SlideShare uma empresa Scribd logo
1 de 17
Baixar para ler offline
Managing risks in OSS adoption: 
the RISCOSS approach
Presenter: Xavier Franch, GESSI – UPC
OW2Con’13
Paris (France), 14‐Nov‐2013
Risks and OSS
OSS is about freedom and choice
– but freedom and choice introduces risks

Insufficient risk management has been reported as one of 
the five topmost mistakes to avoid when implementing 
OSS‐based solutions (Gartner 2011)
Such risks can be manifold:
– evaluation, integration, context, process, quality and evolution
Example scenario: TEI
Producing regulatory products for the Ericsson Corporate
For each product, TEI has always:
– two different release versions (under maintenance mode)
– a third one under development

Moreover, the system is adapted to different customers
– common parts and variant parts
Every single version and variant contains 3PPs, mostly OSS
– different releases, different patches, dependencies, …

How to implement a systematic approach towards under‐
standing, representing and assessing all kinds of risk?
Hypothesis of work
Understanding, managing and mitigating OSS 
adoption risks is crucial to avoid potentially 
significant adverse impact on the business, in 
terms of time to market, customer 
satisfaction, revenue and brand image
The RISCOSS project
Specification of risk identification, management and 
mitigation methods
for
community‐based and industry‐supported Open 
Source Software (OSS) development, composition 
and life cycle management 
to
individually, collectively and collaboratively manage 
OSS adoption risks 
The RISCOSS platform
OSS Ecosystems
OSSComponent

OSS
Adopter

User-DOCUM

Selection

Integrate OSS
component

OSS
Community

RET
Release

Decide

Test

Tech-DOCUM

Maintain
Develop

Integration

Learn
Decide

Component
evolves

Support

Maintain
Test

help

Component
evolves
Technical
quality
help

help

help

ACQ-Tech

According to
OSS practices

Patch
Contribute to OSS
community

Acceptance
as
contributor

ReportBUG

Res-BUG
Comm-resBUG

Support
help

ACQ-Man
ReportBUG
ReoprtPATCH
Patch
RISCOSS analytics
Data collection
Quantitative reasoning
OSS
component

OSS
Adopter

OSS
Commu
nity

Maintain
software

Layer of the
Business / Strategic goal

Actor

impact

Goal

Resource

Layer of the risks
RIsk events

Difficulty in code
refinement
expose

expose

indicator

Risk driver

Timeliness

measure of
bug fixing time

few people
on project

Layer of risk drivers and
risk indicators
Qualitative assessment
Qualitative assessment
Social analysis
Putting all the bricks together
OSSComponent

OSS
Adopter

User-DOCUM

Selection

Integrate OSS
component

OSS
Community

RET
Release

Decide

Test

Integration

Tech-DOCUM

Maintain
Develop

Learn
Decide

Maintain
Test

help

Component
evolves

Support

Component
evolves
Technical
quality
help

help

help

ACQ-Tech

According to
OSS practices

Patch
Acceptance
as
contributor

ReportBUG

Res-BUG

measure from
OSS community

IMPACT
on
Adopter
IMPACT on
COMMUNITY

Contribute to OSS
community
Support
help

ACQ-Man
ReportBUG

Comm-resBUG

ReoprtPATCH
Patch

impact

Difficulty in code
refinement
expose

measure of
bug fixing time

Long time in
bug fixing

expose

few people
on project

14
RISCOSS use cases
Five Use Cases in Public and Private sectors
 ERICSSON (Company)
 CENATIC (Institution)
 OW2 (communities)
 Xwiki (community and company)
 Moodbile (community and company)
Towards H2020
ICT 7. Innovation platforms for trusted cloud systems. 
Development, adaptation and testing of open source 
software for innovative and trusted cloud‐based services
ICT 9. Software tools and methods for large, complex 
and data‐intensive systems. Incorporating integrity, 
robustness and reliability into evolving software systems 
across the complete software lifecycle, especially for 
complex and secure business‐critical systems
For more information:
Xavier Franch, franch@essi.upc.edu
RISCOSS project coordinator

Mais conteúdo relacionado

Semelhante a RISCOSS presented at OW2con'13 "Managing risks in OSS adoption: the RISCOSS approach"

