OpenChain’s Strategic Direction for 2027 in Global Practices
summary
OpenChain maintains ISO 5230 and ISO 18974 as its baseline, governed by 25 board members and adopted by 100+ companies, and delivers concrete tools: SPDX and CycloneDX for SBOM records, an automotive SBOM framework 1.0 (Toyota‑driven) due in October, and a tooling-friendly mapping from the EU Cyber Resilience Act into a CRA checklist PA1–PA5 for engineers. Active work groups produce a 10‑pillar AI SBOM/compliance program, regionally running Korea/India/Japan teams and publicly hosted docs on GitHub for immediate review and contribution.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 3:23OpenChain’s past decade
- 8:11OpenChain compliance challenges
- 12:29EU Cyber Resilience Act role
- 17:16AI compliance management
- 24:14SBOM resources and standards
- 26:22Staying updated with OpenChain
- 31:11Q&A
related talks
33mHow OpenChain Became The International Standard for Compliance
29mTrusted Supply Chains - How OpenChain Makes a Difference in a...
32mExpanding the OpenChain Standards Portfolio - More Sister Standards?
42mOpen Source Compliance Management - Removing the Thorn from...
38mPanel: Open Source Management Based on Open Source
17mUnderstanding How OpenChain ISO/IEC 5230 and ISO/IEC 18974 Support InnerSource
36mUsing OpenChain for IP Management
16mOpen Source Consumption/ Adoption Manifesto