examples of reviewing and redlining the ISO 5230 standard and a related thinking document. The document also suggests starting a review of the ISO 42001 standard on AI management systems while noting it is not freely available. It asks if there is any other business and concludes by thanking and saying goodbye to attendees.
SFSCON23 - Niharika Singhal - The ZOOOM Framework Legal aspects of FOSS and ...
SFSCON23 - Niharika Singhal - The ZOOOM Framework Legal aspects of FOSS and ...South Tyrol Free Software Conference
License compliance efforts for software projects involve not only legal-oriented actions, but also governance elements such as organizational processes and community management. The larger the community or the organization working collectively, the more complex a compliance program for software projects may become. Free Software licenses being direct licensing models are easier to comply with in comparison to proprietary licenses. This talk will give an overview of the Free Software licensing compliance practices, including initiatives such as REUSE for streamlining copyright and license information for software projects.OpenChain Monthly Meeting (US / Europe) 2023-01-03
The OpenChain monthly meeting covered the following topics:
1. An announcement that six organizations are providing support services for adoption of the OpenChain Security Assurance Specification 1.1.
2. Interneuron completed self-certification of conformance with the Security Assurance Specification in collaboration with Source Code Control.
3. The Security Assurance Specification was handed over to the Joint Development Foundation to undergo the ISO PAS Transposition Process with expected graduation in mid-late 2023.
4. Other meeting items included SPDX Python tool updates, upcoming OSPOlogy events, OpenChain automation work, potential specification improvements, and general community updates.
AI Study Group North America - Europe 2024-02-06
The document summarizes discussions from an OpenChain AI Study Group meeting on anti-trust policy and building trust in the open source AI supply chain. It recaps previous discussions, defines the scope as establishing how to ensure "compliance artifacts" like data cards and model cards can be trusted throughout the supply chain. It also lists AI regulatory frameworks and discusses using cases like delivering pre-trained models or datasets. The appendix section asks for any other business and recaps goals of establishing industry agreements on AI management and developing principles for transparency and bias.
FINOS June 2018 Members Meeting - How FINOS Collaboration Works - Aaron Willi...
How FINOS Collaboration Works during the FINOS June 2018 Members Meeting by Aaron Williamson, General Counsel & Director, FINOS
OpenChain AI Study Group - North America and Europe - 2024-02-20
The document summarizes the agenda and discussion from an OpenChain AI study group meeting on building trust in the open source AI supply chain. The group discussed defining compliance artifacts and how they can be trusted throughout the supply chain. They also considered what constitutes a high-risk artifact and whether compliance should be based on risk type. Additionally, the group discussed achieving transparency in AI systems as models move towards more closed structures, and how to meet the study group's goals of establishing industry agreements on AI management principles.
OpenChain Work Team Call Agenda 03-18-2019
The document provides an agenda and notes for an OpenChain Workgroup meeting. It discusses that Fujitsu has joined as the latest Platinum Member. It also notes that the OpenChain conformance website is now live in English and Japanese, and that OpenChain will co-host an event in Shenzhen on March 22nd. The meeting will include a guest speaker on the In-Toto project and how it can support OpenChain conformance. It will also discuss finalizing the Path to Conformance document and reviewing content for Level 1 conformance. The latest draft of the OpenChain Specification 2.0 is available for review.
OpenChain Automotive Work Group Meeting #2 - Lyon
This document summarizes the 2nd face-to-face meeting of the OpenChain Automotive Working Group held on October 29th, 2019 in Lyon. The meeting agenda included an introduction to the OpenChain project, a proposal to form an OpenChain Automotive Working Group, and presentations from various automotive companies on best practices for open source license compliance. The goal of the working group is to share information, establish best practices as an eventual industry standard, and raise awareness of open source license management in the automotive sector.
OpenChain Japan Work Group Meeting #28 - 2023-07-11
The OpenChain Industry Survey 2023 had a low response rate of only 18 companies. This was partly due to political issues in how countries were listed and a short two month timeframe. Insights from the survey found that European and North American companies engaged more, over half of companies have over 5,000 software staff, and most see open source as important to their business. The survey also showed growing adoption of OpenChain standards for compliance and security. Deloitte has now become an official partner to help with future surveys.
Fixing public procurement: how we'll stop European governments from illegally...