Barriers to mission critical oss adoption by organizations - by Dr. Placide...
Barriers to mission critical   oss adoption by organizations - by Dr. Placide...Barriers to mission critical   oss adoption by organizations - by Dr. Placide...
Barriers to mission critical oss adoption by organizations - by Dr. Placide...Placide Poba Nzaou
 
Angelo Susi' s presentation at PMI Academic Workshop 2016
Angelo Susi' s presentation at PMI Academic Workshop 2016Angelo Susi' s presentation at PMI Academic Workshop 2016
Angelo Susi' s presentation at PMI Academic Workshop 2016Silvia Valentini
 
RISCOSS platform: evaluation results
RISCOSS platform: evaluation resultsRISCOSS platform: evaluation results
RISCOSS platform: evaluation resultsSilvia Valentini
 
RISCOSS platform: evaluation results
RISCOSS platform: evaluation resultsRISCOSS platform: evaluation results
RISCOSS platform: evaluation resultsSilvia Valentini
 
Application Risk and Reward: Protect the value you create
Application Risk and Reward: Protect the value you createApplication Risk and Reward: Protect the value you create
Application Risk and Reward: Protect the value you createssholst
 
Ethical Analysis Applied to User Experience
Ethical Analysis Applied to User ExperienceEthical Analysis Applied to User Experience
Ethical Analysis Applied to User ExperienceJoe Jancsics
 
Privacy & Ethical Impact Assessment Workshop_RAMSES Project
Privacy & Ethical Impact Assessment Workshop_RAMSES ProjectPrivacy & Ethical Impact Assessment Workshop_RAMSES Project
Privacy & Ethical Impact Assessment Workshop_RAMSES ProjectTrilateral Research
 
Dual licensing policy zk
Dual licensing policy zkDual licensing policy zk
Dual licensing policy zkKarel Charvat
 
Ontonix Complexity Measurement and Predictive Analytics WP Oct 2013
Ontonix Complexity Measurement and Predictive Analytics WP Oct 2013Ontonix Complexity Measurement and Predictive Analytics WP Oct 2013
Ontonix Complexity Measurement and Predictive Analytics WP Oct 2013Datonix.it
 
Towards an innovative systemic approach of risk management
Towards an innovative systemic approach of risk managementTowards an innovative systemic approach of risk management
Towards an innovative systemic approach of risk managementchristophefeltus
 
Ensuring Know-how Protection in Production
Ensuring Know-how Protection in ProductionEnsuring Know-how Protection in Production
Ensuring Know-how Protection in ProductionIJMER
 
Open Source Software Resilience Framework
Open Source Software Resilience FrameworkOpen Source Software Resilience Framework
Open Source Software Resilience FrameworkApostolos Kritikos
 
Presentation__CONTROLO_2020_RS_AA_JC_JMM_JMS_VA_.pptx
Presentation__CONTROLO_2020_RS_AA_JC_JMM_JMS_VA_.pptxPresentation__CONTROLO_2020_RS_AA_JC_JMM_JMS_VA_.pptx
Presentation__CONTROLO_2020_RS_AA_JC_JMM_JMS_VA_.pptxRicardo Santos
 

Semelhante a RISCOSS presented at OW2con'13 "Managing risks in OSS adoption: the RISCOSS approach" (20)

Barriers to mission critical oss adoption by organizations - by Dr. Placide...
Barriers to mission critical   oss adoption by organizations - by Dr. Placide...Barriers to mission critical   oss adoption by organizations - by Dr. Placide...
Barriers to mission critical oss adoption by organizations - by Dr. Placide...
 
Angelo Susi' s presentation at PMI Academic Workshop 2016
Angelo Susi' s presentation at PMI Academic Workshop 2016Angelo Susi' s presentation at PMI Academic Workshop 2016
Angelo Susi' s presentation at PMI Academic Workshop 2016
 
RISCOSS platform: evaluation results
RISCOSS platform: evaluation resultsRISCOSS platform: evaluation results
RISCOSS platform: evaluation results
 
RISCOSS platform: evaluation results
RISCOSS platform: evaluation resultsRISCOSS platform: evaluation results
RISCOSS platform: evaluation results
 
Risk Management Frameworks
Risk Management FrameworksRisk Management Frameworks
Risk Management Frameworks
 
Ijetcas14 370
Ijetcas14 370Ijetcas14 370
Ijetcas14 370
 
Risk-informed innovation
Risk-informed innovation Risk-informed innovation
Risk-informed innovation
 
