Tag Archives: open source governance

Part 3: How Your Software Is Like a Car – Bad Parts Make for Bad Software


May 14, 2014 By
Wayne Jackson
Component Complexity

In part two of my blog ‘A Closer Look at Today’s Software Supply Chain’, I discussed why human-speed supply chain management can’t keep pace with today’s agile software development practices and why high quality software components are not simply a given. In this final segment, I will share a real world story on how thousands of organizations sourced one “bad part” named Bouncy Castle in 2013.

Continue reading...

The Tipping Point: Human Speed vs. Machine Speed


March 5, 2014 By
Derek Weeks
Component Downloads

What can the financial services industry learn from the U.S. Department of Homeland Security? In this third segment of my blog series on open source component security as it relates to the recently updated Financial Services Information Sharing and Analysis Center (FS-ISAC) guidelines, I explore the need for speed: humans vs. machines.

Continue reading...

Secure From the Start: Combining Open Source Policies, Practice & Tools


February 26, 2014 By
Derek Weeks
Securing from the Start

In short, open source security can’t be an after thought. Security isn’t only the responsibility of ‘security professionals’ but instead a shared responsibility for all parties involved in developing or managing an organization’s software supply chain. Better put in the FS-ISAC guidelines…

Continue reading...

Financial Services Organizations have Open Eyes on Open Source


February 20, 2014 By
Derek Weeks
Open Eyes on Open Source

Let me open your eyes to a tidal wave of change that has already flooded the development organizations across Financial Services and other industries: “Software applications are no longer coded from scratch. They are assembled from building blocks — commonly known as open source components.” This is not a prediction about a tidal wave to […]

Continue reading...