Johan Toverland Thelin

Johan Toverland Thelin

The OSPO, Open Source Program Office, guides your organisation in the software supply chain. The purpose is to provide clear policies and processes for software in-take, but also to ensure that the software developed is compliant. This has always been important, but is extra relevant today because of CRA.

In this talk, Johan exemplifies the scope of an OSPO, highlights common pitfalls and discusses where the community lives.

Open Source Security Foundation
OWASP Foundation
Open regulatory compliance working group (ORCWG.ORG)