News

Our OpenChain China Work Group is moving from occasional workshops to a regular meeting schedule in June 2024. Regular Meeting #1 will take place on the 28th of June at the ByteDance offices. Full details and registration link below.

Date and Time:

2024-06-28, 14:00 to 16:00
(doors open 13:30)

Agenda:

• Informal discussion about how ByteDance manages open source IP.
• Informal discussion about how Honor manages open source IP.
• Networking break.
• Guided discussion about the EU Cyber Resiliency Act

Location:

北京市朝阳区太阳宫地区七圣中街12号院融中心A座B1- 培训室02
(ByteDance Offices, B1-Training Room 02, Building A, Rongzhongxin, No. 12, Qisheng Middle Street, Chaoyang District, Beijing)

Register here:

• https://cvent.me/x1WMe2

More about the OpenChain China Work Group:

These community meetings focus on:

• what standards help with managing open source?
• how do we use multiple standards to solve multiple challenges?
• apart from standards, what business processes can help?
• what are my implementation choices?
• what did other people do? (Case studies, lessons learned, informal discussion)

Description in Simplified Chinese:

将于 6 月 28 日举行，请在下面注册：

OpenChain 中国工作组会议 #1

日期和时间：
2024-06-28，14:00 至 16:00
（13:30 开门）

议程：

• 非正式讨论字节跳动如何管理开源 IP。
• 非正式讨论荣耀如何管理开源 IP。
• 社交休息。
• 关于欧盟网络弹性法案的指导讨论

地点：
北京市朝阳区太阳宫地区七圣中街12号院融中心A座B1- 培训室02

在此处注册：
https://cvent.me/x1WMe2

有关 OpenChain 中国工作组的更多信息：

这些社区会议的重点是：：

• 哪些标准有助于管理开源？
• 我们如何使用多种标准来解决多个挑战？
• 除了标准之外，哪些业务流程可以提供帮助？
• 我的实施选择是什么？
• 其他人做了什么？ （案例研究、经验教训、非正式讨论）

The OpenChain Japan Work Group will host its 31st regular meeting on the 27th of June at the Kioxia Corporation Head Office. As always, everyone is invited to attend this meeting. Additionally, on the 28th of June there will be a meeting co-hosted for the OSPO Sub-Work Group Local Meetup.

Register to Attend

• https://cvent.me/aN47ry

Event Details in Japanese

大変長らくお待たせいたしました、次回の全体会合に関する正式のご案内です。

ちょっといろいろあってご案内が遅くなってしまいましたが、
既にスケジュールは押さえていただいているでしょうから大丈夫ですよね！
お待たせした分、内容的には大充実のアジェンダになっております。
サイボウズの武内さんによる基調講演、トヨタ自動車の遠藤さんによる先進事例紹介、
キオクシアの關さんによるOSPOの取組事例紹介、BOF、ライトニングトークなど、
いずれも「ここでしか聞けない」大変貴重なお話ばかりです。
是非ご参加ください！できれば現地で！！(一部コンテンツはオンライン配信無し)
以下、詳細です。

【第31回OpenChain Japan全体会合(第6回ハイブリッド会合) 】
・日時：2024年6月27日(木)　13:30 – 17:15 (13:00開場)
・場所：キオクシア株式会社本社(田町ステーションタワーS 10階)
・アジェンダ：添付のご案内をご覧ください。 (頑張って作ったので見て欲しいだけ)
・参加方法
　現地参加の方は、添付のご案内の「全体会合への参加方法」から事前登録をお願いします。
　オンライン参加の方は、事前登録は不要です。(zoomのURLも、添付のご案内に記載)

