AI Compliance on OpenChain KWG

26th Meeting

Mon, 01 Jan 0001 00:00:00 +0000

Schedule

Date: 2025-06-16 (Mon) 2:00 PM ~ 5:00 PM
Venue: Samsung Electronics Seoul R&D Campus - https://maps.app.goo.gl/ZsQWvnSc5MPXKVcN8

Agenda

Time	Agenda	Speaker	Slide
14:00~14:10	Welcome & Opening	Suhong Park, Samsung Electronics	-
14:10~14:30	OpenChain Global Update	Shane Coughlan, Linux Foundation	pptx
14:30~14:40	OpenChain Korea Update	Haksung Jang, SK Telecom	slide
14:40~15:10	Samsung Electronics Open Source 2025	Darae Ahn, Samsung Electronics	pptx
15:10~15:50	Networking	All	-
15:50~16:20	AI Data Compliance Process	Jungwon Cho, LG AI Research Institute	pdf
16:20~16:50	Lightning Talk - Risks When Using Open AI Models in Enterprises - Changes in Redis Licensing and Its Impact on the Open Source Ecosystem	- Yunhwan Jung, Samsung Electronics - Jungsook Park, ETRI	pptx pdf
16:50~17:00	Closing	-	-

7. AI Compliance

Mon, 01 Jan 0001 00:00:00 +0000

Requirements Covered in This Section

ISO/IEC 42001: §5.2 (AI Policy) · §6.1.2 (AI Risk Assessment) · §7.5 (Documentation) · §8.5 (AI Lifecycle) · §8.6 (AI Data) · §8.8 (External AI Procurement)

AI systems make extensive use of open source frameworks, pre-trained models, and open datasets. Companies that operate an open source management system (ISO/IEC 5230 · 18974) must apply open source compliance principles during the AI system development phase as well. In addition, development environments that leverage AI coding tools (GitHub Copilot, Claude Code, Cursor, etc.) require a new management framework to address license contamination and the introduction of vulnerable packages.

Training Slides

Mon, 01 Jan 0001 00:00:00 +0000

Training Slides

This page provides a training deck covering the full enterprise open source governance process. It reorganizes the Enterprise Open Source Management Guide into a 4-hour training format.

Open in full screen →

Course Structure

Part	Title	Key Topics
Part 0	Introduction	Course objectives · 4-hour roadmap
Part 1	Understanding the Standards	ISO/IEC 5230 · 18974 · 42001 + OpenChain
Part 2	Six Core Elements	Organization · policy · process · tools · training · conformance
Part 3	AI Compliance	Global AI regulations · model licensing · AI SBOM · supply chain security
Part 4	Live Demo	SBOM generation → Dependency-Track → VEX triage
Part 5	Closing	Recap · next steps · Q&A

Slide count: ~99 slides
Estimated duration: 4 hours (Part 3 AI expanded to 75 minutes)
Audience: Enterprise open source compliance officers, legal teams, OSPOs

License

These slides are released under the CC-BY-4.0 license. You are free to use them as internal corporate training materials.

Can I Use a Publicly Available Dataset to Build a Commercial AI Service?

Mon, 14 Feb 2022 00:00:00 +0000

Hello, I’m Haksung Jang.

AI has become such an essential technology in modern business that virtually no company operates without using it. Building an AI service requires large volumes of data, and publicly available datasets are also widely used for this purpose. However, even a publicly available dataset carries copyright, so using it in a commercial AI service requires checking its license to minimize legal risks such as copyright infringement.

AI Compliance on OpenChain KWG

26th Meeting

Schedule

Agenda

Sponsor

7. AI Compliance

Training Slides

Training Slides

Course Structure

License

Can I Use a Publicly Available Dataset to Build a Commercial AI Service?