Open Compliance Summit 2024

This session introduces OSS-Rules, an open framework by Amazon to standardize and automate Open Source Compliance at scale. It features configurations and business rules for Third-Party Package Curation, Open Source License Assessment, Package Inventory, and Package Guidance. Speakers will discuss the challenges large organizations face in implementing Open Source Compliance Standards at scale and how a federated model with decentralized knowledge and shared practices can help overcome obstacles and speed up adoption. The talk will showcase how OSS-Rules' programmatic rules and configurations can integrate various processes and tools into an automated compliance system, allowing compliance engineers to benchmark tools based on expected outputs. The evolution of a governance model with standard compliance engineering methodologies and shared knowledge as programmatic rules is the foundation for the next generation of risk assessment. Attendees will learn how OSS-Rules can help automate compliance processes and share best practices, including knowledge related to programming language packages, making Open Source license compliance more efficient, auditable, and scalable.