Shane Coughlan

WhiteSource, a leader in open source security and license compliance management software, is the latest vendor to join the OpenChain Project partner program. Our collaboration will focus on ensuring user companies have freedom of choice when considering commercial automation solutions around ISO/IEC 5230 Conformance activities. ISO/IEC 5230 is the International Standard for open source license compliance.

“WhiteSource has a long history of supporting technology and broader market companies with automation around security and compliance,” says Shane Coughlan, OpenChain General Manager. “We look forward to collaborating with WhiteSource in raising awareness and in providing support as companies around the world integrate ISO/IEC 5230 into their supply chains. We also invite user companies across to engage with the OpenChain Project directly via our regular calls, mailing list and events.”

“We see many of our large customers looking to adopt license compliance standards and meet compliance standards such as ISO/IEC 5230. With the current software supply chain challenges, standardization is a key for proper communications between different teams and between vendors, especially when representing a bill of materials. We’re happy to join OpenChain, which is open and widely adopted by the industry.” Says David Habusha, VP Product at WhiteSource.

About WhiteSource

WhiteSource is the pioneer of open source security and license compliance management. Founded in 2011, its vision is to empower businesses to develop better software by harnessing the power of open source. WhiteSource is used by more than 800 customers worldwide, from all verticals and sizes, including 23% of Fortune 100 companies, as well as industry leaders such as Microsoft, IBM, Comcast, and many more. For more information, please visit www.WhiteSourceSoftware.com

About the OpenChain Project

OpenChain began when a group of open source compliance professionals met in a conference lounge and chatted about how so much duplicative, redundant open source license compliance work was being done inefficiently in the software supply chain simply. They realized that while each company did the same work behind the scenes in a different manner the output for downstream recipients could not realistically be relied on because there was no visibility into the process that generated the output.

The answer the early principles of this discussion arrived at was to standardize open source compliance, make it transparent and build trust across the ecosystem. The project began as outreach to the community with the idea of a new standard for open source license compliance with slides titled, “When Conformity is Innovative.” A growing community quickly recognized the value of this approach and contributed to the nascent collaboration soon named The OpenChain Project.

We have added French, Hebrew, Hindi, Italian, Russian and Spanish to our self-certification questionnaire. This means that anyone in the world can now self-certify to ISO/IEC 5230 (OpenChain 2.1) for free in:

• Chinese Simplified
• Chinese Traditional
• English
• French
• German
• Hebrew
• Hindi
• Italian
• Japanese
• Korean
• Russian
• Spanish

Get Started

• https://certification.openchainproject.org/

Learn More About The Process

• https://www.openchainproject.org/get-started/conformance

Ericsson (STO: ERIC-B) has become a Platinum Member of the OpenChain Project and will assume a governing board seat. OpenChain maintains ISO/IEC 5230, the International Standard for open source license compliance. This standard defines the key requirements of a quality open source compliance program, and helps to both reduce errors and increase efficiency across the global supply chain.

“Ericsson has an exceptional reputation in the space of intellectual property management and has been engaged with the OpenChain community for a considerable period,” says Shane Coughlan, OpenChain General Manager. “Their engagement and thought leadership will provide a significant advantage to the growth of our International Standard for open source compliance in the telecommunication space and beyond. We look forward to collaborating to connect companies with the information and support they need to get maximum advantage from adoption of open source technology.”

About Ericsson

Ericsson enables communications service providers to capture the full value of connectivity. The company’s portfolio spans Networks, Digital Services, Managed Services, and Emerging Business. It is designed to help our customers go digital, increase efficiency and find new revenue streams. Ericsson’s innovation investments have delivered the benefits of mobility and mobile broadband to billions of people around the world. Ericsson stock is listed on Nasdaq Stockholm and on Nasdaq New York. www.ericsson.com

About the OpenChain Project

OpenChain began when a group of open source compliance professionals met in a conference lounge and chatted about how so much duplicative, redundant open source license compliance work was being done inefficiently in the software supply chain simply. They realized that while each company did the same work behind the scenes in a different manner the output for downstream recipients could not realistically be relied on because there was no visibility into the process that generated the output.

The answer the early principles of this discussion arrived at was to standardize open source compliance, make it transparent and build trust across the ecosystem. The project began as outreach to the community with the idea of a new standard for open source license compliance with slides titled, “When Conformity is Innovative.” A growing community quickly recognized the value of this approach and contributed to the nascent collaboration soon named The OpenChain Project.

Cisco announces conformance to OpenChain 2.1 (ISO/IEC 5230), the International Standard for open source license compliance. This standard defines the key requirements of a quality open source compliance program, and helps to both reduce errors and increase efficiency across the global supply chain.

“Cisco is a founding member of the OpenChain Project and has been instrumental in establishing our specification as an International Standard,” says Shane Coughlan, OpenChain General Manager. “Their adoption of OpenChain 2.1 underlines their continued thought-leadership in this space, and provides a strong signal across the networking market segment on the optimal approach to open source license compliance. This standard is designed to support companies of any size in ensuring excellent around management of open source intellectual property.”

“Cisco is honored to be part of an incredible team with the OpenChain Project,” says Prasad Iyer Director, Engineering at Product Operations in Cisco. “The industry collaboration, synergies and continuous improvements for our open chain community are truly commendable. We are excited to announce our conformance to this latest industry standard, as it brings additional consistency to our internal teams by streamlining compliance and in building Trust. Having accomplished a smooth transition of all our internal policies, processes and automated tools to be in accordance with this latest specification, it really helps us drive the value-add that we realize in terms of enhanced Productivity and world class quality for all our Products. Further, this has paved the way for us to be also ISO compliant and helps instill confidence among Cisco’s customers and partners with our continued commitment to OpenSource compliance. We sincerely look forward to continue our partnership with OpenChain Project and our peers across the industry in the successful evolution of OpenSource and adoption of our compliance standard”

About Cisco

Cisco (NASDAQ: CSCO) is the worldwide leader in technology that powers the Internet. Cisco inspires new possibilities by reimagining your applications, securing your data, transforming your infrastructure, and empowering your teams for a global and inclusive future. Discover more on The Network and follow us on Twitter.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. A listing of Cisco’s trademarks can be found at www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company.

About the OpenChain Project

OpenChain began when a group of open source compliance professionals met in a conference lounge and chatted about how so much duplicative, redundant open source license compliance work was being done inefficiently in the software supply chain simply. They realized that while each company did the same work behind the scenes in a different manner the output for downstream recipients could not realistically be relied on because there was no visibility into the process that generated the output.

The answer the early principles of this discussion arrived at was to standardize open source compliance, make it transparent and build trust across the ecosystem. The project began as outreach to the community with the idea of a new standard for open source license compliance with slides titled, “When Conformity is Innovative.” A growing community quickly recognized the value of this approach and contributed to the nascent collaboration soon named The OpenChain Project.