ISO/IEC 18974:2023 PDF
Information technology — OpenChain security assurance specification
Information technology — OpenChain security assurance specification
- Статус документа:
- Действующий
- Формат:
- Электронный (PDF)
- Количество страниц:
- 8
- Дата публикации:
- 14 декабря 2023 г.
- Издание:
- ISO/IEC IS 18974 edition 1 version 1
- ICS:
- 35.020
This specification contains the key requirements of a quality open source software security assurance program that establishes trust between organizations exchanging software solutions comprised of open source software.
Abstract
Overview
ISO/IEC 18974:2023 - OpenChain security assurance specification defines the core requirements for a quality open source software (OSS) program. Published by ISO/IEC and maintained by the OpenChain Project, this specification is intended to build trust between organizations that exchange software solutions containing open source components. The standard focuses on the “what” and “why” of security assurance - especially checking OSS against (CVE, GitHub/GitLab alerts, package manager alerts) - while remaining implementation‑agnostic so organizations of any size can adapt it.
Похожие стандарты
Упомянутые в описании и другие стандарты ISO