XEROX TALKS BEST PRACTICES FOR OPEN SOURCE GOVERNANCE

Transcription

1 XEROX TALKS BEST PRACTICES FOR OPEN SOURCE GOVERNANCE November Black Duck Software, Inc. All Rights Reserved.

2 SPEAKERS Phil Odence Vice President and General Manager Black Duck Software Robert Levine Licensing Executive Xerox Black Duck Software, Inc. All Rights Reserved.

3 AGENDA Introductions Xerox s Take Trends Challenges & Considerations OSS Compliance Putting the Pieces Together Q&A Black Duck Software, Inc. All Rights Reserved.

4 COMPANY OVERVIEW Who we serve. Schools, small businesses, government agencies, commercial printers and Fortune 1000 companies we span all types and sizes of organizations. Now that we re working behind the scenes in areas like customer care and IT outsourcing, we re simplifying business in ways you might not expect. 180+countries. Our global reach enables us to support our customers wherever they operate, from just-around-the-corner to all-around-the-world. 140,000 employees worldwide. With expertise in areas like transportation, healthcare, document management, and HR, our people are simplifying the way work gets done in virtually every industry. 12,000+ Active Patents. That s a testament to our ongoing dedication to innovation. We are allied with IT and business partners that integrate our systems and services into their customer solutions Revenue: $21.4 billion NYSE Symbol: XRX History: Founded in 1906 as the Haloid Company; named Haloid Xerox in 1958 and Xerox Corporation in 1961; acquired Affiliated Computer Services (ACS) in Chairman & CEO: Ursula M. Burns Headquarters: 45 Glover Avenue, Norwalk, CT Contact: 800-ASK-XEROX or Copyright 2014 Xerox Corporation. All Rights Reserved Black Duck Software, Inc. All Rights Reserved.

5 OSS TRENDS Black Duck Software, Inc. All Rights Reserved.

6 OSS IS RELIED ON BY COMPANIES IN EVERY SECTOR SOFTWARE ELECTRONICS FINANCIAL / SERVICES GOVERNMENT MEDIA MANUFACTURING Black Duck Software, Inc. All Rights Reserved.

7 WHERE SOFTWARE IS HOT, OPEN SOURCE IS HOT 63% 57% 53% 51% 49% 48% 46% 27% 26% 13% 12% 10% CLOUD/ VIRTUALIZATION CONTENT MGMT MOBILE SECURITY COLLABORATION NETWORK MGMT SOCIAL MEDIA 3D PRINTING ANALYTICS AND BUSINESS INTELLIGENCE DRONES GAMING ERP Black Duck Software, Inc. All Rights Reserved.

8 INCREASING ABUNDANCE Black Duck KnowledgeBase Black Duck Software, Inc. All Rights Reserved.

9 OPEN SOURCE GROWS AS % OF CODE By 2016, at least 95% of IT organizations will leverage nontrivial elements of open-source software technology in their mission-critical IT portfolios, including cases where they might not be aware of it an increase from 75% in Source: Gartner, % More %??? 5% Source: Black Duck audit results Source: IDC Survey of G Black Duck Software, Inc. All Rights Reserved.

10 CHALLENGES & CONSIDERATIONS COMPLIANCE Black Duck Software, Inc. All Rights Reserved.

11 SO, OSS OFTEN ENTERS A CODE BASE UNCHECKED Commercial 3 rd Party Code Purchasing Licensing? Security? Quality? Support? Open Source Code Base SECURITY RISK Which components have vulnerabilities and what are they LEGAL RISK Which licenses are used and do they match anticipated use of the code OPERATIONAL RISK Which versions of code are being used, and how old are they Black Duck Software, Inc. All Rights Reserved.

12 BLACK DUCK S EXPERIENCE ANALYZING CODE 99% of code audits find open source. 95% of audits find unknown open source 75% of audits contain unknown licenses. 50% of code audits contain GPL. Audits on average contain 33% open source Black Duck Software, Inc. All Rights Reserved.

13 OSS USE IS AHEAD OF MANAGEMENT Through 2016, less than half of IT organizations will have implemented an effective open-source governance program; that is, one that successfully minimizes risk and maximizes positive TCO and ROI opportunities Gartner, Black Duck Software, Inc. All Rights Reserved.

14 PUTTING THE PIECES IN PLACE Black Duck Software, Inc. All Rights Reserved.

15 KEY ELEMENTS OF AN OPEN SOURCE POLICY An OSS Policy should address the following : Program administration and management Discovery, acquisition and evaluation Review and approval Software procurement Support and maintenance License compliance Community participation Black Duck Software, Inc. All Rights Reserved.

16 AUTOMATING OPEN SOURCE PROCESSES Key open source processes across the software value chain automation reduces friction. O S S L O G I S T I C S Choose Scan Approve Inventory Secure Deliver B L A C K D U C K S U I T E Black Duck Software, Inc. All Rights Reserved.

17 SUMMARY Open source software has changed the world It s ubiquitous and an essential element of software strategy It s where innovation is happening Developing software with open source is different Realizing the full benefits while managing the challenges requires: Policy Process Technology Black Duck Software, Inc. All Rights Reserved.

18 QUESTIONS?