Hi Marc, please find attached a translated version of the article. I do not know how to publish it on Wikipedia and whether it should be available in English on the German site or English, American or

+1 from GER 😉 Von: main@... <main@...> im Auftrag von Sebastian Crane via lists.openchainproject.org <seabass-labrax=gmx.com@...> D

Hi Shane, I wanted to confirm how we plan to proceed concerning the security assurance guide? If I am correct, we agreed during the last meeting to follow up by mail since there were several interesti

That‘s really a pitty, it seems like I am not able to get back in again…

Hi Gergely, my understanding is that it addresses the handling of the inbound questions concerning the open source parts of the Supplied Software. Assume you are using some GPLv2 licensed code and off

😊 ... so count me in as well... Von: main@... <main@...> im Auftrag von Stefanie Pors via lists.openchainproject.org <stefanie.pors=intel.com@...

The current feels much rounder, sort of more comfortable, than the combination of circles & square. I also would want to stay with the current. Mit freundlichem Gruß / kind regards Jan Thielscher T: +

Probably just to prevent some misunderstanding or unnecessary fears: The law, Dirk referred to, will be effective from 2023. Then it addresses companies with >3000 employees, from 2024 it will also ad

Hello Aitken, thank you for pointing this out. I can underline this experience as well. My suspicion is, that project ownership and traditional corporate structures are root causes of this. We try to

Hi Robert, I followed the conversation and can confirm that the question of certification in the sense of „certify that I am compliant“ vs. „I verified that we do the right things to comply“ is a hard

Would be interesting to know which part of MS this addresses. Or does it comprise the complete organization? If yes, it would be even more interesting to learn about how they achieved the rollout and

Hi Shane, am I right to assume that even if PRF will change to IS that the 5230 will remain? It seems so short compared to older norms like 27001… Obviously their structure is not just derived by coun

Hi Jeremiah, during the tooling group plannings, we already invested some thoughts on „personas“ or „roles“. Probably some of the work might be reused: find here the link: https://github.com/Open-Sour

And here is the link: https://github.com/Open-Source-Compliance/Sharing-creates-value/tree/master/User-Stories

Hi Jeremia, in the effort to develop a tool chain we already created several personas or roles. Probably this could help? They are available in the sharing-creates-value repository. Will send the link

Hi, I'll be there as well. If we all would invest one break, we could cover most of the relevant slots. Here is the list of slots to be covered: 1) 0900-1000 Welcome 2) 1120-1140 Break 1 3) 1245-1415

Dear Christian, thank you for your insights and questions. Probably I may add a bit from our experiences concerning your first question on how much use AI-models might deliver. We decided not to follo

Thank you Jilayne for pointing that out! It is rather astonishing how often – even for legal counsels - whitelists are meant to be the holy grail of compliance conformity. Sometimes we even find the r

Dear Shane, dear Alexios, following your discussion, I get the impression that both of you look at the same but from different angels. The one of you coming from the development the other from the org

Hi Gary, I can confirm this to be a common case. Both situations appear quiet often. I would want to add one more case: changing circumstances. there are only few projects I came across, that did not