[2024-10-31] TODO General Member & OSPOlogy Touchpoint - Open Office Hours

[anajsana]

Agenda (2024-10-31)

This meeting follows Chatham House Rules. Regular calls are not being recorded and discussions noted during the meeting do not share people's names nor organization affiliation.

• Open Source in Business Collaborative Guide: Presentation Overview (Marcel Kurzmann, Bosch)
  • Group Discussions and Q&A
  • Define workstreams of tasks to work in the GH repo
• Strategic value of OS Management from a Risk Management ROI perspective (Daniel Izquierdo, Bitergia and Ana Jiménez, TODO Group)
  • Group Discussions and Q&A
• Catch up on new community proposals this month: Chapter on Cultural Differences when Approaching OSS

Open Work Hours:

Moderated by TODO Steering Committe Members

This is a free space governed under Chatham House Rules. Please share any questions/pain points you’d like to raise during the call!

Essential Information

• 👩‍🏫 Find the meeting call on our website
• 🕛 Thursday 31, 13:00 - 14:00 pm CET
• 📝 g.doc agenda

Meeting	Frequency	Duration	First 40’	Next 20’	Zoom link
Thursday Touchpoints	Monthly	1 hour	Agenda	Open Office Hours	Here

[anajsana]

Meeting Notes

Initial Motivation for Building the Open Source in Business Guide

• OSPOs/Open Source Managers are losing support from management due to a lack of understanding around policies and processes.
• We need to communicate in a language that resonates with these stakeholders. Shifting to a business perspective to showcase open source as a strategic asset can drive business value
• Goal: Present open source as a strategic tool through real business cases, encouraging long-term investment.
  • Plan to collaborate with other open source leaders to create a whitepaper
  • A 3-minute pitch isn't enough: we need a collaborative space to address this thoroughly

Risk management model - Proposal to include in the OS in Business guide

• Open Compliance Summit Insights: What are lawyers focusing on regarding open source? There's a need to dive into risk management and incorporate it into the "OS in Business" guide.
  • Presentation

Community Feedback and Reactions

• Sector Insight: Similar challenges exist in the energy sector, particularly around open source sustainability
• Business Case Perspectives: It's essential to address diverse aspects of the software supply chain

Other Considerations

• Chapter Suggestions: Consider adding a new chapter on the differences (or lack) between a commercial and business guide for open source.
• Scope of Open Source: This shouldn't be an open source-exclusive discussion
• Ambition Level: Focus on conveying the ambition level upfront, rather than limiting the guide to specific use cases.
• SBOM and Metrics: Shouldn't proprietary software vendors also deliver an SBOM? Additionally, beyond SBOMs, there’s a need for sustainability metrics —not just health metrics

Action Items

• Suggested Chapter Title: "Transparent, Manageable Risks in Open Source vs. Closed Source"
• Action Items:
  • Define steps for the working repository process.
  • Community members to file issues (TBD by Ana).