A Milestone for Open Source Security: How the Brand New ISO 18974 Certification Looks Like and Why the ISO 5230 Supports as a Stepping Stone
Talkat Open Source Summit Europe 2023 · on Thursday, 2023-09-21· at 11:00· Room 3A (Floor 3), Abandoibarra Etorb., 4, 48011 Bilbao, Bizkaia, Spain·
summary
New ISO 18974 defines a compact, auditable open source security management system built around the software bill of materials (SBoM) and mirrors ISO 5230’s program foundation so firms with 5230 work already have a head start but 5230 is not required first. German adoption metrics cited: policies rise from 17% to 32% (2021–2023) and over 100 companies self‑certify 5230. Certification follows ISO 17021 norms: phase‑1 document review, phase‑2 effectiveness checks, SBoM walkthroughs and random sampling. Draft standard awaits official release.
AI-written summary · about
chapters (7)
- 0:00ISO 18974 and ISO 5230 intro
- 3:22ISO 5230 success story
- 7:37ISO 18974 for security
- 16:41ISO 5230 and 18974 synergies
- 20:54ISO certification benefits
- 32:18ISO 18974 future outlook
- 35:39Q&A
related talks
17mUnderstanding How OpenChain ISO/IEC 5230 and ISO/IEC 18974 Support InnerSource
29m3rd-Party Cyber-Risk Mitigation by Using ISO Standards
29mOpen Source and ISO Standards - OpenChain and the Future of Compliance
44mNavigating Open Source and Open Standards for Better Cybersecurity
22mSBOM and Security Transparency - How it all fits together
54mHow The LF Standards For License Compliance And Security Will Fix Your Supply Chain
29mTurn Down That Noise: Why the OpenSSF Security Baseline Is Good for Maintainers
29mWe're All Consumers (And That's Dandy)