<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Awareness on OpenChain KWG</title><link>https://korea-wg.openchainproject.org/en/tags/awareness/</link><description>Recent content in Awareness on OpenChain KWG</description><generator>Hugo</generator><language>en</language><atom:link href="https://korea-wg.openchainproject.org/en/tags/awareness/index.xml" rel="self" type="application/rss+xml"/><item><title>§3.1.3 Awareness</title><link>https://korea-wg.openchainproject.org/en/guide/iso5230_guide/1-program-foundation/3-awareness/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://korea-wg.openchainproject.org/en/guide/iso5230_guide/1-program-foundation/3-awareness/</guid><description>&lt;h2 id="1-clause-overview"&gt;1. Clause Overview&lt;/h2&gt;&#10;&lt;p&gt;Even participants with the right roles and competencies will only participate in a perfunctory manner&#10;if they do not understand the purpose of the open source program and the meaning of their own contribution&#10;to the overall compliance framework. §3.1.3 requires the organization to evaluate and record that Program&#10;Participants actually understand the program&amp;rsquo;s objectives, how they contribute, and the consequences of&#10;failing to follow the program&amp;rsquo;s requirements. This clause is the next step after §3.1.2 Competence&#10;(possessing knowledge and skills), forming the practical motivation by connecting the competence&#10;participants hold to the program&amp;rsquo;s purpose.&lt;/p&gt;</description></item><item><title>§4.1.3 Awareness</title><link>https://korea-wg.openchainproject.org/en/guide/iso18974_guide/1-program-foundation/3-awareness/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://korea-wg.openchainproject.org/en/guide/iso18974_guide/1-program-foundation/3-awareness/</guid><description>&lt;h2 id="1-clause-overview"&gt;1. Clause Overview&lt;/h2&gt;&#10;&lt;p&gt;§4.1.3 has the same Verification Material structure as ISO/IEC 5230 §3.1.3 (Awareness). It requires that awareness of program objectives, how individuals contribute to the program, and the implications of non-compliance be assessed and recorded for Program Participants. The difference from 5230 is that the &lt;strong&gt;focus of the awareness assessment shifts to Security Assurance&lt;/strong&gt;. Participants must be aware not only of license compliance but also of the vulnerability management process, CVD procedures, and CVSS-based response criteria.&lt;/p&gt;</description></item></channel></rss>