OpenChain x OSPOlogy Prague
October 6, 2026
Join us for OpenChain x OSPOlogy Prague, a full-day community event to help establish and incubate a stronger local and regional community around open source management, open source supply chain trust, and cybersecurity readiness
Taking place one day before Open Source Summit Europe Prague and hosted at the Deloitte Office Prague, this event brings together the OpenChain, TODO Group, CHAOSS community, and local communities working across AI, cybersecurity, CRA, NIS2, software supply chain risk, open source business impact measurement, and organizational open source management
The event is designed for software supply chain security, procurement, and supplier risk professionals, OSPO leaders, engineering teams, SMEs, public sector stakeholders, and local practitioners who are looking for peer support and practical knowledge sharing
Registration is free, and capacity is limited to approximately 80 participants. Seats will be allocated on a first-come, first-served basis. Please note this is an on-site-only event.
Venue Address: Churchill I, Italská 2581/67, 120 00 Prague 2, Czechia
Event Themes
Open Source in Digital Infrastructure
Measuring Open Source Business Impact
The Evolving Role of OSPOs and Managers
Open Source in AI Infrastructure
Software Supply Chain Trust
Speakers
Ana Jiménez
Project Manager & AAIF Ambassador
PyTorch Foundation, The Linux Foundation
Ayumi Watanabe
Chief OSS Specialist
Hitachi OSPO
Bogomil Shopov
Human. Hacker. Artist.
imagenotfound.art
David Walter
Vice President, Open Source Program Office
Kiteworks / ownCloud
Dawn Foster
Open Source Strategy Consultant & TODO Group Ambassador
CHAOSS
Gergely Csatari
Senior Open Source Specialist
Nokia
Helio Chissini de Castro
Open Source Process Lead
CARIAD
Keisuke Takase
OpenChain’s Automotive SBOM Contributor
Toyota
Marc-Etienne Vargenau
Senior Specialist Open Source
Nokia
Marcel Kurzmann
Open Source and Software Management Consultant
Bosch Digital
Mary (Meixia) Wang
Executive Director
OpenChain Project, The Linux Foundation
Nithya Ruff
Chair of the Board of Directors
The Linux Foundation
Masato Endo
Group Manager
Toyota OSPO
Philippe Ombredanne
Lead Maintainer
AboutCode
Ummo Schwarting
OpenChain Business Operations Study Group Chair
Deloitte
Program Overview
🎙️ Keynotes & Opening Sessions
Hear from open source leaders and regional practitioners on Open Source as Critical Digital Infrastructure across Europe
🧑🏫 Collaboration Marketplace
Explore real-world practices and tools that support open source supply chain, compliance, and community operation
💬 Workshops
Hands-on discussions and mentor-led sessions designed to work through common challenges
🥂 Social Event
Continue the conversations with peers from across the open source ecosystem in Europe
9:00 - 9:30
Check-In and Morning Coffee
9:30 - 9:40 (10 mins)
Welcome Remarks
Ummo Schwarting (Deloitte), Ana Jiménez (TODO Group), Mary (Meixia) Wang (OpenChain)
9:45 - 10:00 (15 mins)
What ARTivism can teach open source
Bogomil Shopov (imagenotfound.art)
10:05 - 10:45 (40 mins)
Operational Compliance in Open Source: The OpenChain Business Operations
Ummo Schwarting (Deloitte)
Marcel Kurzmann (Bosch)
Mary (Meixia) Wang (OpenChain)
10:45 - 10:55 (5 mins)
Break
10:55 - 11:40 (40 mins)
A Living Framework for Automotive SBOMs
Masato Endo (Toyota)
Ayumi Watanabe (Hitachi)
Keisuke Takase
Mary (Meixia) Wang (OpenChain)
11:45 - 12:05 (20 mins)
CISA 2026 Minimum Elements in practice
Marc-Etienne Vargenau (Nokia)
12:10 - 13:00 (50 mins)
Lunch
AFTERNOON KEYNOTE SESSIONS
13:05 - 13:20 (15 mins)
KEYNOTE SESSION - OSPOs and Open Technology
Nithya Ruff (Linux Foundation Governing Board Member)
13:25 - 13:40 (15 mins)
Break
ROUNDTABLE DISCUSSIONS & WORKSHOPS
13:40 - 14:40 (60 mins)
Attendees will be able to choose between two parallel roundtable discussions (Group A, Group B, Group C).
[GROUP A] How an OSPO should prepare for CRA?
MENTOR: Gergely Csatari (Nokia)
Room: Main
[GROUP B] Strategic Approach to Improving your OSPO using CHAOSS
MENTOR: Dawn Foster (TODO Group Ambassador)
Room: Breakout 1
[GROUP C] Community led-discussion
MENTORS: Nikola Babadzhanov (Bosch) and Gourav Tandon (Source Code Control)
Room: Breakout 2
14:40 - 15:00 (20 mins)
Break
DEMO TOOLING BREAKOUT ROOMS
15:00 15:15 (15 mins)
[Room Main] Agentic AI for OSPOs: Goose + MCP + CHAOSS Security Metrics
Ana Jiménez Santamaría (Agentic AI Foundation Ambassador)
[Room Breakout] Bring Your Own Mapping Rules: Cross-Standard SBOM Validation
Rakesh Prabhakaran (Bosch)
15:20 15:40 (20 mins)
The missing link on SCA analysis
Helio Chissini de Castro (Cariad SE)
15:45 - 16: 05 (20 mins)
Sharing is caring: Open data for open source compliance
Philippe Ombredanne (AboutCode)
16: 10 - 16:20 (20 mins)
Break
16: 25 - 16:45 (20 mins)
Two Forks and a CLA-to-DCO Rewrite: What Actually Rebuilds Community Trust
David Walter (ownCloud; A Kiteworks Company)
16: 55 - 17:10 (15 mins)
Closing Remarks
Gourav Tandon (Source Code Control)
17: 10 - 18:00
Heading to Social Event
18:00 - 21:00
Social event & dinner (Sponsored by Source Code Control)
Venue: Bottom Bar, Spravovna
Address: Ondříčkova 1029/1, 130 00 Praha 3–Žižkov, Czechia
This event is intended for practitioners and stakeholders involved in open source management within organizations, including:
- Software supply chain and procurement professionals
- Open source legal and compliance professionals
- Cybersecurity and vulnerability management teams
- SMEs looking for practical open source governance and compliance support
- OSPO leaders and open source program managers
- Organizations building, exploring, or improving an OSPO
- Engineering, platform and DevRel teams
- Public sector organizations working on open source strategy, procurement, or digital infrastructure
- Academic and research organizations working with open source
- Maintainers and ambassadors from local communities in Prague, Czechia, and the wider European ecosystem
