You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: ospo-book/content/en/02-chapter.md
+5-5
Original file line number
Diff line number
Diff line change
@@ -29,14 +29,14 @@ Below are common situations where an organization, aiming to manage open source
29
29
-**Complexity of the open source supply chain:** Its widespread distribution, collaborative efforts that are often decentralized, and the anonymity of its contributors make it challenging for organizations to accurately assess risks and comprehend the security and quality standards of the software, hardware, data, etc.
30
30
31
31
-**Tension between the need to ship product features and the need to contribute back to open source:** Open source contributions may take a back seat when dealing with multiple day-to-day tasks.
32
-
33
-
-**Collaboration with the community and industry:** Having the organization provide resources whether that's coding, expertise, or money donations as incentives for fixing common vulnerabilities and exposures that can occur in the projects the organization relies on ([see Log4Shell real vulnerability example](https://en.wikipedia.org/wiki/Log4Shell)) in a timely fashion, as well as collaborations with industry working groups foster cooperative efforts to address security concerns holistically.
32
+
33
+
-**Collaboration with the community and industry:** Having the organization provide resources whether that's coding, expertise, or money donations as incentives for fixing common vulnerabilities and exposures that can occur in the projects the organization relies on ([see Log4Shell real vulnerability example](https://en.wikipedia.org/wiki/Log4Shell)) in a timely fashion, as well as collaborations with industry working groups foster cooperative efforts to address security concerns holistically.
34
34
35
35
-**Procurement processes with never-ending steps:** Open source is a dynamic ecosystem whose contributions should occur as smoothly and naturally as possible. The long procurement processes faced in highly regulated environments, such as finance companies and governments, create a barrier to open source contribution and engagement.
36
36
37
37
-**Lack of consciousness about organizational responsibility:** Due to the way open source was taught in the past, engineering-based tools, or even the engineering jargon used, the concept of open source may not be taken seriously in other areas of the organization involved in decision-making processes, management, or policy making.
38
38
39
-
39
+
40
40
To fully overcome these and other challenges, organizations must be equipped to manage open source operations on both cultural and practical levels. The *how* of accomplishing this is often through the OSPO, as it fosters committed, cross-functional collaboration within the organization to address open source issues encountered by various teams or departments.
41
41
42
42
> 💡 OSPOs foster cross-functional collaboration
@@ -90,7 +90,7 @@ The different roles and pillars of support of an OSPO shared below can help read
### [Apendix A] A perspective of open source in public administrations
93
+
### [Appendix A] A perspective of open source in public administrations
94
94
95
95
We can see that [more public sector organizations are realising the value of an Open Source Programme Office](https://joinup.ec.europa.eu/collection/open-source-observatory-osor/news/growing-case-ospos-government) to not only achieve their digital policy goals to better serve their citizens but also to transform their organizations toward achieving these goals.
96
96
Public sector organizations face unique challenges when it comes to managing their open source operations, including the need to comply with strict laws and regulations, and the requirement to provide transparent and accountable operations. An OSPO can help governments and public sector organizations to overcome these challenges.
@@ -107,7 +107,7 @@ The European Commission's Open Source Program Office (OSPO) has launched a new p
107
107
108
108
### [Appendix B] A broader view of open source
109
109
110
-
By extending the concept of _open_ to encompass (for instance) open research, design, or access, we can identify additional benefits that these practices bring to organizations. This broader view of openness is gaining traction in academic and public sectors, where terms other than open source are sometimes used instead, such as [open technology](https://www.researchgate.net/publication/254920512_Open_Technology#pf7) or open work. However, since these terms are not as well-known among organizations, many of them still use open source as a term to indicate activities beyond software.
110
+
By extending the concept of _open_ to encompass (for instance) open research, design, or access, we can identify additional benefits that these practices bring to organizations. This broader view of openness is gaining traction in academic and public sectors, where terms other than open source are sometimes used instead, such as [open technology](https://www.researchgate.net/publication/254920512_Open_Technology#pf7) or open work. However, since these terms are not as well-known among organizations, many of them still use open source as a term to indicate activities beyond software.
