Appendix
Categories:
Appendix 1. Personnel Assignments
| No | Role | Responsibility | Required Competency | Owning Organization | Assignee |
|---|---|---|---|---|---|
| 1 | Open Source Program Manager (OSPM) | Bears overall responsibility for the company’s open source program. | Understanding of software development processes Understanding of copyright and patents Expertise in open source license compliance Communication skills | Open Source Management Team | [Name] |
| 2 | Legal | Assesses legal risks related to open source licenses and provides legal advice. | Understanding of the open source ecosystem Expertise in software copyright Expertise in open source licenses Ability to assess legal risk | Legal Team | [Name] |
| 3 | IT | Operates and automates open source analysis tools. | Understanding of open source license compliance processes Understanding of open source analysis tools Expertise in IT infrastructure Understanding of automation and CI/CD pipelines | IT Team | [Name] |
| 4 | Security | Operates open source security vulnerability analysis tools. | Understanding of DevSecOps Understanding of open source security vulnerability analysis tools Expertise in known and newly discovered vulnerabilities Ability to assess and manage risk | Security Team | [Name] |
| 5 | Development Culture | Supports in-house developers in actively using open source. | Understanding of software development processes Basic knowledge of open source license compliance Ability to design education and training Experience participating in open source communities | Development Team | [Name] |
| 6 | Quality | Verifies open source license obligations when distributing supplied software. | Understanding of software development processes Basic knowledge of open source license compliance Understanding of open source policy Basic knowledge of open source licenses | Quality Assurance Team | [Name] |
| 7 | OSRB (Open Source Review Board) | Establishes and improves policies and processes for open source management. | Expertise in open source policy and process Experience operating a deliberative body | OSRB | [Name] |
| 8 | OSPO (Open Source Program Office) | Supports contributions to external open source projects and open sourcing of in-house projects. | Experience participating in open source communities Ability to manage open source projects | OSPO | [Name] |