Business Reviewers within Enterprise Compliance Systems
summary
Microsoft builds an automated internal compliance system tied to the open data project ClearlyDefined and uses license/usage decision logic to auto-approve low-risk components while routing a small fraction for human judgment. Corporate VPs nominate business reviewers who must complete a gated training, receive badges, and get support from an internal champs community. The program redistributes review work, reduces central bottlenecks, and Microsoft reports meaningful efficiency gains from focusing people on the highest-risk cases.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 0:51Open Source
- 3:07Open Source Philosophy
- 5:39Internal Compliance System
- 6:59Open Source Data
- 8:07Clearly Defined
- 9:09Business Decisions
- 10:47Business Logic
- 14:47Philosophical Change
- 16:37Business Reviewers
- 20:55Training
- 21:56Review
- 22:38Support
related talks
14mOpen Source as a Compliance Enabler
33mNavigating Compliance: What Developers Can Learn From Driving
44m7 Things you can Learn from Microsoft's Open Source Experience
33mORT Automate compliance using Open Source & InnerSource
15mShifting Open Source Compliance Activities Left
23mAdventures in Vendor Security and Continuous Review
18mExploration of Compliance Governance Based on Operating Systems
32mAutomating Open-Source License Compliance