New OpenChain Security Standard
summary
OpenChain publishes a new process standard for security assurance that has completed ISO ballots completed and already exists as a de facto spec with self-certification material available. It frames “what” for supply-chain security and points implementers to SPDX and SBOMs, with adopters such as LG Electronics and BlackBerry conforming. The standard is positioned as a sister to the license-compliance standard and prompts ongoing revisions and community participation.
AI-written summary · about
related talks
29mOpen Source and ISO Standards - OpenChain and the Future of Compliance
17mUnderstanding How OpenChain ISO/IEC 5230 and ISO/IEC 18974 Support InnerSource
54mHow The LF Standards For License Compliance And Security Will Fix Your Supply Chain
31mTelco Supply Chain Security: Implementing ISO 18974 & SBOM
42mSecuring Software Supply Chains: OpenCode as Building Block for Sovereign Digital Infrastructure
20mUnderstand Why Open Source Process Management Matters To InnerSource
44mNavigating Open Source and Open Standards for Better Cybersecurity
42mA Milestone for Open Source Security: How the Brand New ISO 18974 Certification Looks Like and Why the ISO 5230 Supports as a Stepping Stone