Copy file name to clipboardExpand all lines: ospo-book/content/en/03-chapter.md
+7-7
Original file line number
Diff line number
Diff line change
@@ -17,7 +17,7 @@ weight: 50
17
17
## Introduction
18
18
19
19
In this chapter, we will share recommendations on ways to create a solid foundation for building a stable and strong OSPO, capable of covering the open source-related tasks and responsibilities on a
20
-
day-to-day basis (These tasks will be further explained in the next chapter). We will cover the core concepts necessary to get started with a minimum viable OSPO. This includes strategic aspects and
20
+
day-to-day basis (These tasks will be further explained in the next chapter). We will cover the core concepts necessary to get started with a minimum viable OSPO. This includes strategic aspects and
21
21
areas of work.
22
22
23
23
@@ -120,7 +120,7 @@ Regarding the organization's engagement, there are already various models availa
120
120
* Community contribution
121
121
* Leadership
122
122
123
-
On the other hand, [the OSPO maturity model](https://linuxfoundation.org/tools/the-evolution-of-the-open-source-program-office-ospo/) assists organizations in gauging their progress in establishing a mature OSPO.
123
+
On the other hand, [the OSPO maturity model](https://linuxfoundation.org/tools/the-evolution-of-the-open-source-program-office-ospo/) assists organizations in gauging their progress in establishing a mature OSPO.
124
124
It helps identify the specific areas where they need to concentrate their efforts and improve their practices and its creation might come at any level of the open source journey of an organization.
125
125
126
126
@@ -132,7 +132,7 @@ It helps identify the specific areas where they need to concentrate their effort
132
132
-[ ] Create and publish a common set of values and principles around open source usage, contribution and creation as an organization
133
133
-[ ] Define program branding (e.g., OSPO, open source initiative, head of open source operations).
134
134
-[ ] Define structure, budget and necessary cross-functional staff to get started
135
-
-[ ] Define an action plan for the upcomming years
135
+
-[ ] Define an action plan for the upcoming years
136
136
137
137
#### Stage 1
138
138
@@ -144,9 +144,9 @@ It helps identify the specific areas where they need to concentrate their effort
144
144
#### Stage 2
145
145
146
146
-[ ] Lay out best practices in interacting with OSS projects such as how to request features, file bug reports, and contribute basic code.
147
-
-[ ] Communicate to workers, policimakers and other open source stakeholders the importance of contributing to and not merely consuming (also called usage) to open source (including advocating for and driving event sponsorships, booking project leads and maintainers as speakers or panelists in public coding forums, and securing organizational resources to mission-critical OSS projects).
148
-
-[ ] Incentivize developers and non-developers (lawyers, project managers, etc) to participate on open source projects critical to their operations (contirbuting code, field expertise, etc), to the degree that workers become highly active contributors.
149
-
-[ ] Contributions are focused to a narrow buiness critical set of functionalities in open source projects, and they are sponsored by the organisation (contributions are not a hobby project of individual employees)
147
+
-[ ] Communicate to workers, policymakers and other open source stakeholders the importance of contributing to and not merely consuming (also called usage) to open source (including advocating for and driving event sponsorships, booking project leads and maintainers as speakers or panelists in public coding forums, and securing organizational resources to mission-critical OSS projects).
148
+
-[ ] Incentivize developers and non-developers (lawyers, project managers, etc) to participate on open source projects critical to their operations (contributing code, field expertise, etc), to the degree that workers become highly active contributors.
149
+
-[ ] Contributions are focused to a narrow business critical set of functionalities in open source projects, and they are sponsored by the organisation (contributions are not a hobby project of individual employees)
150
150
151
151
152
152
#### Stage 3
@@ -185,4 +185,4 @@ There is a lack of consistency in how open source understanding and value is per
185
185
-[Participating in open source communities](https://todogroup.org/resources/guides/participating-in-open-source-communities/)
186
186
-[A guide to outbound open source software](https://todogroup.org/resources/guides/a-guide-to-outbound-open-source-software/)
187
187
-[A deep dive into OSPO](https://www.linuxfoundation.org/research/a-deep-dive-into-open-source-program-offices)
0 commit comments