toggle quoted messageShow quoted text
The playbooks fit under the Education Work Group, as does all other reference material, training material and the website. Other Work Groups contribute, but the coordination for development and release always happens via Education. The Monthly calls provide a forum to collaborate with the Work Group and co-develop new material, and Education has a history of holding special mini-summits or calls to action to develop specific high value items like the online training courses, the playbooks and the background needed for our transition of the reference library to MarkDown.
The Policy Work Group will be for higher level business and legislative policy discussion, in a forum where senior leadership and government figures would discuss more sweeping matters (for example, national approach to open source, market guidance around open source and standards, etc.). It may pass outcomes to Education for development into material, but the expected material from the Policy Work Group would be things like governmental policy rather than market implementation (choices like create an OSPO or use automation).
On Oct 13, 2022, at 8:38, Ana Jimenez Santamaria <ana@...> wrote:
This new structure looks great, and it makes more clear the different areas to engage across the OpenChain Project.
I was wondering, where would the OpenChain content about OSPOs in the policy/legal context (e.g the latest playbook to adopt ISO standards under the lens of a virtual OSPO) would fit given this new structure?
Could be under the Policy section? I see you described as "providing strategic advice around the highest level of planning for open source in legislation and business".
If there is a specific place to focus on legal /security policies under the OSPO scope in the OpenChain, it will be easier for me to share it with TODO Group's OSPO practitioners 🙂
On Wed, Oct 12, 2022 at 3:59 PM Shane Coughlan <scoughlan@...> wrote:
The OpenChain Project has been very active since its formal launch in late 2016. Our global community has built an ISO/IEC standard for license compliance, launched a de facto (and soon to be ISO/IEC) standard for security. We have contributed to SBOM, OSPO, training, policy and other discussions. We built the world’s largest library of open source management reference material.
To reflect our growth and to make it easier to navigate the project we are going to make some adjustments to our work groups. Nothing too radical, but definitely something to help people find their way around more quickly, and to get the information they want faster. The image above contains a summary of the evolution approved by our Governing Board at their last meeting in September, and targeted for release during October 2022.
• The Specification Work Group will split into two parts – a Licensing Work Group for ISO/IEC 5230 and a Security Work Group for the Security Assurance Specification.
• The Education Work Group and Outreach Work Group will combine into the Education Work Group.
• We will launch a new Export Control Work Group and a new Policy Work Group. The former will help to navigate issues around increasing international trade tensions. The later will help us provide strategic advice around the highest level of planning for open source in legislation and business.
• The dormant Conformance Work Group will be wound down and discussions regarding self-certification moved to Education Work Group, with discussions about the nuance of conformance parameters moved to our Steering Committee.
• Finally (if there are no objections), we will re-brand the Reference Tooling Work Group to the Automation Work Group to help guide people hearing about automation to the right solutions.
Your feedback – as always – is most welcome. Please provide comments to our main mailing list:
(or just reply all to this email)
Please provide feedback by Close of Business UTC (17:00 UTC) on the 18th of October 2022.
Ana Jiménez Santamaría
Senior Project Manager at TODO Group (#OSPO)
💬 Languages: English, Español, 日本語
🙋 Pronouns: she/her
🕐 Timezone: CET / CEST
New to TODO & OSPOs? Visit OSPOlogy! This repo hosts the study and open community communication to discuss and learn about Open Source Program Offices across regions