About once a month the OpenChain Project releases a slide deck to help explain what we do. The October edition is now available in the same location as all previous editions.
If you are a community advocate, please take it and help people get an overview of our work and our latest news.
If you are a curious reader, please use it as a starting point for engagement with our work and community.
The OpenChain AI Study Group held its regular Asia sync on the 10th of October. This focused on a recap of the earlier monthly workshop, which saw Karen Bennet from SPDX provided a briefing on AI BOM. Work also progressed on the draft scratchpad for management of AI BOMs.
Track This Work
You can follow and contribute to the work of the OpenChain AI Study Group through its dedicated mailing list. This is open to everyone regardless of industry vertical or speciality. You will find it here:
To help you navigate the complexities of AI, data and the supply chain, Nick Schifano CEO and founder of FastCatalog.ai discussed the intersection of AI innovation and legal frameworks. With years of experience in IP law, standards, and AI/ML legal frameworks, Nick guided us through key considerations for managing the AI supply chain—focusing on how companies can prepare for and comply with new regulatory requirements.
Webinar Highlights: ✔️ Insights into the hidden risks behind model lineage and training data in open-source AI models ✔️ Scenarios where data transparency becomes crucial for AI systems ✔️ Operational strategies to better manage AI and data supply chains ✔️ Preparing for the upcoming EU AI Act and its implications for companies
Watch the Webinar
Review the Slides
About the Speaker:
Nick Schifano is a leading expert in AI and legal frameworks. Before founding FastCatalog.ai, a company dedicated to revolutionizing AI supply chain management, Nick served as Assistant General Counsel at Microsoft, where he led groundbreaking initiatives in open innovation and AI/ML legal practices. With a technical foundation in software engineering and IT consulting, Nick brings a holistic view of both the technical and legal aspects of AI development.
More About Our Webinars:
This event is part of the overarching OpenChain Project Webinar Series. Our series highlights knowledge from throughout the global OpenChain eco-system. Participants are discussing approaches, processes and activities from their experience, providing a free service to increase shared knowledge in the supply chain. Our goal, as always, is to increase trust and therefore efficiency. No registration or costs involved. This is user companies producing great informative content for their peers.
The OpenChain Automotive Work Group held an online meeting to discuss a recent face-to-face in Stuttgart, Germany, Over-The-Air (OTA) update concepts and Software Bill of Materials. The meeting was hosted by Marcel Kurzmann of Bosch.
Watch the Recording
Review the Agenda
Re-Cap of the OpenChain Automotive F2F Workgroup-meeting from September 10th
Presentation of OTA concepts in automotive – maybe by eSync Alliance
Updates from the SBOM-study-group and discussion about potential automotive specific requirement
Shane Coughlan, OpenChain General Manager, will deliver a speech entitled ‘Understanding How Open Source Is Managed Professionally in 2024’ at ETRI Open Source Tech Day 2024 in Korea. This event will take place on the 15th of October in Seoul, and more details – including the full program – can be found on the official website.
As AI continues to transform industries, companies are increasingly building their AI systems using open-source AI models. However, with this rapid expansion comes complex challenges—particularly in understanding the legal risks and compliance implications of using specific open-source models. Critical factors like model lineage and training data are often hard to track, and the legal risks tied to these elements are only growing, especially with regulations like the upcoming EU AI Act.
To help you navigate these complexities, we’re excited to announce an upcoming webinar featuring Nick Schifano, CEO and founder of FastCatalog.ai. Nick’s deep expertise lies at the intersection of AI innovation and legal frameworks. With years of experience in IP law, standards, and AI/ML legal frameworks, Nick will guide us through key considerations for managing the AI supply chain—focusing on how companies can prepare for and comply with new regulatory requirements.
Webinar Highlights:
Insights into the hidden risks behind model lineage and training data in open-source AI models
Scenarios where data transparency becomes crucial for AI systems
Operational strategies to better manage AI and data supply chains
Preparing for the upcoming EU AI Act and its implications for companies
Join Us:
Don’t miss this opportunity to get ahead of the curve on AI supply chain management and legal compliance.
Date & Time: October 9th, 17:00 PDT / October 10th, 00:00 UTC / October 10th, 09:00 JST
Let’s come together to learn and grow as a community!