The document discusses dirty tactics used against LibreOffice in public procurement and how to overcome them. It outlines how some procurement notices illegally specify Microsoft products. The Free Software Foundation Europe (FSFE) is working to address this by collecting data on IT procurements, sending letters to officials pointing out mistakes and providing guidance on writing procurements in a non-discriminatory way based on open standards. While some officials have made adjustments, more action is needed like publicizing illegal cases and potential legal action. The goal is to replicate this effort across Europe.
Open source software license
Open Software Solutions (OSS) is a software program with the source code that allows programmers to check, moderate, and update anytime from anywhere. OSS also comes with certain requirements, which if not properly followed can lead to legal, operational and security issues. To keep organizations out of OSS-related issues, Deloitte leverages a tool that helps to analyze source code and build a standard process to enhance OSS management. Click on the link to learn how Deloitte can help organizations to manage and utilize OSS in an appropriate manner.
Fixing public procurement: how we'll stop European governments from renewing ...
Presentation at FOSDEM 2013 on the Free Software Foundation Europe public IT-procurement monitoring activities in Finland
Similar to OpenChain Work Team Agenda 05-06-2019 (20)
OpenChain Japan Work Group Meeting #16 - Remote Meeting #3
OpenChain Japan Work Group Meeting #16 - Remote Meeting #3
OpenChain Monthly Meeting North America and Asia - 2024-03-19
OpenChain Monthly Meeting North America and Asia - 2024-03-19
OpenChain North America and Europe Meeting - 2023-04-04
OpenChain North America and Europe Meeting - 2023-04-04
OpenChain AI Study Group - Europe and Asia Recap - 2024-04-11 - Full Recording
OpenChain AI Study Group - Europe and Asia Recap - 2024-04-11 - Full Recording
SFSCON23 - Niharika Singhal - The ZOOOM Framework Legal aspects of FOSS and ...
SFSCON23 - Niharika Singhal - The ZOOOM Framework Legal aspects of FOSS and ...
OpenChain Monthly Meeting (US / Europe) 2023-01-03
OpenChain Monthly Meeting (US / Europe) 2023-01-03
FINOS June 2018 Members Meeting - How FINOS Collaboration Works - Aaron Willi...
FINOS June 2018 Members Meeting - How FINOS Collaboration Works - Aaron Willi...
OpenChain AI Study Group - North America and Europe - 2024-02-20
OpenChain AI Study Group - North America and Europe - 2024-02-20
OpenChain Japan Work Group Meeting #28 - 2023-07-11
OpenChain Japan Work Group Meeting #28 - 2023-07-11
Fixing public procurement: how we'll stop European governments from illegally...
Fixing public procurement: how we'll stop European governments from illegally...
Fixing public procurement: how we'll stop European governments from renewing ...
Fixing public procurement: how we'll stop European governments from renewing ...
More from Shane Coughlan
openEuler Case Study - The Journey to Supply Chain Security
openEuler Case Study - The Journey to Supply Chain Security
OpenChain Webinar: AboutCode and Beyond - End-to-End SCA
OpenChain Webinar: AboutCode and Beyond - End-to-End SCA
OpenChain - The Ramifications of ISO/IEC 5230 and ISO/IEC 18974 for Legal Pro...
OpenChain - The Ramifications of ISO/IEC 5230 and ISO/IEC 18974 for Legal Professionals in 2024
OpenChain Education Work Group Monthly Meeting - 2024-04-10 - Full Recording
The document summarizes the agenda for an Education Work Group call on April 10, 2024. It includes notices about antitrust policies for Linux Foundation meetings and a reminder that activities must comply with applicable competition laws. The document also thanks Nathan and contributors for their work, introduces a new boss, and outlines plans for 2024-2025, which involve continuing work on training slides, reviewing an education leaflet, proposing OpenChain UK education videos, releasing an official SBOM quality reference guide from the Telco Work Group, and creating short explainers to introduce OpenChain within organizations.
