OpenChain on OpenChain KWG

0. Exploring OpenChain

Mon, 01 Jan 0001 00:00:00 +0000

1. What is the OpenChain Project?

Software today is growing ever larger and more complex. Developing a single piece of software may involve not only internally developed code but also open source, third-party software, vendor SDKs, and a wide variety of software across the software supply chain.

If even one organization in this complex software supply chain fails to comply with open source license obligations or does not provide accurate open source information, the company ultimately distributing the software will inevitably fail to meet its open source license compliance obligations. This can lead to lawsuits and the suspension of product sales.

ISO/IEC 5230 Conformance Guide

Mon, 01 Jan 0001 00:00:00 +0000

This guide walks through each requirement clause of ISO/IEC 5230 (OpenChain License Compliance) one by one. It explains what verification materials each clause requires, how to comply, and what sample documents can be used directly.

Author : OpenChain Korea Work Group / CC BY 4.0

Target Audience

Open source compliance officers and open source program managers
Personnel at companies preparing for ISO/IEC 5230 certification
Practitioners who want to review their existing open source management framework against ISO standards

How to Use This Guide

Relationship with the Enterprise Open Source Management Guide

The Enterprise Open Source Management Guide explains how to implement open source management in practice (policies, processes, tools, and organization).

This guide (ISO/IEC 5230 Conformance Guide) organizes, clause by clause, what must be demonstrated for certification.

Guide	Focus	When to Use
Enterprise Open Source Management Guide	Practical implementation (How to implement)	When building an open source management framework from scratch
ISO/IEC 5230 Conformance Guide	Verification material criteria by clause (What to prove)	When preparing for certification or conducting a self-assessment

The two guides are complementary. Each clause page provides cross-links to the corresponding section of the Enterprise Open Source Management Guide.

25th Meeting

Mon, 01 Jan 0001 00:00:00 +0000

Schedule

Schedule: 2025-03-25 (Tue) 2:00 PM - 5:00 PM
Location: Korea Digital Certification Association (Yeouido Park One Building Tower 2, 48th floor) - https://maps.app.goo.gl/YnxTkz8LjHPXFJBv6

Agenda

Time	Agenda	Speaker	Slide
14:00~14:10	Welcome & Opening	-	-
14:10~14:30	OpenChain Global Update	Shane Coughlan, Linux Foundation	pptx
14:30~14:50	OpenChain Korea Update	Haksung Jang, SK Telecom	slide
14:50~15:00	Lightning Talk 1 - Open Source Tech Day 2025 Announcement	- Jeong-sook Par, ETRI	pdf
15:00~15:30	Mobile ID application “DID”, open source governance strategy and future tasks?	Mikyoung Lee, Raon Secure	pdf
15:30~16:00	Networking	All	-
16:00~16:30	ISO/IEC 5230:2020 Conformance in KFTC	Daeyeol Ryu, KFTC	pdf(ko)
16:30~17:00	Lightning Talk 2 - 2024 Open Source Settlement that Developers Should Know - Expansion of Open Source User Rights and Importance of Providing LGPL-2.1 Installation Information as Seen in the AVM Litigation - ISO/IEC 18974 Corporate Introduction and Certification Strategy	- Seo-yeon Lee, Line Plus - Haksung Jang, SK Telecom	pdf AVM소송소개 ISO/IEC18974

26th Meeting

Mon, 01 Jan 0001 00:00:00 +0000

Schedule

Date: 2025-06-16 (Mon) 2:00 PM ~ 5:00 PM
Venue: Samsung Electronics Seoul R&D Campus - https://maps.app.goo.gl/ZsQWvnSc5MPXKVcN8

Agenda

Time	Agenda	Speaker	Slide
14:00~14:10	Welcome & Opening	Suhong Park, Samsung Electronics	-
14:10~14:30	OpenChain Global Update	Shane Coughlan, Linux Foundation	pptx
14:30~14:40	OpenChain Korea Update	Haksung Jang, SK Telecom	slide
14:40~15:10	Samsung Electronics Open Source 2025	Darae Ahn, Samsung Electronics	pptx
15:10~15:50	Networking	All	-
15:50~16:20	AI Data Compliance Process	Jungwon Cho, LG AI Research Institute	pdf
16:20~16:50	Lightning Talk - Risks When Using Open AI Models in Enterprises - Changes in Redis Licensing and Its Impact on the Open Source Ecosystem	- Yunhwan Jung, Samsung Electronics - Jungsook Park, ETRI	pptx pdf
16:50~17:00	Closing	-	-