★ライトニングトーク資料作成・発表のお願い★
　全体会合では、各社の事例を共有いただいて議論する「ライトニングトーク」をおこないます。
　添付「第7回 ライトニングトーク (LT) 資料作成・発表のお願い」をご参照の上、
　貴社の事例を共有いただけましたら幸いです。
　多くの事例が集まることで、より詳しい傾向分析やディスカッションができますので、
　当日ご参加予定の方もそうでない方も、是非、事例のシェアをお願いします！
　(資料の提出はこちらまで→openchain-jp-lt-office@ml.jp.panasonic.com)

【OSPO SWGローカルミートアップ(Co-Located Event)】
・日時：2024年6月28日(金)　10:00 – 11:30
・場所：キオクシア株式会社本社(全体会合と同じ会場)
・参加方法
　現地参加の方は、添付のご案内の「全体会合への参加方法」から事前登録をお願いします。
　オンライン参加の方は、事前登録は不要です。(zoomのURLも、添付のご案内に記載)

さて、早いもので明日から6月。
OpenChain Japanのクラフトビール部の活動が活発になる時期ですね、と書いたところで、
奴らは通年活発だったわ、と考えなおしました。
(OSSと同じくらいクラフトビールが好きな方、どうぞご一緒に。)

では、次回全体会合でお会いしましょう！ お楽しみに。

OpenChain Japan Planning 渡邊

The OpenChain Korea Work Group will host its 22nd regular meeting on the 20th of June at the CJ Talent Training Center in Seoul. As always, everyone is invited to attend a series of talks, case studies and networking sessions designed to support professionals from companies using open source in the business supply chain.

일정

• 일정: 2024-06-20 (목) 오후2시~5시
• 장소: CJ 인재원 4층 Auditorium

아젠다

Time	Agenda	Speaker	Slide
14:00~14:10	Welcome & Opening	CJ	–
14:10~14:20	OpenChain Global Update	Shane Coughlan, Linux Foundation	–
14:20~14:40	OpenChain Korea Update & Subgroup 운영 방안	장학성, SK텔레콤 박정숙, ETRI 박원재, LG전자	–
14:40~15:10	CJ 오픈소스 관리시스템 구축 사례	성기영, CJ	–
15:10~15:40	Entr’ouvert v. Orange 소송 사례	조정년, SK주식회사	–
15:40~16:00	Break	All	–
16:00~16:30	ISO/IEC 18974 오픈소스 보안 표준 준비 현황 공유	채진영/김기륜, 삼성SDS	–
16:30~17:00	정부 발표, SBOM 기반 SW공급망 관리 가이드라인 소개	박원재, LG전자	–

Learn More About This Meeting

• https://openchain-project.github.io/OpenChain-KWG/meeting/22nd

Learn More About All The Previous Korea Work Group Meetings

• https://openchain-project.github.io/OpenChain-KWG/meeting

Learn More About The Korea Work Group

• https://openchain-project.github.io/OpenChain-KWG

Kobota San of Sony, one of the OpenChain Governing Board members, will represent the OpenChain Project at the OSBC Open Source Conference 2024 in Seoul on the 19th of June 2024. His talk, entitled ‘Introduction of Sony Group Open Source Activities and Contributions to the OpenChain and SPDX (SBOM) Project,’ will open the afternoon session at 13:00.

Kobota San is well known in the OpenChain Project for his commitment to community collaboration and events, and is frequently found at open source events in Japan and around the world. A key contributor to initiatives like the SPDX Lite profile of the SPDX SBOM format, Kobota San is one of the main figures in the Planning Sub-Group of the OpenChain Japan Work Group.

Learn More:

• https://osbc.co.kr/archive/newsletter/14

Wednesday September 18, 2024 11:00 – 11:40 CEST

Happening in Room 0.14 (Level 0)

Part of the Standards & Specifications Forum

Shane Coughlan, OpenChain General Manager, will deliver a talk on how to create open specifications and evolve them into formal international standards through ISO.