OpenChain Webinar: Universal CVSS Calculator
The document discusses antitrust policies for Linux Foundation meetings. It states that Linux Foundation meetings involve competitors and all activities must be in accordance with antitrust laws. Attendees should adhere to meeting agendas and not participate in prohibited activities under antitrust laws. Examples of prohibited actions are described in the Linux Foundation Antitrust Policy available online. Attendees with questions should contact their legal counsel or the Linux Foundation's legal counsel.
openEuler Community Overview - a presentation showing the current scale
OpenEuler is an open source operating system that has seen exponential growth, with over 1.3 million global downloads, 900+ enterprise members, and 14,000+ contributors. It aims to be the number 1 server OS by 2023, with 50%+ estimated market share, by providing a versatile and intelligent OS for all scenarios from server to cloud to edge to embedded devices. OpenEuler also has a thriving ecosystem of over 400 innovation projects and many enterprise and community distributions to satisfy diverse industry requirements.
OpenChain Monthly North America / Europe Call - 2024-02-06
The OpenChain monthly meeting covered the following topics:
1) An announcement about upcoming OpenChain elections for working group chair positions and the process for nominations and voting.
2) An update on recent and upcoming calls for the AI Study Group exploring how to build trust in the open source AI supply chain.
3) A discussion of open issues for the ISO security and licensing standards being developed by OpenChain.
4) An early proposal to develop an OpenChain contribution process specification and a link to the draft document and issues.
5) An update that the OpenChain reference training slides are being finalized this week.
6) A summary of a recent Legal Work Group meeting on maturity models
OpenChain Legal Work Group - 2024-01-17
The document summarizes a meeting of the OpenChain Legal Work Group that discussed maturity models for assessing competence in open source management. It includes:
- An overview of the meeting agenda which focused on a presentation by Andrew Katz of Orcro about their open source maturity model based on ISO/IEC 5230:2020.
- A high-level explanation of capability maturity models and OpenChain's potential as a framework for defining requirements and mapping them to maturity levels for different business functions.
- An example assessment of the maturity of an organization's people, processes, information, and systems for generating software bill of materials, mapping it to relevant ISO requirements.
OpenChain Webinar #58 - FOSS License Management through aliens4friends in Ecl...
The document summarizes Aliens4friends, an Eclipse project that provides tooling for open source license compliance in the Oniro operating system. It discusses key principles of automating compliance work while enabling sustainable human review through reuse. The toolchain gets original source code from the build system, matches components to Debian's reviews, monitors the audit process, and provides a dashboard for visualization. The goal is to implement continuous compliance as a core part of the development workflow.
Maturity Models - Open Compliance Summit 2023
The document discusses a capability maturity model (CMM) for assessing the maturity of an organization's open source software development practices. It presents a five-level maturity framework from initial to optimizing and maps out how capabilities could be assessed across four categories: people and organization, processes, information, and systems. The CMM is aligned with requirements in the OpenChain specification and ISO 5230 standard to provide a potential framework for determining an organization's open source compliance maturity.
OpenChain Annual Report 2023 - Key Metrics Slides
The key strategic goals of the governing board were met over the past year. Several metrics related to standards adoption and conformant programs increased substantially, such as a 22% rise in ISO/IEC 5230 conformant programs and a 500% increase in ISO/IEC 18974 conformant programs. The partner program also expanded in various categories. Future standards developments are being discussed, including proposed updates to the existing standards and new specifications related to contributions and SBOM quality.
OpenChain Webinar 57 - The Open Source Initiative - 2023-11-27
The document discusses defining open source artificial intelligence (AI). It outlines the Open Source Initiative's (OSI) mission to educate about and advocate for open source software. The OSI is working to define open source AI to clarify expectations and match them with policy goals of transparency, trustworthiness, etc. A proposed definition grants users four freedoms: to study and inspect AI systems, use them without permission, modify them, and share modified versions. The OSI will hold an in-person meeting in early 2024 to further develop an open source AI definition.
FOSSLight Community Day 2023-11-30
The OpenChain Project aims to improve open source license compliance and security assurance through international standards. Over 1,000 companies collaborate through OpenChain to develop standards like ISO/IEC 5230 for license compliance and ISO/IEC 18974 for security assurance. Adoption of the standards is growing, with a 12% decrease in license issues and 31% of large German companies planning to adopt ISO/IEC 5230. OpenChain is working to develop new specifications and its global impact and member organizations are increasing.