Nick Schifano is a leading expert in AI and legal frameworks. Before founding FastCatalog.ai, a company dedicated to revolutionizing AI supply chain management, Nick served as Assistant General Counsel at Microsoft, where he led groundbreaking initiatives in open innovation and AI/ML legal practices. With a technical foundation in software engineering and IT consulting, Nick brings a holistic view of both the technical and legal aspects of AI development.
More About Our Webinars:
This event is part of the overarching OpenChain Project Webinar Series. Our series highlights knowledge from throughout the global OpenChain eco-system. Participants are discussing approaches, processes and activities from their experience, providing a free service to increase shared knowledge in the supply chain. Our goal, as always, is to increase trust and therefore efficiency. No registration or costs involved. This is user companies producing great informative content for their peers.
During the Operations Management Summit at Open Source Summit Europe in Vienna, Kobota San (Sony) and Ninjouji San (Toshiba) from the OpenChain Project gave a deep-dive into some of the original and current market realities behind the creation and use of the SPDX Lite SBOM format.
Their slides contain a wealth of information that is useful for anyone working in this field.
Korea Telecom (KT), South Korea’s largest telecommunications operator, has announced an OpenChain ISO/IEC 18974 Conformant Program. With 50,000 employees group-wide, KT has a long history in open source engagement, and has operated a dedicated team for its management since 2012.
KT’s decision to adopt OpenChain ISO/IEC 18974 continues their strategic interest in aligning with international standards for managing the supply chain, and builds on their previous adoption of OpenChain ISO/IEC 5230 for open source license compliance. [See note 1 below]
The adoption of OpenChain ISO/IEC 18974 further enhances KT’s contribution to open source security and enable them to take a more proactive and systematic approach to open source security activities.
“Today’s announcement is another milestone for both KT and the OpenChain Project,” says Shane Coughlan, OpenChain General Manager. “KT has demonstrated continued leadership in open source best practices with certification to OpenChain ISO/IEC 18974, and their activity coincides with deeper telecommunication adoption of OpenChain standards in recent months. Great credit is due to the open source and the management team of KT for driving this forward, and for the inspiration it provides to many other companies in the ecosystem.”
About KT Corporation (KRX: 030200; NYSE: KT)
KT Corp., Korea’s largest telecommunications service provider, is leading the new era of innovations in one of the world’s most connected countries with 5G, Big Data, Cloud, IoT, Blockchain and other transformative technologies. KT launched the world’s first nationwide commercial 5G network in April 2019, after showcasing the first trial 5G services at the PyeongChang Winter Olympic Games in February 2018. To help cope with COVID-19, KT is staging a social campaign, dubbed “Ma-Eum:TACT (Heart to Heart),” providing technology supports for people and businesses in need. KT will deliver most essential and innovative services and solutions to its customers around the world as the first frontier in the next technology revolution and number one Global ICT Company.
About the OpenChain Project
The OpenChain Project has an extensive global community of over 1,000 companies collaborating to make the supply chain quicker, more effective and more efficient. It maintains OpenChain ISO/IEC 5230, the international standard for open source license compliance programs and OpenChain ISO/IEC 18974, the industry standard for open source security assurance programs
About The Linux Foundation
The Linux Foundation is the world’s leading home for collaboration on open source software, hardware, standards, and data. Linux Foundation projects are critical to the world’s infrastructure, including Linux, Kubernetes, Node.js, ONAP, PyTorch, RISC-V, SPDX, OpenChain, and more. The Linux Foundation focuses on leveraging best practices and addressing the needs of contributors, users, and solution providers to create sustainable models for open collaboration. For more information, please visit us at linuxfoundation.org.
The OpenChain Project will be featured at the OSCAR event in Beijing, China on the 16th of October. OpenChain will be represented by Zhenhua Sun of ByteDance, the current Chair of the OpenChain China Work Group.
The OpenChain AI Study Group held its regular workshop on the 1st of October. Karen Bennet from SPDX provided a briefing on AI BOM. Work also progressed on the draft scratchpad for management of AI BOMs.
Watch the Recording
Track This Work
You can follow and contribute to the work of the OpenChain AI Study Group through its dedicated mailing list. This is open to everyone regardless of industry vertical or speciality. You will find it here: