This is the multi-page printable view of this section. Click here to print.

Return to the regular view of this page.

Appendix

    Appendix 1. Personnel Assignments

    NoRoleResponsibilityRequired CompetencyOwning OrganizationAssignee
    1Open Source Program Manager (OSPM)Bears overall responsibility for the company’s open source program.Understanding of software development processes
    Understanding of copyright and patents
    Expertise in open source license compliance
    Communication skills    		Open Source Management Team[Name]
    2LegalAssesses legal risks related to open source licenses and provides legal advice.Understanding of the open source ecosystem
    Expertise in software copyright
    Expertise in open source licenses
    Ability to assess legal risk    		Legal Team[Name]
    3ITOperates and automates open source analysis tools.Understanding of open source license compliance processes
    Understanding of open source analysis tools
    Expertise in IT infrastructure
    Understanding of automation and CI/CD pipelines    		IT Team[Name]
    4SecurityOperates open source security vulnerability analysis tools.Understanding of DevSecOps
    Understanding of open source security vulnerability analysis tools
    Expertise in known and newly discovered vulnerabilities
    Ability to assess and manage risk    		Security Team[Name]
    5Development CultureSupports in-house developers in actively using open source.Understanding of software development processes
    Basic knowledge of open source license compliance
    Ability to design education and training
    Experience participating in open source communities    		Development Team[Name]
    6QualityVerifies open source license obligations when distributing supplied software.Understanding of software development processes
    Basic knowledge of open source license compliance
    Understanding of open source policy
    Basic knowledge of open source licenses    		Quality Assurance Team[Name]
    7OSRB (Open Source Review Board)Establishes and improves policies and processes for open source management.Expertise in open source policy and process
    Experience operating a deliberative body    		OSRB[Name]
    8OSPO (Open Source Program Office)Supports contributions to external open source projects and open sourcing of in-house projects.Experience participating in open source communities
    Ability to manage open source projects    		OSPO[Name]