OpenChain Webinar #56: Generative AI and Your Code
OpenChain Webinar #56: Generative AI and Your Code
Maximizing the Opportunity While Managing the Risks
This webinar had a poll about areas of interest around AI and law. Click here to access it:
https://forms.office.com/r/MaZFgHuH6v
About This Webinar
Generative AI (GAI) provides powerful opportunities for innovation and productivity across all organizational functions – from composing emails and crafting press releases to retouching and refining images and video, all this in seconds. GAI tools can even be used to write, test and improve computer code! This comes with risks that need to be managed within your organization, in order to realize the competitive advantage these GAI tools can provide.
In this webinar, Anthony Decicco and Wael Nackasha, attorneys at GTC Law Group:
- Provide an introduction to GAI and its use to generate software code, text, and images
- Explain how machines learn, including training data and the resulting models
- Cover how developers are using GAI tools (such as GitHub Copilot and ChatGPT) to write and augment source code, with a focus on:
-- A ‘demo’ of how the tools work
-- The community reactions and recent litigation
-- The benefits and risks of the tools
-- Ways to mitigate the risks
-- Best practices for policies and procedures
From One Standard to a Family - Taiwan Work Group - 2023-08-15.pptx
The OpenChain Project started in 2016 to create a standard for open source license compliance that would reduce legal risk for companies. The standard was published in 2016 and became an official International Standard (ISO/IEC 5230) in 2020. In 2021, OpenChain began work on additional standards for using their processes in security and other areas beyond procurement. They quickly developed a new standard, ISO/IEC 18974, for open source security processes that was approved in early 2022. The transformation of OpenChain from a single licensing standard to a broader "family" of standards around open source processes is now complete.
OpenChain Webinar #53 – OpenSCA
This document introduces OpenSCA, an open source solution for managing open source risks. It discusses the need for such a solution and advantages over traditional commercial solutions. OpenSCA allows flexible and low-cost scanning of software to generate software bills of materials and identify vulnerabilities. It provides results in standard formats and intelligence to subscribers. The community has implemented OpenSCA in DevOps workflows for an internet company to integrate security and identify open source risks introduced in code. The document encourages joining the community to build solutions for more scenarios.
OpenChain Korea Work Group Meeting #18
The OpenChain Korea Work Group Meeting #18 discussed the upcoming conversion of the OpenChain standard to an ISO standard in July. They discussed expanding conformance to the OpenChain standard in China and Europe with new announcements coming. The meeting provided updates on improved online checklists for conformance reporting and specifications beyond OpenChain. It also announced an upcoming webinar on Chinese open source security and their first major OpenChain conference in China. Contact details were provided for Shane Coughlan to discuss further.
2023-06-classic
This document provides an overview of the OpenChain Project, which establishes standards for open source licensing and security. It discusses the OpenChain standards for license compliance (ISO/IEC 5230) and security assurance (ISO/IEC DIS 18974). It highlights that over 1,000 companies are working to improve supply chain management through OpenChain. It also summarizes news and developments around OpenChain standards adoption and certification.
2023-06-cute
The OpenChain Project aims to create and maintain standards for open source licensing and security. It has over 1,000 company members representing trillions in market value. The project develops specifications like ISO 5230 for open source license compliance and a new DIS 18974 for security assurance. It provides free materials to help companies self-certify their supply chain processes and offers third-party certification. The project is expanding its standards, outreach, and community participation to build a more transparent and secure software supply chain.
More from Shane Coughlan (20)
openEuler Case Study - The Journey to Supply Chain Security
openEuler Case Study - The Journey to Supply Chain Security
OpenChain @ LF Japan Executive Briefing - May 2024
OpenChain @ LF Japan Executive Briefing - May 2024
OpenChain Webinar: AboutCode and Beyond - End-to-End SCA
OpenChain Webinar: AboutCode and Beyond - End-to-End SCA
OpenChain - The Ramifications of ISO/IEC 5230 and ISO/IEC 18974 for Legal Pro...
OpenChain - The Ramifications of ISO/IEC 5230 and ISO/IEC 18974 for Legal Pro...
OpenChain Education Work Group Monthly Meeting - 2024-04-10 - Full Recording
OpenChain Education Work Group Monthly Meeting - 2024-04-10 - Full Recording
openEuler Community Overview - a presentation showing the current scale
openEuler Community Overview - a presentation showing the current scale
OpenChain Monthly North America / Europe Call - 2024-02-06
OpenChain Monthly North America / Europe Call - 2024-02-06
OpenChain Webinar #58 - FOSS License Management through aliens4friends in Ecl...
