All,
The Eclipse Foundation is pleased to announce the proposal to establish the Eclipse Open Regulatory Compliance Working Group. The background motivation for this initiative can be read here. [1]
The proposed charter [2] for this working group outlines the Eclipse Open Regulatory Compliance Working Group is being created to meet the needs of new government regulations on the software industry which will impact open source communities. This working group is intended to bring together key stakeholders from industry, small and medium enterprises (SME), research, and other open source foundations to work with government in forging specifications that will enable industry to continue to leverage open source through the software supply chain to meet those regulatory requirements, and in turn will enable the open source projects to better meet industry's needs in this regard.
Working within the Eclipse Foundation framework for developing open specifications, the working group will:
Define software development processes - either current or adapted - which meet the regulatory compliance standards set forth by regulatory authorities. This will be achieved through:
Identifying best practices, process and tools which may already exist within the open source ecosystem
Identifying gaps and resources that may fill those gaps
Identify and assess relevant regulatory requirements applicable to software development, including but not limited to cybersecurity, AI, and industry-specific directives.
Establish Special Interest Groups (SIGs) for domain-specific work (i.e. Cyber and AI).
Compile guidelines and best practices for integrating compliance considerations into all stages of the software development lifecycle, from planning and design to deployment and maintenance.
Collaborate with legal experts, industry stakeholders, and regulatory bodies and government officials to ensure alignment with current and evolving regulatory frameworks.
Provide a forum where feedback can be garnered from government with respect to the specifications being developed, and that all interested stakeholders can meet when and how appropriate to better ensure the specifications meet the objectives established by government.
Foster transparency and accountability within the open source community by promoting adherence to regulatory standards.
Identify gaps in educational resources and training materials to support open source developers in understanding and implementing compliant development practices.
Monitor regulatory updates and emerging trends to continuously refine and update the established processes and guidelines.
Promote the adoption of the resulting specifications to various relevant standardisation bodies.
Promote the adoption of compliant software development practices across industry through advocacy, outreach, and knowledge-sharing initiatives.
The proposed charter for this working group is now available for review.
All Members of the Eclipse Foundation are invited to join [3] and participate in this working group. We encourage you to connect to the working group mailing list [4] to stay abreast of updates and latest news. All comments and feedback are welcome.
Please feel free to contact me directly, or the mailing list, if you have any questions.
[1] About
https://outreach.eclipse.foundation/open-regulatory-compliance
[2] Draft Working Group Charter https://www.eclipse.org/workinggroups/open-regulatory-compliance-charter.php
[3] Working Group Participation Agreement
https://www.eclipse.org/workinggroups/wgpa/open-regulatory-compliance-working-group-participation-agreement.pdf
[4] Working Group General Mailing List https://accounts.eclipse.org/mailing-list/open-regulatory-compliance
Regards,