Join the first in-person Workshop to help organizations effectively implement Open Source Program Offices (OSPOs) based on specific region needs in Europe. October's Ospology.live is hosted by OSPO at Ericsson and co-organized with TODO, OpenChain, SPDX, CHAOSS and OpenSSF projects.

📝 AGENDA - October 19

[9:00 - 9:20] Light breakfast and Welcome

Keynotes

[9:20 - 9:50] OSPOs in European Telecom companies - Jimmy Ahlberg (Ericsson)

[9:50 - 10:20] How can an OSPO advocate for Open Source Security? - Georg Kunz (Ericsson)

[10:20 - 10:45] Break

Community Presentations

[10:45 - 11:30]  How to Develop Secure Software & How OpenSSF Can Help You - David A. Wheeler (OpenSSF)

[11:30 - 12:15] OpenChain telco group, aligning an industry around SBoM requirements - Shane Coughlan (OpenChain)

[12:15 - 13:45] Lunch

[13:45 - 14:30] TODO: An introduction to the 5-stage OSPO model: what to cover within the legal-driven initial stage - Ana Jiménez (TODO Group)

[14:30 - 15:15] CHAOSS: Metrics models for OSPOs and Case Study of Using CHAOSS metrics - Sean Goggins, Dawn Foster, and Daniel Izquierdo (CHAOSS)

[15:15 - 15:30] Break

[15:30 - 16:15] How as an OSPO you can generate SPDX for your organization’s software releases - Thomas Steenbergen (EPAM)

[16:15 - 17:00] What to Share, When, and Where: Creating a Distributed and Efficient Contribution Process While Balancing Value and Risk - Johan Linåker (RISE Research Institutes of Sweden)

[17:00 - 17:30] Prep for day 2

[17:30] Depart for evening social

📝 AGENDA - October 20

[9:00 - 9:30] Welcoming & Ice breaking

[9:30 - 10:20] Vote for topics (participant-driven meeting)

[ 10:20 - 10:30] Break

Move Into Roundtables

[10:30 - 11:30] Roundtable Session 1 (multiple parallel sessions)

[11:30 - 12:30] Roundtable Session 2 (multiple parallel sessions)

[12:30 - 14:00] Lunch

[14:00 -15:00] Share learnings /input from the Roundtable session

[15:00] Adjourn

* Please note that all session times are in Central European Time (UTC+01:00)