Application Risk and Reward: Protect the value you create
Application Risk and Reward: Protect the value you createApplication Risk and Reward: Protect the value you create
Application Risk and Reward: Protect the value you create
 
Ethical Analysis Applied to User Experience
Ethical Analysis Applied to User ExperienceEthical Analysis Applied to User Experience
Ethical Analysis Applied to User Experience
 
Privacy & Ethical Impact Assessment Workshop_RAMSES Project
Privacy & Ethical Impact Assessment Workshop_RAMSES ProjectPrivacy & Ethical Impact Assessment Workshop_RAMSES Project
Privacy & Ethical Impact Assessment Workshop_RAMSES Project
 
Dual licensing policy zk
Dual licensing policy zkDual licensing policy zk
Dual licensing policy zk
 
Ontonix Complexity Measurement and Predictive Analytics WP Oct 2013
Ontonix Complexity Measurement and Predictive Analytics WP Oct 2013Ontonix Complexity Measurement and Predictive Analytics WP Oct 2013
Ontonix Complexity Measurement and Predictive Analytics WP Oct 2013
 
abcd
abcdabcd
abcd
 
UBI global study 2016 contents index
UBI global study 2016 contents indexUBI global study 2016 contents index
UBI global study 2016 contents index
 
Towards an innovative systemic approach of risk management
Towards an innovative systemic approach of risk managementTowards an innovative systemic approach of risk management
Towards an innovative systemic approach of risk management
 
Towards an innovative systemic approach of risk management
Towards an innovative systemic approach of risk managementTowards an innovative systemic approach of risk management
Towards an innovative systemic approach of risk management
 
Ensuring Know-how Protection in Production
Ensuring Know-how Protection in ProductionEnsuring Know-how Protection in Production
Ensuring Know-how Protection in Production
 
Open Source Software Resilience Framework
Open Source Software Resilience FrameworkOpen Source Software Resilience Framework
Open Source Software Resilience Framework
 
Presentation__CONTROLO_2020_RS_AA_JC_JMM_JMS_VA_.pptx
Presentation__CONTROLO_2020_RS_AA_JC_JMM_JMS_VA_.pptxPresentation__CONTROLO_2020_RS_AA_JC_JMM_JMS_VA_.pptx
Presentation__CONTROLO_2020_RS_AA_JC_JMM_JMS_VA_.pptx
 
Oss2015
Oss2015Oss2015
Oss2015
 

Último

Cybersecurity Workshop #1.pptx
Cybersecurity Workshop #1.pptxCybersecurity Workshop #1.pptx
Cybersecurity Workshop #1.pptxGDSC PJATK
 
UiPath Studio Web workshop series - Day 8
UiPath Studio Web workshop series - Day 8UiPath Studio Web workshop series - Day 8
UiPath Studio Web workshop series - Day 8DianaGray10
 
Bird eye's view on Camunda open source ecosystem
Bird eye's view on Camunda open source ecosystemBird eye's view on Camunda open source ecosystem
Bird eye's view on Camunda open source ecosystemAsko Soukka
 
Machine Learning Model Validation (Aijun Zhang 2024).pdf
Machine Learning Model Validation (Aijun Zhang 2024).pdfMachine Learning Model Validation (Aijun Zhang 2024).pdf
Machine Learning Model Validation (Aijun Zhang 2024).pdfAijun Zhang
 
Anypoint Code Builder , Google Pub sub connector and MuleSoft RPA
Anypoint Code Builder , Google Pub sub connector and MuleSoft RPAAnypoint Code Builder , Google Pub sub connector and MuleSoft RPA
Anypoint Code Builder , Google Pub sub connector and MuleSoft RPAshyamraj55
 
Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...
Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...
Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...DianaGray10
 
Salesforce Miami User Group Event - 1st Quarter 2024
Salesforce Miami User Group Event - 1st Quarter 2024Salesforce Miami User Group Event - 1st Quarter 2024
Salesforce Miami User Group Event - 1st Quarter 2024SkyPlanner
 
PicPay - GenAI Finance Assistant - ChatGPT for Customer Service
PicPay - GenAI Finance Assistant - ChatGPT for Customer ServicePicPay - GenAI Finance Assistant - ChatGPT for Customer Service
PicPay - GenAI Finance Assistant - ChatGPT for Customer ServiceRenan Moreira de Oliveira
 
