Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Introduction to Open Source Software (OSS) Governance
- Defining OSS and its strategic role in enterprise settings
- Assessing the benefits and potential risks of OSS adoption
- Reviewing case studies of both successful and unsuccessful OSS implementations
Developing an OSS Policy
- Core elements of an OSS governance framework
- Defining roles and responsibilities in OSS management
- Striking a balance between fostering innovation and managing risk
Navigating Licensing and Compliance
- Understanding common open-source licenses and associated obligations
- Managing license compatibility effectively
- Preventing inadvertent license violations
Software Bill of Materials (SBOM)
- The definition of an SBOM and its critical importance
- Processes for creating and maintaining an SBOM
- Compliance with industry standards and regulatory mandates
Software Composition Analysis (SCA) Tools
- Key features and capabilities of SCA tools
- Integrating SCA into CI/CD pipelines
- Identifying and remediating vulnerabilities
Security and Risk Management in OSS
- Monitoring OSS supply chains for emerging threats
- Strategies for responding to OSS vulnerabilities
- Best practices for effective patch management
Implementing OSS Governance Operations
- Integrating OSS governance into broader IT operations
- Establishing continuous monitoring and reporting mechanisms
- Cultivating an organizational culture of responsible OSS usage
Summary and Recommended Next Steps
Requirements
- A solid grasp of software development workflows
- Background in project or IT management
- Knowledge of security and compliance standards
Target Audience
- IT Managers
- Security and Compliance Specialists
- Leads of Software Development Teams
Testimonials (2)
The trainer was helpful..
Attila - Lifial
Course - Compliance and the Management of Compliance Risk
Speed of response and communication