Moorcrofts LLP and its sister compliance company Orcro Limited, as OpenChain partners, invite you to join us at the next OpenChain UK Work Group meeting, taking place virtually via Zoom on Thursday 3 December from 14:00 – 16:00 GMT.
Book Now
To reserve your free place on the virtual meeting, on 3 December from 14:00 – 16:00, please complete the online booking form.
The OpenChain Project is delighted to welcome Lee Tsai & Partners to our partner program as the first law firm in Taiwan.
“The OpenChain Project is fortunate to have an active and growing community of user companies in Taiwan,” says Shane Coughlan, OpenChain General Manager. “Welcoming Lee Tsai & Partners to our official partner program is a natural extension of ensuring legal support for our community in this space. We are fortunate to have the opportunity to work with such experienced and influential individuals in this space, and we have every confidence that Lee Tsai & Partners is perfectly positioned to assist companies as the OpenChain Specification, DIS 5230, formally graduates as an ISO/IEC standard.”
“We have seen open source software become a critical part of technological innovation,” says Jaclyn Tsai, Co-Founder of Lee Tsai & Partners. “Whether an enterprise can effectively use open source software will become a crucial factor in keeping pace with current trends. The first step in ensuring proper use of open source software is assuring that appropriate controls are in place to ensure that license terms and obligations may be complied with. We are excited and pleased to be an official partner of OpenChain to help companies understand the requirements under the Internal Standard for Open Source Compliance and their legal obligations in using open-source software.”
About Lee Tsai & Partners
Dr. Chung-Teh Lee and Jaclyn Tsai, after working as judges and practicing for extensive periods, both had a vision of creating a law firm that is not only grounded on professionalism but also compassion. As such, the first office of the Lee Tsai Group was founded in Taipei in 1998 with the professional motto “Reason” and “Compassion” and a mission statement “to provide the highest quality of professional service to our clients through our comprehensive knowledge of their industries while dedicating ourselves not only to our clients but also to our community.”
Our Global Work Team call to end November focused in showing the format of our ISO/IEC International Standard, how OpenChain 2.1 uses precisely the same formatting, and our online self-certification questionnaire for OpenChain 2.1.
Check out our first “full spectrum” call, expanding from our traditional Specification Work Team, and providing all the global work teams with space to catch up and share.
The next call is on the Fourth Monday of November (23rd) at 5pm Pacific.
On this webinar Tim Bird of Sony spoke on ‘Issues with Open Source License Compliance in Consumer Electronics’, a variant of a speech recently delivered at Open Source Summit Europe, and made available here for our global audience along with a great Q&A.
The full recording of our recent Education Work Group meeting is now available. Big news this time around as we lock down collaboration with LF Training to make a free online course (we get their stuff as CC-0!), how we will work, and our target release dates.
Our regular bi-weekly webinar will cover an exciting topic at 5pm Pacific today (Monday) – 8am Beijing/Taipei – 9am Seoul/Tokyo (Tuesday).
Tim Bird of Sony will cover ‘Issues with Open Source License Compliance in Consumer Electronics’, a variant of a speech recently delivered at Open Source Summit Europe, and made available live here for audiences in the USA and Asia.
The Japan Planning Sub-Work Group will host a virtual meeting on the 16th of December. The topic of the next meeting is ‘OSS training for software engineers based on the OpenChain specification.’ Our presenter is Iwata San from Hitachi.
The OpenChain Korea Work Group will hold its 8th meeting on December 2nd. The event will run from 14:00 to 16:00 Korea time. Everybody is welcome to join. Dial in details below.
Agenda
No
Agenda
Speaker
Slide
1
OpenChain Update
Shane Coughlan, Linux Foundation
–
2
현대자동차 오픈소스 거버넌스 체계 구축
현대자동차 백송하
–
3
SCA(Software Composition Analysis) Market 동향
카카오 황민호(Robin)
–
4
Olive 전격 공개
카카오 황민호(Robin)
–
5
Case Study
All
–
5
OpenChain KWG Update
SK텔레콤 장학성
–
6
Free Discussion
All
–
Case Study
주제 : 오픈소스 컴플라이언스 / 보안취약점 점검 대상 분류
폰트에 대해서도 오픈소스 컴플라이언스 활동을 수행하는지? (예: Open Font)
회사가 사내 직원용 모바일 앱(안드로이드, iOS)을 배포하는지? 그렇다면 이에 대해서도 오픈소스 컴플라이언스 활동을 수행하는지?
오픈소스 보안취약점 점검 대상은 어떻게 분류하는지? 배포하는 소프트웨어 뿐만 아니라, 인프라 용, 서버 용으로 사용 중인 소프트웨어에 대해서도 점검 대상으로 포함시키는지?
The OpenChain Project hosted a special three hour mini-summit to explain the three options for compliance to the International Standard for open source compliance. Learn about self-certification, independent assessment and third-party certification from the experts in each area.
Part 1 – Self-Certification (1 hour session)
The core of the International Standard for open source license compliance is self-certification. This is a process where a company reviews the requirements of the standard and checks whether their current processes match these requirements. If necessary, a company can make adjustments to processes. Self-certification can be accomplished in several ways. The most common are:
Part 2 – Independent Compliance Assessment (1 hour session)
Companies often want assistance in adopting an International Standard. One common form is Independent Assessment, where a knowledgable service provider reviews a company’s processes and provides objective feedback on where adjustments or improvements may be necessary. The OpenChain International Standard for open source compliance has a process called “Independent Compliance Assessment” that is provided by trusted partners of the project. These partners may be law firms or service vendors. Two of our existing partners, Source Code Control (UK) and AlektoMetis (Germany), hosted a session explaining this approach and their respective service offerings.
Part 3 – Third-Party Certification (1 hour session)
In some markets third-party certification is an important part of inter-company relationships. Examples are automotive, infrastructure and aviation, where strict regulation and regular audits are well-served by formal certification by third-parties. The OpenChain International Standard for open source compliance approaches third-party certification in the same way as other International Standards. Two of our existing partners, PwC (Germany) and Orcro (UK), hosted a session explaining this approach and their respective service offerings.
More About Our Webinars:
This event is part of the overarching OpenChain Project Webinar Series. Our series highlights knowledge from throughout the global OpenChain eco-system. Participants are discussing approaches, processes and activities from their experience, providing a free service to increase shared knowledge in the supply chain. Our goal, as always, is to increase trust and therefore efficiency. No registration or costs involved. This is user companies producing great informative content for their peers.