This talk explored the process of building and deploying the first Linux Foundation ISO standard in fourteen years, highlighting both what has changed since we deployed Linux Standard Base, and why formal standardization is a topic that will increasingly be on your radar. The discussion will be primarily focused on OpenChain, the industry standard for open source compliance, and how collaboration with the Joint Development Foundation allowed a transformation from de facto into formal standard in a timescale that suits open source development. The lessons learned are applicable to any projects building out specifications or code that seek worldwide, sustainable adoption across multiple industries, and the presentation will include an explanation of how Linux Foundation and Joint Development Foundation are ready to support that process today.

1. Open Source in ISO: Building the First LF Standard in
Fourteen Years and What It Means for You

2. Context
2
1400+
Members From
41 Countries
80%
of Fortune 100
Tech & Telecom
35,000+
Developers
Contributing Code
170+
Open Source
Projects
$16B
Shared
Value
This is the Linux Foundation

3. OpenChain Platinum Member Companies
3

4. The OpenChain Project defines the key requirements of
a quality open source compliance program.

5. outbound
upstream downstream
inbound
Training
Policy
Process
OpenChain Defines Inflection Points

6. Result: Predictable B2B Compliance Activity

8. • Main List (3,700+ participants)
• GitHub (105+ participants)
• Automotive (115+ participants)
• Reference Tooling (160+ participants)
• China (105+ participants)
• Japan (190+ participants)
• Korea (40+ participants)
• Taiwan (40+ participants)
• India (40+ participants)
• Germany (30+ participants)
Work Groups + Lists + GitHub

9. Our Online Self-Certification Questionnaire

10. The OpenChain standard can be met by:
Self-Certification
Independent Compliance Assessment
Third Party Certification
Freedom of Choice for Customers and Suppliers

11. Global Third-Party Certification

12. 12
Example Conformant Organizations

13. How do we take it to the next level? Formal Standard.

14. Why? Procurement people. Sales people. Workflow.

15. OpenChain in ISO – Formal Standardization
The OpenChain Project has submitted our specification to ISO via
Publicly Available Specification (PAS) in Joint Technical Committee 1
(JTC-1). The ISO submission is available at:
• https://wiki.linuxfoundation.org/_media/openchain/openchainsp
ec-2.1.draft.pdf
Working in partnership with in partnership with Joint Development
Foundation we expect to become a formal standard in Q3 2020.

16. What was our secret sauce to make this happen?

17. The Joint Development Foundation provides the
corporate and legal infrastructure to enable groups to
quickly establish and operate lightweight
collaborations to develop technical specifications,
standards, and source code.
https://www.jointdevelopment.org
Joint Development Foundation

18. tl;dr:
JDF is a way to go from de-facto to formal standard
Joint Development Foundation

19. Standardization Workflow
Idea Draft ISO Draft ISO/IEC JTC1 Submission

20. You can build a spec on GitHub
https://github.com/CommunitySpecification/1.0
Spec in a Box

21. OpenChain is run by user companies for user
companies. This companies are collaborating to create
clear, shared and effective approaches to managing
open source code.

22. 22
Comprehensive Reference Material

23. Be Part of This
Join our community:
https://www.openchainproject.org/get-started
Self-Certify or Health Check an organization:
https://certification.openchainproject.org

24. Want to Make Your Own Standard?
Contact JDF:
https://www.jointdevelopment.org

25. scoughlan@linuxfoundation.org
www.openchainproject.org