Open Source Summit North America 2023

OSPOs are typically responsible for implementing and enforcing policies and procedures related to the consumption and production of OSS. We believe this existing framework can be extended into the security realm to work with OSS developers and vendors to ensure that their products meet security standards and to conduct regular audits and assessments of the OSS supply chain to identify and mitigate vulnerabilities. This presentation will explore the challenges facing the OSS supply chain and the ways in which OSPOs are uniquely suited to help address them. Additionally, OSPOs can be effective advocates for OSS supply chain security policies in both the government and private sectors. We will share how Intel’s OSPO is working effectively with other groups to define and implement these policies.