BlackBerry is the first company based in North America to adopt and conform to OpenChain ISO / IEC 5230:2020 across its entire product portfolio.
OpenChain is the International Standard for open-source license compliance and is designed to build trust in the supply chain. BlackBerry saw the need to lead in this space to adopt a higher standard for its software supply chain.
The new accreditation will enable BlackBerry customers to have increased confidence in the company’s ability to manage the use of open source software across its Cybersecurity and IoT product portfolio.
As the frequency and severity of cybersecurity attacks grow and stringent regulatory standards like President Biden’s Cybersecurity Executive Order come into effect, the need to have holistic visibility into the security of the software supply chain is of paramount importance, particularly when managing open source software. Â
BlackBerry is the first company in North America to gain company-wide OpenChain ISO/IEC 5230:2020 conformance and collaborated with OSS Consultants to achieve the accreditation. OpenChain encourages self-certification, independent assessment, and third-party certification as options for entities seeking to address the risk profile of their supply chain.
“We are extremely proud to be the first company based in North America to announce whole entity conformance to OpenChain ISO/IEC 5230:2020,” said Charles Eagan, Chief Technology Officer at BlackBerry.
“BlackBerry continues to lead in securely developing software. We realized the importance of leveraging Open Source Software and recognized the need for a robust process to manage the use of it in our products.”
OSS Consultants is a business dedicated to helping organizations of all sizes – from the world’s largest and well-known companies to small businesses and start-ups – design, implement, and manage the most efficient, comprehensive and robust open-source program offices and policies on the planet.
Service offerings range from a scan and audit of your third-party and proprietary software to creating a full OSPO within your organization.
“As trusted consultants that have helped organizations of all sizes implement Open Source Programs, we were thrilled to partner with BlackBerry to attain the first whole-entity OpenChain conformance in North America.
The OpenChain Project has set a high standard of open-source compliance within the supply chain and across the world,” said Russ Eling, CEO and Founder of OSS Consultants.”
The OpenChain Project maintains the International Standard for open source license compliance. This allows companies of all sizes and in all sectors to adopt the key requirements of a quality open source compliance program.
This is an open standard and all parties are welcome to engage with their community, to share their knowledge, and to contribute to the future of the standard.
“It is hard to overstate the importance of today’s announcement,” says Shane Coughlan, OpenChain General Manager.
“BlackBerry has one of the deepest industry pedigrees in bringing increased peace of mind to enterprise and governmental organizations. Certifying their open source software management underlines their commitment to excellence and serves as a beacon for other companies to follow.”
