Three Cs to an Open Source Program Office Justin Rackliffe / Fidelity Investments @thejrack

Who Am I? Responsible for Open Source Governance at Fidelity Investments Represent Fidelity Investments with Linux Foundation and TODO Group Advocating for shared responsibility in doing great things with OSS   Not Required

Why Are You Here? Open Source dominates the marketplace Associates want to engage, but may need help Organizations have compliance responsibilities Tools and processes only go so far The goal is to enable, inspire, and catalyze your teams to do better things while educating them on their responsibilities. Open Source is the foundation of modern software development and the cloud. BlackDuck found OSS dependencies in 96% of the applications they analyzed based on their specific scope https://www.synopsys.com/content/dam/synopsys/sig-assets/reports/2018-ossra.pdf Our associates not only need the ability to use OSS, but are increasingly demanding to collaborate on those projects to better meet their business challenges While tools are best enabled to do the heavy lifting of curation, scanning, and remediating issues people are best suited to help guide the policies, help with education, advocate for change both up and down the tree based on a desired outcome https://thenewstack.io/survey-open-source-programs-are-a-best-practice-among-large-companies/ Adding a layer of bureaucracy should be done carefully with clear success criteria and developer experience measures known to start. Starting small and growing as demand and complexity justify helps to avoid burning too brightly to start only to flame out shortly after

What Will You Get? Three handles to help frame the discussion in a simple elevator pitch Ideas on where to gain influence and assistance Confidence to take a first step Open Source is the foundation of modern software development and the cloud. BlackDuck found OSS dependencies in 96% of the applications they analyzed based on their specific scope https://www.synopsys.com/content/dam/synopsys/sig-assets/reports/2018-ossra.pdf Our associates not only need the ability to use OSS, but are increasingly demanding to collaborate on those projects to better meet their business challenges While tools are best enabled to do the heavy lifting of curation, scanning, and remediating issues people are best suited to help guide the policies, help with education, advocate for change both up and down the tree based on a desired outcome https://thenewstack.io/survey-open-source-programs-are-a-best-practice-among-large-companies/ Adding a layer of bureaucracy should be done carefully with clear success criteria and developer experience measures known to start. Starting small and growing as demand and complexity justify helps to avoid burning too brightly to start only to flame out shortly after

Compliance Compliance Avoid being a headline Economies of scale Phone a friend “Shift Left” Compliance Open Source is the foundation of modern software development and the cloud. BlackDuck found OSS dependencies in 96% of the applications they analyzed based on their specific scope https://www.synopsys.com/content/dam/synopsys/sig-assets/reports/2018-ossra.pdf Our associates not only need the ability to use OSS, but are increasingly demanding to collaborate on those projects to better meet their business challenges While tools are best enabled to do the heavy lifting of curation, scanning, and remediating issues people are best suited to help guide the policies, help with education, advocate for change both up and down the tree based on a desired outcome https://thenewstack.io/survey-open-source-programs-are-a-best-practice-among-large-companies/ Adding a layer of bureaucracy should be done carefully with clear success criteria and developer experience measures known to start. Starting small and growing as demand and complexity justify helps to avoid burning too brightly to start only to flame out shortly after

Community Compliance Community Consensus Conduct Accountability Learn internally! Compliance Community Open Source is the foundation of modern software development and the cloud. BlackDuck found OSS dependencies in 96% of the applications they analyzed based on their specific scope https://www.synopsys.com/content/dam/synopsys/sig-assets/reports/2018-ossra.pdf Our associates not only need the ability to use OSS, but are increasingly demanding to collaborate on those projects to better meet their business challenges While tools are best enabled to do the heavy lifting of curation, scanning, and remediating issues people are best suited to help guide the policies, help with education, advocate for change both up and down the tree based on a desired outcome https://thenewstack.io/survey-open-source-programs-are-a-best-practice-among-large-companies/ Adding a layer of bureaucracy should be done carefully with clear success criteria and developer experience measures known to start. Starting small and growing as demand and complexity justify helps to avoid burning too brightly to start only to flame out shortly after

Character Compliance Community Character Represent your brand Invest in your passions Build consortia approaches Learn externally! Compliance Community Character This is who we are to the outside players in the ecosystem More and more key foundational projects exist purely in the open source and attempts to fork or privatize an effort will not work in the long run so we will often need to work with our competitors on the core while highlighting what makes our platform unique How do we work and invest in consortia that represent our goals How do we collaborate in the projects we find value in respecting their governance and that we need to help build consensus How do we move our own efforts into the public domain in a way that invites collaboration and communities of interest to form

How about a bonus C?

Credibility Credibility Compliance Community Character Actions speak the loudest Respect your heritage Apply an Agile mindset Take a step… Compliance Community Character On some level this is a 3 legged stool. To have an office that continues to grow and meet the needs of your associates in the industry you will need to look at where you can make a difference in all of these. This will take time and patience as often this is less about tools and process then about culture. Each office has a unique dynamic and you need to respect that heritage and be creative on how to map these new concepts to what has made your organization successful in the past. Set up criteria (scaling up over time) and establish as much transparency as your organization will allow first starting internally, but go external when it is appropriate. We can learn a great deal from other organizations both market leading or just starting. Don’t feel that you have to have your act together to take your first steps. Opensource by it’s nature is transparent so we will gain credibility for our corporate brand in the eyes of our customers, prospective employees, competitors since they can see your progress

Summary Compliance, Community & Character These all establish Credibility internally and externally Start small and focus on what is most valuable to your organization