Evolving Open Source Governance From Compliance To Program Offices: The LGE Case Study
summary
Fifteen years of work moves LGE from ad hoc license checks to a company-wide OSPO that automates compliance and vulnerability tracking, claims internal rollout across business divisions, and wins OpenChain conformance in 2019. Built and deployed an all‑in‑one compliance system and public distro site, plus the prostrate scanner (dependency, source and binary scanners, Android/Octo variants) and the post-right hub (BOM, license review, vulnerability alerts and publishable notices), prompted by the 2009 BusyBox litigation, with quarterly training and measurable reduction in missed notices.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 0:33Who am I
- 1:55Open Source Story
- 9:00Open Source Compliance Process
- 16:49PostRight Open Source
- 17:24PostRight Guide
- 24:54Open Source Program Office
related talks
18mExploration of Compliance Governance Based on Operating Systems
28mGoverning Open Source in the Enterprise: OSPO Strategies for Innovation and Compliance
44mOpen Source Practice of LG Electronics
38mHow We Navigate an Open Source Compliance and Contribution in a S...
02mShares Views on Open Compliance
38mPanel: Open Source Management Based on Open Source
15mShifting Open Source Compliance Activities Left
26mNavigating Open Source: Establishing an OSPO for Organizational Success