Part 3 – Practical Implementations of Open Source

Regulations, standards, contracts and internal policies all set requirements for how you use open source. How do you meet them all without drowning in work, and where do tools and AI workflows fit in?

Description

Requirements for open source come from many directions: regulations such as the Cyber Resilience Act, NIS2 and DORA, standards such as ISO/IEC 27001 and OpenChain, customer contracts and your own policies. Handled one by one, they overlap, multiply and become hard to follow and to verify.

In the final webinar of the series, Martin von Willebrand and Mikko Murto turn from strategy to practice. They discuss how to map many requirements onto a small number of simple controls that cover several obligations at once, and what a well-designed process looks like in day-to-day software development. They look at the role of tooling, from software bills of materials to automated compliance checks in CI/CD, and at where AI workflows fit in: what can be automated, what an AI agent can do, and where a person must stay in charge.

You will learn

• How to manage overlapping regulatory, standard, contract and policy requirements
• How to design simple controls that cover many requirements at once
• What tooling and AI workflows can automate, and where human decisions remain

Speakers of the third webinar are:

Martin von Willebrand, HH Partners /Double Open
Mikko Murto, HH Partners

______

OPEN SOURCE – WEBINAR SERIES

Open source is no longer only a licensing question. It shapes how organisations build software, how fast they can adopt AI, and how well they cope with new regulation and a changing geopolitical situation. In this three-part series, practitioners from industry and law look at open source as a strategic asset: how to assess where your organisation stands, how leading companies run open source at scale, and how to turn a growing set of requirements into practical, workable routines.

The webinars build on each other, but each one stands on its own. Join one or take part in the whole series.

16.11.2026 Open Source Is Strategic

23.11.2026 Industry Approach to Open Source

30.11.2026 Practical Implementations of Open Source