Abstract

This talk will explain the process of going from a blank page to an ISO standard using OpenChain ISO/IEC 5230:2020 as a case study. It will explain how the OpenChain specification team came together, how they created the first iterations of what would become ISO/IEC 5230, and how they collaborated with Joint Development Foundation (JDF) to evolve from de-facto industry standard into formal international standard through the JTC-1 PAS Transposition Process. Attendees will learn how to frame, build and deploy their own specifications and standards, with a particular focus on the practical decisions required: should this be a specification, should it be an ISO standard and what do I need to do to make this happen?

About Shane Coughlan

Shane Coughlan is an expert in communication, security and business development. His professional accomplishments include spearheading the licensing team that elevated OIN into the largest patent non-aggression community in history and establishing the first global network for open source legal experts. He is a founder of both the first law journal and the first law book dedicated to open source. He currently leads the OpenChain Project and is a General Assembly Member of OpenForum Europe.

Learn More:

• https://sched.co/1ej5Q

Monday September 16, 2024 12:15 – 12:35 CEST

Happening in Room 0.94-0.95 (Level 0)

Part of the Operations Management Summit

Shane Coughlan, OpenChain General Manager, will deliver a talk on how to discuss open source with IP departments.

Abstract

Product teams, R&D teams and OSPOs occasionally find themselves in an adversarial situation with IP Departments around open source and how it should be managed in an organization. This is usually due to misunderstandings about how open source provides value and how the risks associated with it can be contained. With open source increasingly necessary for organizations to compete effectively, it is important to ensure all departments understand its strategic importance, and how to manage it in the context of their KPIs and requirements. This talk will explain how to collaborate with IP Departments using the language of external risk containment and internal portfolio management, and help IP Department staff assess open source as part of a diversified IPR strategy.

About Shane Coughlan

Shane Coughlan is an expert in communication, security and business development. His professional accomplishments include spearheading the licensing team that elevated OIN into the largest patent non-aggression community in history and establishing the first global network for open source legal experts. He is a founder of both the first law journal and the first law book dedicated to open source. He currently leads the OpenChain Project and is a General Assembly Member of OpenForum Europe.

Learn More:

• https://sched.co/1ej1a

The OpenChain Governing Board has a Strategy Sub-Committee chaired by Matthew Crawford from Arm. This Sub-Committee reviews strategic topics, and many of its meetings are open to all OpenChain community participants. Recently it has been focusing on overviews of Work Group activity. In this meeting, the Sub-Committee hears from Andrew Katz of Orcro, chair of the Education Work Group.

Get Involved

Everyone is welcome to join public meetings of the Strategy Sub-Committee. These meetings will be promoted on our main mailing list and are listed here:

• https://openchainproject.org/participate

The OpenChain Telco Work Group held its regular monthly calls on the 6th of June. You can review the full recordings below.

Get Involved

Everyone is welcome to be part of the Telco Work Group. You can join their mailing list here:
https://lists.openchainproject.org/g/telco

Please note: you do not have to be an expert in telecommunications or work for a telecommunications company to join the group. Work on subjects like the Telco SBOM Quality Guide is intended to also help other market sectors.

The OpenChain Specification Work Group held its regular monthly call on the 5th of June. This call has a regular agenda of reviewing project news, working on our draft future specifications, looking at reference or education material, and opening the floor to other topics.

The following issues were closed during this call:

Security Assurance Review

• [Improvement] Expand definitions section for (1) Secure Software Development to include Secure Programming Techniques and (2) Security Testing to include Static and Dynamic #36
  https://github.com/OpenChain-Project/Security-Assurance-Specification/issues/36

License Compliance Review

• [Improvement] Review Cycle Potentially Needs Adjustment #71
  https://github.com/OpenChain-Project/License-Compliance-Specification/issues/71

Join Our Work

Everyone is welcome to be part of the Specification Work Group. You can join their mailing list here:
https://lists.openchainproject.org/g/specification/

You can find and be part of all OpenChain calls through our participation page here:
https://openchainproject.org/participate