Strategic – Efficient – Compliant
The world runs on Open Source Software (OSS) – from consumer electronics, household appliances and medical technology, to automobiles and production lines to enterprise IT and mobile services. Especially emerging technologies such as Cloud Computing, Internet of Things (IoT), Blockchain, Artificial Intelligence (AI) and Robot Process Automation (RPA) are massively built on Open Source Software.
You can only keep pace with the progressive digitalisation of products and services and the increasing importance of disruptive technologies with an effective and efficient Open Source Software management. By this, you empower but also govern the use, creation and contribution of OSS. An efficient Open Source Management Framework as well as the use of appropriate toolchains such as, Software Composition Analysis (SCA) and Software Asset Management (SAM) are state of the art. Among other things, these factors influence the OSS Maturity level of a company and position it in competition.
“For digitalisation and keeping pace with latest developments of services and products mature, enablement and compliance of Open Source Software is key to survive! Our mission is to shape, enrich and enable your digital future through Open Source Software!”
Through the targeted use of OSS you can save costs and development capacities, at the same time participate in the latest developments, help set standards and become less dependent on software manufacturers. However, it is important to ensure open source compliance for software licenses to avoid unintentional license violations, which could lead to financial, continuity and reputational risks.
Have you seized the opportunities that Open Source Software offers your company and adequately mitigated the risks? Do you have the OSS compliance of your (software) suppliers under control?
Drive your digital future through open innovation
Become sovereign in your software use
Cost and Time Savings
Support and continued development
Legal Risk to Intellectual Property through license obligations
Security Risk and Vulnerability in Software Supply Chains
Compliance requirements in business relations
Rolling out a fully integrated Open Source Management Framework enables leveraging the advantage of OSS chances and benefits for your organisation, employees and digitalisation endeavors, while effectively managing the inherent risk of security and compliance.
At PwC we provide tailored services to encompass and serve all dimensions of the Open Source Management Framework.
Some Open Source Compliance Management System experience a massive backlog of curation, clearing, and approval activities, caused by inefficient processes and lack of resources. Solving these problems PwC consults you on your already established Management System regarding the optimisation of workflows, introducing risk-based approvals, use case driven reuse, lean processes, and tailored tooling.
Open Source Software usage exposes you to security risks as every other software does. Knowing which Open Source Software components are used and build into, and distributed with your device or solution is key for identification of related security risks. Security risk may range from quality flaws in the code and CVEs, to business continuity risk of OSS projects, or infiltration for components with unclear provenance.
Not using Open Source Software or using it unmanaged not only cuts off from tremendous benefits of OSS but also imposes risks, which can be mitigated with a clear OSS strategy and management system. To bring your Open Source Software interaction on track, PwC provides all the necessary help for developing a solid strategy to build upon.
Having an Open Source Strategy and Policy does not unfold its maximum potential if it is poorly implemented. Benefit from the experience of PwC experts to successfully implement an Open Source Program starting from zero to a fully functional cross-division Management System including all necessary processes and tools.
Inner Source, the application of Open Source software methodologies and culture within an organisation, leads to the unleashing of the great potential of cross-organisational collaboration, reuse, interdisciplinary excellence, quality, commitment, and motivation. PwC helps to analyse, plan, develop and rollout your individual strategy towards Inner Source. But it’s not that simple. Who owns the source-code cross-entity developers contribute? What about transfer pricing, security, and corporate espionage?
Complying with the global industry standard on Open Source Compliance Management, ISO 5230:2020 is a demanded selling point for your business as companies worldwide adopt ISO 5230. PwC as the global third-party certifier for ISO 5230 can audit your OSS practices and issues certificates to proof your compliance.
To be best prepared for an ISO 5230 certification PwC offers readiness support and assessments before certification. Learning from the expert knowledge of PwC through a dry-run assessment and qualified feedback and benchmarking on the status of your Open Source Compliance Management Program increases your speed of optimisation and gives you peace of mind for an upcoming certification.
In almost every Deal and M&A, software is included in the key assets, if it is not the key asset itself. Open Source Software poses a high risk to the deal’s value, the usability and business-continuity of transferred assets, whether this be physical devices, software, or services. PwC audits and analysis deals’ assets to identify, value, and report these OSS risks.
Knowing your suppliers’ OSS Compliance Management maturity is key to reduce internal efforts and avoid double checking external code and compliance artefacts.
Reduce the need for internal resources, knowledge and tools for code scanning and achieve professional and compliant SBOMs for your products and solutions.
Using your suppliers' SBOMs can drastically reduce the internal effort required to check incoming code. We check the correctness and completeness of your suppliers' SBOMs so you can trust them.
Benefit from first-hand experience of industry experts through OSS Process and Compliance Trainings tailored to your employees’ specific needs.
Knowing your suppliers’ OSS Compliance Management maturity is key to reduce internal efforts and avoid double checking external code and compliance artefacts.
Access to cutting-edge OSS industry knowledge on Open Source programs can be your answer to the war of talent and the lack of in-house expertise and capacity.
“On basis of a mature Open Source Software strategy, you can set up the right compliance measures and enabling processes. The aim is to embrace OSS while building trust in its use – internally and with your suppliers.”
Marcel Scholze
Director Open Source Software Services & IT Sourcing, PwC Germany
Tel: +49 69 9585-1746