27th Meeting

Mon, 01 Jan 0001 00:00:00 +0000

Schedule

Date: 2025-10-21 (Tue) 3:00 PM - 4:50 PM
Location: Open Source Tech Day 2025, 4F Changjo Room 2 (aT Center - https://maps.app.goo.gl/CcH1kxo8qfQrgp8i8 )

Agenda

Time	Agenda	Speaker	Slide
15:00~15:20	OpenChain Global Update	Shane Coughlan, Linux Foundation	pdf
15:20~15:40	ETRI Open Source Governance Package	Sungkwang Eom, ETRI	pdf
15:40~16:00	FOSSLight 2.0	Kyungseon Min, LG Electronics	pdf
16:00~16:20	Adopting Olive Action	Younghwan Kim, Kakao	pdf
16:20~16:40	What’s new in OSORI	Soim Kim, LG Electronics	pdf
16:40~16:50	Can I contribute to open source with AI-generated code?	Seoyeon Lee, LINE Plus	pdf

28th Meeting

Mon, 01 Jan 0001 00:00:00 +0000

Schedule

Date and Time: December 9, 2025 (Tuesday), 2:00 PM – 4:50 PM
Venue: Hancom Tower (Pangyo - https://maps.app.goo.gl/Nq3XHZtPrg9Zvtzn7)

Agenda

Time	Agenda	Speaker	Slide
14:00~14:05	Welcome & Opening	Jihwan Jeong CTO, Hancom	-
14:05~14:20	OpenChain Update	Haksung Jang, SK Telecom	slide
14:20~14:45	Sharing Hancom’s OpenChain Certification Declaration Preparation	Hyunjoo Ryu, Hancom	pdf
14:45~15:10	Introduction to OpenPDF Data Loader and Tips for Open Source Disclosure Using AI	Bundo Lee, Hancom	pdf
15:10~15:50	Networking (Group Discussion)	All	-
15:50~16:00	Telechips’ OpenChain Certification and Remaining Challenges	Jiyoung Yeon, Telechips	pdf
16:00~16:10	About Cryptography Bill of Materials (CBOM)	Jinyoung Chae, Samsung SDS	-
16:10~16:25	Tooling & Legal Group Major Activities and Review	Wonjae Park, LG Electronics	-
16:25~16:50	2025 Review & Awards	Darae Ahn, Samsung Electronics	slide

29th Meeting

Mon, 01 Jan 0001 00:00:00 +0000

Schedule

Schedule: Tuesday, March 24, 2026, 2:00 PM - 5:00 PM
Location: Line Plus (near Seohyeon Station, Bundang - https://maps.app.goo.gl/8GTPYtRugFRUgGk67)

Agenda

Time	Agenda	Speaker	Slide
14:00~14:10	Welcome & Introduction	Steering Committee	-
14:10~14:30	OpenChain Updates	Steering Committee, Mary Meisia Wang, Executive Director, Linux Foundation	slide
14:30~15:00	Open Compliance Summit 2025 Review	Wonjae Park, LG Electronics	slide
15:00~15:20	Break & Networking	-	-
15:20~15:50	AI License, distinct from Open Source License	Donghyuk Kim, LINE Plus	-
15:50~16:00	OIN Community Activity	Shane Coughlan, OIN	-
16:00~16:50	Group Discussion & Networking	All	-
16:50~17:00	Closing & Group Photo	Steering Committee	-

30th Meeting

Mon, 01 Jan 0001 00:00:00 +0000

30th Meeting

AI Governance and Open Source Compliance in Finance

Practical cases on open source governance in the AI era and audit-readiness checkpoints for the financial sector.

Date 2026-06-09 (Tue) 14:00–17:00 Venue KakaoBank · Parc.1 Tower 2, 35F, Yeouido

Registration is announced via the OpenChain KWG mailing list. Subscribe to receive the sign-up link.

