The OpenChain Project is a Linux Foundation initiative with the objective of building trust in Open Source Software by making Open Source License compliance:
The core of the OpenChain is the OpenChain Specification supported by a training curriculum, on which we built our Training Program.
Conformance allows organisations to display and promote their adherence to these requirements, helping to ensure that potential suppliers and customers understand and can trust their approach to Open Source Software compliance.
The OpenChain Specification defines a set of requirements every quality compliance program must satisfy.
In December 2020, the OpenChain Specification was ratified and published as an ISO standard, ISO 5230 OpenChain Standard.
There is an OpenChain training curriculum which provides the ISO 5230 OpenChain Standard educational foundation for how to manage open source software supply chains. Source Code Control have created a bespoke training program based on this curriculum.
ISO 5230 has five process areas that need to be implemented to achieve conformance.
Self-Assessment,
Independent Assessment
OpenChain Curriculum,
Company-wide,
Self Manage
Strategy,
Stakeholders,
Scope,
How to apply,
Communication
Identify Open Source components,
Create license notices,
Automation
Self Management,
Support from service providers,
Independent review
We have helped organisations of all sizes achieve conformance. See how our customer Interneuron CIC achieved ISO 5230 OpenChain conformance
Click Here