Tags: compliance

Open Compliance Summit

The Open Compliance Summit is held annually in Yokohama, Japan. It provides an excellent opportunity for Linux Foundation Members in the APAC region to share knowledge around open source compliance matters and to build connections that streamline interactions between companies of all sizes in all...
Read 0 Comments

Why You Need To Understand Your Software Supply Chain

Every company uses software, obviously. There isn’t a technology industry keynote that passes without a besuited evangelist telling us that ‘every business is a technology business’ – and they may even pepper in the old ‘hey Uber has no cars, Amazon has no bookstores’ chestnut if they really want...
Read 0 Comments

screen_shot_2018-08-27_at_4.19.59_pm.jpg

SPDX
SPDX License Identifiers can be used to indicate relevant license information at any level, from package to the source code file level.

Solving License Compliance at the Source: Adding SPDX License IDs

Accurately identifying the license for open source software is important for license compliance. However, determining the license can sometimes be difficult due to a lack of information or ambiguous information. Even when there is some licensing information present, a lack of consistent ways of...
Read 0 Comments

How VMware Manages Open Source Code and Compliance

VMware is an active member of the open-source community, contributing its efforts to multiple projects and organizations. Helping to organize and lead VMware's open-source initiatives is the company's chief open source officer, Dirk Hohndel. In a video interview with eWEEK, Hohndel explains where...
Read 0 Comments

Compliance is Not Synonymous With Security

Along with the clear benefits to be gained from upholding the standards enforced by GDPR, PCI DSS, HIPAA, and other regulatory bodies often comes a shift toward a more compliance-centric security approach. But regardless of industry or regulatory body, achieving and maintaining compliance should...
Read 0 Comments

​ICANN Makes Last Minute WHOIS Changes to Address GDPR Requirements

The Board of Directors of the Internet Corporation for Assigned Names and Numbers (ICANN) struggled and sweated and with days left came up with a way to make the Domain Name System (DNS) and WHOIS, the master database of who owns what website name, compliant with the European Union (EU)'s General...
Read 0 Comments

fossology-2018.jpg

Fossology
To help celebrate Fossology’s 10th anniversary, we look at how the project makes it easier to understand and comply with open source licenses.

FOSSology Turns 10 – A Decade of Highlights

FOSSology turns ten this year. Far from winding down, the open source license compliance project is still going strong. The interest in the project among its thriving community has not dampened in the least, and regular contributions and cross-project contributors are steering it toward productive...
Read 0 Comments

open-source-compliance.jpg

compliance
The key to open source compliance is knowing what’s in your code, right down to the exact versions of the components, says Ibrahim Haddad.

Good Compliance Practices Are Good Engineering Practices

Ibrahim Haddad: It is true that open source software has to a large extent simplified the process of software procurement. The traditional procurement model for proprietary software has always been heavy on the front end, as it involves trial and evaluation, negotiation related to possible...
Read 0 Comments

License Scanning and Compliance for FOSS Projects: A Free Publication

Modern open source projects rarely consist solely of all new code, written entirely from scratch. More often, they are built from many sources. And, each of these original sources may operate under a particular license – which may also differ from the license that the new project uses. A new...
Read 0 Comments

Automated Compliance Testing with InSpec

Those who have been involved in converting a home-grown system to one in which strict compliance rules are observed knows the pain involved. Whereas previously a laissez-faire atmosphere ruled the day, all of a sudden, a rigid structure with many requirements and conditions regulate the...
Read 0 Comments

Pages

Click Here!