Join the mailing list Open in Google Maps

09 Jun 2026 · Tue

ISO/IEC 18974 Conformance Guide

Mon, 01 Jan 0001 00:00:00 +0000

This guide explains each requirement clause of ISO/IEC 18974 (OpenChain Security Assurance) one by one. It describes what Verification Materials each clause requires, how to comply, and what sample documents can be used immediately.

Author : OpenChain Korea Work Group / CC BY 4.0

Target Audience

Security managers and open source program managers at organizations establishing an open source security assurance framework for the first time
Engineers building open source vulnerability management processes in DevSecOps environments
Organization staff preparing to add ISO/IEC 18974 certification after obtaining ISO/IEC 5230 certification

Relationship with ISO/IEC 5230

ISO/IEC 18974 adds a security layer on top of ISO/IEC 5230

ISO/IEC 5230 (License Compliance) covers the foundational program for systematically managing open source license obligations.

ISO/IEC 18974 (Security Assurance) adds a security layer of vulnerability detection, assessment, and response on top of that foundation. The two standards share core infrastructure such as policy, competence, and SBOM, and 18974 extends and deepens this from a security perspective.

Category	ISO/IEC 5230	ISO/IEC 18974
Purpose	License Compliance	Security Assurance
Verification Materials	24 items	25 items
Common Foundation Clauses	—	16 (corresponding to 5230)
18974-Exclusive Clauses	—	9 (security-specific)
Key Additional Elements	—	Vulnerability detection, response, and CVD procedures

31st Meeting

Mon, 01 Jan 0001 00:00:00 +0000

31st Meeting

Software Supply Chain Security and Open Source Governance

We look at the state of open source governance at CJ Group, how an open source management framework runs from an operations team's perspective, and tools for software supply chain security.

Date 2026-09-08 (Tue) 14:00–17:00 Venue CJ Human Resources Development Center · Jung-gu, Seoul

Directions Google Maps Naver Map Kakao Map

Registration and the detailed program are announced via the OpenChain KWG mailing list. Subscribe to receive the sign-up link.

Join the mailing list

08 Sep 2026 · Tue

32nd Meeting

Mon, 01 Jan 0001 00:00:00 +0000

32nd Meeting

OpenChain KWG Regular Meeting at Hyundai AutoEver

Open source compliance practitioners gather to share cases and expand their professional network. The detailed program will be added to this page as soon as it is confirmed.

Date 2026-12-08 (Tue) 14:00–17:00 Venue Hyundai AutoEver · Samseong-dong, Gangnam-gu, Seoul

Registration and the detailed program are announced via the OpenChain KWG mailing list. Subscribe to receive the sign-up link.

Join the mailing list

08 Dec 2026 · Tue

Effective Corporate Open Source Management (1): The OpenChain Project for Global Collaboration

Tue, 28 Mar 2023 00:00:00 +0000

Using open source has become almost essential to modern software development, to the point that it is said over 93% of the software products companies develop use open source. Yet there are reports that 53% of the open source used has license compliance issues, and 81% has security vulnerabilities. Given the complexity of modern software development environments and the vast software supply chain, companies developing products with open source need open source management efforts to minimize license compliance and security vulnerability risks. The Linux Foundation’s OpenChain Project is a project for carrying out these efforts at the community level, with multiple companies sharing and collaborating together.

OpenChain on OpenChain KWG

0. Exploring OpenChain

1. What is the OpenChain Project?

ISO/IEC 5230 Conformance Guide

Target Audience

How to Use This Guide

25th Meeting

Schedule

Agenda

Sponsor

26th Meeting

Schedule

Agenda

Sponsor

27th Meeting

Schedule

Agenda

Sponsor

28th Meeting

Schedule

Agenda

Sponsor

29th Meeting

Schedule

Agenda

Sponsor

30th Meeting

AI Governance and Open Source Compliance in Finance

ISO/IEC 18974 Conformance Guide

Target Audience

Relationship with ISO/IEC 5230

31st Meeting

Software Supply Chain Security and Open Source Governance

32nd Meeting

OpenChain KWG Regular Meeting at Hyundai AutoEver

Effective Corporate Open Source Management (1): The OpenChain Project for Global Collaboration