Shane Coughlan is an expert in communication, security and business development. His professional accomplishments include spearheading the licensing team that elevated Open Invention Network into the largest patent non-aggression community in history, establishing the leading professional network of Open Source legal experts and aligning stakeholders to launch both the first law journal and the first law book dedicated to Open Source.
Shane has extensive knowledge of Open Source governance, internal process development, supply chain management and community building. His experience includes engagement with the enterprise, embedded, mobile and automotive industries.
Our 53rd Webinar will highlight a new open source tool for open source compliance and security that originates in China. This tool has been created by a company called XMIRROR. The open source CLI offers SPDX support, so may be of immediate interest to tooling communities around the world, particularly from the perspective of integration with open source tooling frontend solutions.
As always, everyone is invited to attend. No registration necessary. Join via this link:
OpenSCA is an Open Source project that could steadily and flexibly offer SCA (Software Composition Analysis) ability and aware users of all open source component assets and risks introduced. The community aims at constructing a low-cost, compatible and extensible solution to open source security in joint efforts.
Deloitte, a global leader in providing audit and assurance, tax and legal, consulting, financial advisory, and risk advisory services to companies, is the latest official OpenChain Partner.
“Open source license and security compliance has become an essential part of our clients’ supply chains. The OpenChain project has done an excellent job in providing best practices and governance guidelines that are reflected in ISO/IEC 5230 and ISO/IEC 18974,” says Sascha Pudenz, Senior Manager at Deloitte. “We are very pleased to become a contributing member of the OpenChain community and a third-party certifier. The opportunity to support the project and spread the principles throughout our internal and external network will also help drive maturity and awareness of the importance of these standards.” adds Robert Härtwig, Director at Deloitte.
“We are delighted to welcome Deloitte to our support ecosystem,” says Shane Coughlan, OpenChain General Manager. “The provision of services like third-party certification is a vital pillar of our standardization work, and helps to ensure open source process management is effective, coherent and builds trust in the supply chain. We look forward to working closely with their team in the months and years ahead to ensure the complexity of managing technology is reduced for companies of all sizes and in all markets.”
About Deloitte
Deloitte provides industry-leading audit and assurance, tax and legal, consulting, financial advisory, and risk advisory services to nearly 90% of the Fortune Global 500® and thousands of private companies. Our professionals deliver measurable and lasting results that help reinforce public trust in capital markets, enable clients to transform and thrive, and lead the way toward a stronger economy, a more equitable society and a sustainable world. Building on its 175-plus year history, Deloitte spans more than 150 countries and territories. Learn how Deloitte’s approximately 415,000 people worldwide make an impact that matters at www.deloitte.com.
Today the OpenChain Project announces new online conformance checklists for all of our current license compliance and security assurance standards. These checklists allow any organization to quickly and privately check if they meet the requirements of a standard. They are a free service provided to the global supply chain to support trust between organizations.
Each checklist has a series of “yes” or “no” statements. If you can answer “yes” to everything, you are self-certified. If you answer “no” to some items, you know where to invest further time to build a quality program. The checklists allow you to save your progress and take up to 30 days to complete all the items.
After completing a checklist, you decide if we list you on our website or not. Of course, we hope to display more and more examples of adoption over time.
Today the OpenChain Project releases a new way for organizations to show their use of our license compliance and security assurance standards. If you use ISO/IEC 5230, ISO/IEC DIS 18974, OpenChain License Compliance 2.1 or OpenChain Security Assurance 1.1 you can fill out a simple form and get an official conformance badge.
This form is safe, secure and private. You decide if we list you on our website or not. Of course, we hope to display more and more examples of adoption over time.
This webinar covers a proposal from the Okinawa Open Labs in Japan to help “label” items in the supply chain to increase trust. Our topic was the Trusted Network Introduction – Eco-system based Open Trust Chaining over existing value-chain and supply-chain, and the presenter was MASANORI TSUJIKAWA (辻川公章) from Alaxala.
Our export control work group continues to explore pre-existing material and how it can be made easier to find, navigate and repurpose. The focus is on reviewing the new volunteer project being set up at https://github.com/crypto-law-survey to explore the continuation of Bert’s http://www.cryptolaw.org/ as a general community resource. Check out the recording to learn more.
