The challenge of OSS present and future perspectives of the IT governance process

Transcription

1 The challenge of OSS present and future perspectives of the IT governance process OWF 2010 Paris Oliver Fendt, Program Manager Open Source Platforms Tel.: Oliver Fendt, Program Open Source Platforms Siemens AG, Corporate Technology

2 Agenda Ways to integrate OSS Potential approach Conclusion Oliver Fendt, Program Open Source Platforms Siemens AG, Corporate Technology

3 Disclaimer This is not legal advice. If you have doubts consult a legal advisor. The statements here are the authors personal opinion and may not reflect the official company opinion Oliver Fendt, Program Open Source Platforms Siemens AG, Corporate Technology

4 Main Processes Affected by OSS Governance Product development process Define Realize Commercialize /Operate Phase out New mandatory deliverables to reach milestones OSS governance & compliance New selection criterias Recruiting process New mandatory deliverables and selection criterias OEM/Supplier selection process Aquision due diligence process Oliver Fendt, Program Open Source Platforms Siemens AG, Corporate Technology

5 Potential Ways how OSS can be Integrated in Products Developers Consultants Offshored R&D departements OEM Software vendors whole package, copy & paste functions, modified functions, scripts icons, graphics etc. Instrumentation not removed Tools Product development Test & debug tools copies itself into product Legally correct? maintainable? Product Customer Supplier OSS Policy use all commercially reasonable efforts to disclose to X in writing the existence of Third Party Code that is included in y will not provide to X any Enhancements of the Licensed Software that include any of the following types of Third Party Code, unless X has approved,, their inclusion in advance in writing: Software licensed under the "GPL" "LGPL, "MPL" Oliver Fendt, Program Open Source Platforms Siemens AG, Corporate Technology

6 To use OSS Correctly and Efficiently Define a strategy: how to deal with OSS how to deal with the communities OSS Strategy Make it known Define the processes according to the strategy Make them known & used Establish control mechanisms to verify that the processes are followed Apply them Educate the employees Oliver Fendt, Program Open Source Platforms Siemens AG, Corporate Technology

7 Todays Potential Development Process Requirements Engineering Analyze Design Implement Test Integrate System Test OSS package request OSS package clearing Clearing result source code scan sourcecode scan result product Verify all (legal) NFRs verification report Potential tools Fossology ProtexIP Blackduck Check lists Oliver Fendt, Program Open Source Platforms Siemens AG, Corporate Technology

8 Potential Workflow and Future Tool Support of OSS Governance in Product Development Internet Security vulnerability data bases & other information Request phase Actors Source Code Evaluation/clearing phase Use phase Project leader OSS clearing team developer Project leader Tools Internal website Workflow engine Data base & source code rep. License Analyser (Fossology) License to NFR mapper Product OSS source code collector Product OSS documentation generator Oliver Fendt, Program Open Source Platforms Siemens AG, Corporate Technology

9 Conclusion Using OSS or not using OSS is the question The answer has to be given by the management Using OSS correctly and efficiently is a question of Processes and training Using OSS is a worthwhile investment OSS does not come for free - it costs time and money Oliver Fendt, Program Open Source Platforms Siemens AG, Corporate Technology

10 Conclusion Incorporating OSS in products is not a decision to be taken on the fly OSS has to be handled as OEM Software OSS add Non-functional requirements to the product, they have to be tracked and verified like any other requirement it has to be planned, managed and controlled Oliver Fendt, Program Open Source Platforms Siemens AG, Corporate Technology

11 And finally Thank you Oliver Fendt, Program Open Source Platforms Siemens AG, Corporate Technology