1. Three Cs to an Open Source Program Office
Justin Rackliffe / Fidelity Investments
@thejrack

2. Who Am I?
Responsible for Open Source Governance at Fidelity Investments
Represent Fidelity Investments with Linux Foundation and TODO Group
Advocating for shared responsibility in doing great things with OSS
Not Required

3. Why Are You Here?
Open Source dominates the marketplace
Associates want to engage, but may need help
Organizations have compliance responsibilities
Tools and processes only go so far
The goal is to enable, inspire, and catalyze your teams to do better things while educating them on their responsibilities.
Open Source is the foundation of modern software development and the cloud.
BlackDuck found OSS dependencies in 96% of the applications they analyzed based on their specific scope
Our associates not only need the ability to use OSS, but are increasingly demanding to collaborate on those projects to better meet their business challenges
While tools are best enabled to do the heavy lifting of curation, scanning, and remediating issues people are best suited to help guide the policies, help with education, advocate for change both up and down the tree based on a desired outcome
Adding a layer of bureaucracy should be done carefully with clear success criteria and developer experience measures known to start. Starting small and growing as demand and complexity justify helps to avoid burning too brightly to start only to flame out shortly after

4. What Will You Get?
Three handles to help frame the discussion in a simple elevator pitch
Ideas on where to gain influence and assistance
Confidence to take a first step
Open Source is the foundation of modern software development and the cloud.
BlackDuck found OSS dependencies in 96% of the applications they analyzed based on their specific scope
Our associates not only need the ability to use OSS, but are increasingly demanding to collaborate on those projects to better meet their business challenges
While tools are best enabled to do the heavy lifting of curation, scanning, and remediating issues people are best suited to help guide the policies, help with education, advocate for change both up and down the tree based on a desired outcome
Adding a layer of bureaucracy should be done carefully with clear success criteria and developer experience measures known to start. Starting small and growing as demand and complexity justify helps to avoid burning too brightly to start only to flame out shortly after

5. Compliance Compliance Avoid being a headline Economies of scale
Phone a friend
“Shift Left”
Compliance
Open Source is the foundation of modern software development and the cloud.
BlackDuck found OSS dependencies in 96% of the applications they analyzed based on their specific scope
Our associates not only need the ability to use OSS, but are increasingly demanding to collaborate on those projects to better meet their business challenges
While tools are best enabled to do the heavy lifting of curation, scanning, and remediating issues people are best suited to help guide the policies, help with education, advocate for change both up and down the tree based on a desired outcome
Adding a layer of bureaucracy should be done carefully with clear success criteria and developer experience measures known to start. Starting small and growing as demand and complexity justify helps to avoid burning too brightly to start only to flame out shortly after

6. Community Compliance Community Consensus Conduct Accountability
Learn internally!
Compliance
Community
Open Source is the foundation of modern software development and the cloud.
BlackDuck found OSS dependencies in 96% of the applications they analyzed based on their specific scope
Our associates not only need the ability to use OSS, but are increasingly demanding to collaborate on those projects to better meet their business challenges
While tools are best enabled to do the heavy lifting of curation, scanning, and remediating issues people are best suited to help guide the policies, help with education, advocate for change both up and down the tree based on a desired outcome
Adding a layer of bureaucracy should be done carefully with clear success criteria and developer experience measures known to start. Starting small and growing as demand and complexity justify helps to avoid burning too brightly to start only to flame out shortly after

7. Character Compliance Community Character Represent your brand
Invest in your passions
Build consortia approaches
Learn externally!
Compliance
Community
Character
This is who we are to the outside players in the ecosystem
More and more key foundational projects exist purely in the open source and attempts to fork or privatize an effort will not work in the long run so we will often need to work with our competitors on the core while highlighting what makes our platform unique
How do we work and invest in consortia that represent our goals
How do we collaborate in the projects we find value in respecting their governance and that we need to help build consensus
How do we move our own efforts into the public domain in a way that invites collaboration and communities of interest to form

8. How about a bonus C?

9. Credibility Credibility Compliance Community Character
Actions speak the loudest
Respect your heritage
Apply an Agile mindset
Take a step…
Compliance
Community
Character
On some level this is a 3 legged stool. To have an office that continues to grow and meet the needs of your associates in the industry you will need to look at where you can make a difference in all of these.
This will take time and patience as often this is less about tools and process then about culture. Each office has a unique dynamic and you need to respect that heritage and be creative on how to map these new concepts to what has made your organization successful in the past.
Set up criteria (scaling up over time) and establish as much transparency as your organization will allow first starting internally, but go external when it is appropriate.
We can learn a great deal from other organizations both market leading or just starting. Don’t feel that you have to have your act together to take your first steps.
Opensource by it’s nature is transparent so we will gain credibility for our corporate brand in the eyes of our customers, prospective employees, competitors since they can see your progress

10. Summary Compliance, Community & Character
These all establish Credibility internally and externally
Start small and focus on what is most valuable to your organization