Panel Discussion: A New Era: Emerging and Evolving OSPOs
summary
Survey finds 23 orgs ≤50 people among respondents and a measurable drop in companies contributing upstream, while adoption spreads into hospitals, universities and governments. Organizations build license-detection and compliance tooling that auto-identifies components in builds, publish ClearlyDefined data and adopt the OpenChain process to prove compliance. Barriers include developer fear, the upfront time to upstream patches and hidden cost of remaining on forked versions; security teams often provide the necessary leverage to drive remediation.
AI-written summary · about
chapters (8)
- 0:00Start
- 3:55What Stood Out for You for the Survey
- 5:29What Stood Out for You from the Survey
- 12:21Open Source Efforts
- 26:26Advice To Help People Convince Their Management that They Should Be Contributing to some of these Open Source Projects
- 27:23Open Source Workshops at Microsoft
- 45:33Final Thoughts Last Words
- 48:46Thank You to the Audience
related talks
34mSupply Chain Security, SBOMs and How OSPOs Can Play An Important Role Going Forward - An Ecosystem and Compliance Update
28mGoverning Open Source in the Enterprise: OSPO Strategies for Innovation and Compliance
24mThe Challenge to Build a Distributed OSPO
39mOSPOs in Energy, Transport, Automotive & Public Sector
32mOSPOs: Key Lever for Open Source Sustainability
31mThe State of OSPOs in Asia 2023
19mOSP0s and Open Technology - Nithya Ruff, Amazon
25mThe State of OSPOs and OSS Management 2025 Research Findings by TODO Group