OpenChain Webinar #58 - FOSS License Management through aliens4friends in Ecl...
OpenChain Webinar 57 - The Open Source Initiative - 2023-11-27
OpenChain Webinar 57 - The Open Source Initiative - 2023-11-27
OpenChain Webinar #56: Generative AI and Your Code
OpenChain Webinar #56: Generative AI and Your Code
From One Standard to a Family - Taiwan Work Group - 2023-08-15.pptx
From One Standard to a Family - Taiwan Work Group - 2023-08-15.pptx
Recently uploaded
Using Xen Hypervisor for Functional Safety
An update on making Xen hypervisor functionally safe and enhancing its usage in automotive and industrial use cases
How to write a program in any programming language
How to write a program in any programming language
Top 9 Trends in Cybersecurity for 2024.pptx
Security and risk management (SRM) leaders face disruptions on technological, organizational, and human fronts. Preparation and pragmatic execution are key for dealing with these disruptions and providing the right cybersecurity program.
Webinar On-Demand: Using Flutter for Embedded
Flutter is a popular open source, cross-platform framework developed by Google. In this webinar we'll explore Flutter and its architecture, delve into the Flutter Embedder and Flutter’s Dart language, discover how to leverage Flutter for embedded device development, learn about Automotive Grade Linux (AGL) and its consortium and understand the rationale behind AGL's choice of Flutter for next-gen IVI systems. Don’t miss this opportunity to discover whether Flutter is right for your project.
zOS Mainframe JES2-JES3 JCL-JECL Differences
Document which explains the difference between Jes2 and Jes3
GreenCode-A-VSCode-Plugin--Dario-Jurisic
Presentation about a VSCode plugin from Dario Jurisic at the GSD Community Stage meetup
Hand Rolled Applicative User Validation Code Kata
Could you use a simple piece of Scala validation code (granted, a very simplistic one too!) that you can rewrite, now and again, to refresh your basic understanding of Applicative operators <*>, <*, *>?
The goal is not to write perfect code showcasing validation, but rather, to provide a small, rough-and ready exercise to reinforce your muscle-memory.
Despite its grandiose-sounding title, this deck consists of just three slides showing the Scala 3 code to be rewritten whenever the details of the operators begin to fade away.
The code is my rough and ready translation of a Haskell user-validation program found in a book called Finding Success (and Failure) in Haskell - Fall in love with applicative functors.
Unveiling the Advantages of Agile Software Development.pdf
Learn about Agile Software Development's advantages. Simplify your workflow to spur quicker innovation. Jump right in! We have also discussed the advantages.
What next after learning python programming basics
What next after learning python programming basics
SMS API Integration in Saudi Arabia| Best SMS API Service
Discover the benefits and implementation of SMS API integration in the UAE and Middle East. This comprehensive guide covers the importance of SMS messaging APIs, the advantages of bulk SMS APIs, and real-world case studies. Learn how CEQUENS, a leader in communication solutions, can help your business enhance customer engagement and streamline operations with innovative CPaaS, reliable SMS APIs, and omnichannel solutions, including WhatsApp Business. Perfect for businesses seeking to optimize their communication strategies in the digital age.
WWDC 2024 Keynote Review: For CocoaCoders Austin
Overview of WWDC 2024 Keynote Address.
Covers: Apple Intelligence, iOS18, macOS Sequoia, iPadOS, watchOS, visionOS, and Apple TV+.
Understandable dialogue on Apple TV+
On-device app controlling AI.
Access to ChatGPT with a guest appearance by Chief Data Thief Sam Altman!
App Locking! iPhone Mirroring! And a Calculator!!
UI5con 2024 - Keynote: Latest News about UI5 and it’s Ecosystem
Learn about the latest innovations in and around OpenUI5/SAPUI5: UI5 Tooling, UI5 linter, UI5 Web Components, Web Components Integration, UI5 2.x, UI5 GenAI.
Recording:
https://www.youtube.com/live/MSdGLG2zLy8?si=INxBHTqkwHhxV5Ta&t=0
Enums On Steroids - let's look at sealed classes !
