How the Process Management Standards for Open Source Compliance and Security Impact InnerSource

The OpenChain standards for License Compliance (ISO/IEC 5230) and Security Assurance (ISO/IEC DIS 18974) are simple and effective ways for companies in the supply chain to improve open source software management both inside and externally to organizations. This talk will have a particular focus on how that impacts InnerSource projects, and on adjacent matters like automation and scaling of process management across large organizations. We will also recap how and why these standards exist, including the formation of the project behind them, and the process of going from de-facto through to formal ISO/IEC standardization.