… The four main tasks of an OSPO include policy development, facilitating upstream contributions, advocating for open source software usage, and managing legal risk. Policy Development Policy development is the core responsibility of an OSPO. …
… Failure to do so could result in legal and practical challenges down the line. …
… It’s an important topic, and there are challenges unique to open source as a developer and as a user. What are the supply chain challenges can the OSPO help address? …
… We work with the policy team to provide input on open source security in policy documents from NIST , CISA , or executive order, weighing in on how we think the government can help secure software supply chains. …