These are slides for my session"Enums On Steroids - let's look at sealed classes !" - delivered among others, on Devoxx UK 2024 conference
Artificia Intellicence and XPath Extension Functions
The purpose of this presentation is to provide an overview of how you can use AI from XSLT, XQuery, Schematron, or XML Refactoring operations, the potential benefits of using AI, and some of the challenges we face.
Everything You Need to Know About X-Sign: The eSign Functionality of XfilesPr...
Wondering how X-Sign gained popularity in a quick time span? This eSign functionality of XfilesPro DocuPrime has many advancements to offer for Salesforce users. Explore them now!
Transform Your Communication with Cloud-Based IVR Solutions
Discover the power of Cloud-Based IVR Solutions to streamline communication processes. Embrace scalability and cost-efficiency while enhancing customer experiences with features like automated call routing and voice recognition. Accessible from anywhere, these solutions integrate seamlessly with existing systems, providing real-time analytics for continuous improvement. Revolutionize your communication strategy today with Cloud-Based IVR Solutions. Learn more at: https://thesmspoint.com/channel/cloud-telephony
E-commerce Development Services- Hornet Dynamics
For any business hoping to succeed in the digital age, having a strong online presence is crucial. We offer Ecommerce Development Services that are customized according to your business requirements and client preferences, enabling you to create a dynamic, safe, and user-friendly online store.
Energy consumption of Database Management - Florina Jonuzi
Presentation from Florina Jonuzi at the GSD Community Stage Meetup on June 06, 2024
Malibou Pitch Deck For Its €3M Seed Round
French start-up Malibou raised a €3 million Seed Round to develop its payroll and human resources
management platform for VSEs and SMEs. The financing round was led by investors Breega, Y Combinator, and FCVC.
Recently uploaded (20)
How to write a program in any programming language
How to write a program in any programming language
Unveiling the Advantages of Agile Software Development.pdf
Unveiling the Advantages of Agile Software Development.pdf
What next after learning python programming basics
What next after learning python programming basics
SMS API Integration in Saudi Arabia| Best SMS API Service
SMS API Integration in Saudi Arabia| Best SMS API Service
UI5con 2024 - Keynote: Latest News about UI5 and it’s Ecosystem
UI5con 2024 - Keynote: Latest News about UI5 and it’s Ecosystem
Enums On Steroids - let's look at sealed classes !
Enums On Steroids - let's look at sealed classes !
Artificia Intellicence and XPath Extension Functions
Artificia Intellicence and XPath Extension Functions
Everything You Need to Know About X-Sign: The eSign Functionality of XfilesPr...
Everything You Need to Know About X-Sign: The eSign Functionality of XfilesPr...
Transform Your Communication with Cloud-Based IVR Solutions
Transform Your Communication with Cloud-Based IVR Solutions
Energy consumption of Database Management - Florina Jonuzi
Energy consumption of Database Management - Florina Jonuzi
OpenChain Work Team Agenda 05-06-2019
- 2. Antitrust Policy Notice › Linux Foundation meetings involve participation by industry competitors, and it is the intention of the Linux Foundation to conduct all of its activities in accordance with applicable antitrust and competition laws. It is therefore extremely important that attendees adhere to meeting agendas, and be aware of, and not participate in, any activities that are prohibited under applicable US state, federal or foreign antitrust and competition laws. › Examples of types of actions that are prohibited at Linux Foundation meetings and in connection with Linux Foundation activities are described in the Linux Foundation Antitrust Policy available at http://www.linuxfoundation.org/antitrust-policy. If you have questions about these matters, please contact your company counsel, or if you are a member of the Linux Foundation, feel free to contact Andrew Updegrove of the firm of Gesmer Updegrove LLP, which provides legal counsel to the Linux Foundation. 8/23/17 2
- 3. • • • •
- 4. • • •
- 5. • •
- 6. finos.orgFintech Open Source Foundation finos.orginfo@finos.org Open Source License Compliance Handbook A reference guide to practical compliance information about the most common open source licenses, designed for the engineers and compliance staff responsible for operationalizing compliance. https://github.com/finos-osr/oslc-handbook Aaron Williamson, FINOS Jilayne Lovejoy