Videogame localization & technology_ how to enhance the power of translation.pdf
Videogame localization & technology_ how to enhance the power of translation.pdfVideogame localization & technology_ how to enhance the power of translation.pdf
Videogame localization & technology_ how to enhance the power of translation.pdfinfogdgmi
 
KubeConEU24-Monitoring Kubernetes and Cloud Spend with OpenCost
KubeConEU24-Monitoring Kubernetes and Cloud Spend with OpenCostKubeConEU24-Monitoring Kubernetes and Cloud Spend with OpenCost
KubeConEU24-Monitoring Kubernetes and Cloud Spend with OpenCostMatt Ray
 
OpenShift Commons Paris - Choose Your Own Observability Adventure
OpenShift Commons Paris - Choose Your Own Observability AdventureOpenShift Commons Paris - Choose Your Own Observability Adventure
OpenShift Commons Paris - Choose Your Own Observability AdventureEric D. Schabell
 
Things you didn't know you can use in your Salesforce
Things you didn't know you can use in your SalesforceThings you didn't know you can use in your Salesforce
Things you didn't know you can use in your SalesforceMartin Humpolec
 
COMPUTER 10 Lesson 8 - Building a Website
COMPUTER 10 Lesson 8 - Building a WebsiteCOMPUTER 10 Lesson 8 - Building a Website
COMPUTER 10 Lesson 8 - Building a Websitedgelyza
 
Cloud Revolution: Exploring the New Wave of Serverless Spatial Data
Cloud Revolution: Exploring the New Wave of Serverless Spatial DataCloud Revolution: Exploring the New Wave of Serverless Spatial Data
Cloud Revolution: Exploring the New Wave of Serverless Spatial DataSafe Software
 
UiPath Platform: The Backend Engine Powering Your Automation - Session 1
UiPath Platform: The Backend Engine Powering Your Automation - Session 1UiPath Platform: The Backend Engine Powering Your Automation - Session 1
UiPath Platform: The Backend Engine Powering Your Automation - Session 1DianaGray10
 
9 Steps For Building Winning Founding Team
9 Steps For Building Winning Founding Team9 Steps For Building Winning Founding Team
9 Steps For Building Winning Founding TeamAdam Moalla
 
Nanopower In Semiconductor Industry.pdf
Nanopower  In Semiconductor Industry.pdfNanopower  In Semiconductor Industry.pdf
Nanopower In Semiconductor Industry.pdfPedro Manuel
 
Crea il tuo assistente AI con lo Stregatto (open source python framework)
Crea il tuo assistente AI con lo Stregatto (open source python framework)Crea il tuo assistente AI con lo Stregatto (open source python framework)
Crea il tuo assistente AI con lo Stregatto (open source python framework)Commit University
 
Spring24-Release Overview - Wellingtion User Group-1.pdf
Spring24-Release Overview - Wellingtion User Group-1.pdfSpring24-Release Overview - Wellingtion User Group-1.pdf
Spring24-Release Overview - Wellingtion User Group-1.pdfAnna Loughnan Colquhoun
 
Basic Building Blocks of Internet of Things.
Basic Building Blocks of Internet of Things.Basic Building Blocks of Internet of Things.
Basic Building Blocks of Internet of Things.YounusS2
 

Último (20)

Cybersecurity Workshop #1.pptx
Cybersecurity Workshop #1.pptxCybersecurity Workshop #1.pptx
Cybersecurity Workshop #1.pptx
 
UiPath Studio Web workshop series - Day 8
UiPath Studio Web workshop series - Day 8UiPath Studio Web workshop series - Day 8
UiPath Studio Web workshop series - Day 8
 
Bird eye's view on Camunda open source ecosystem
Bird eye's view on Camunda open source ecosystemBird eye's view on Camunda open source ecosystem
Bird eye's view on Camunda open source ecosystem
 
Machine Learning Model Validation (Aijun Zhang 2024).pdf
Machine Learning Model Validation (Aijun Zhang 2024).pdfMachine Learning Model Validation (Aijun Zhang 2024).pdf
Machine Learning Model Validation (Aijun Zhang 2024).pdf
 
Anypoint Code Builder , Google Pub sub connector and MuleSoft RPA
Anypoint Code Builder , Google Pub sub connector and MuleSoft RPAAnypoint Code Builder , Google Pub sub connector and MuleSoft RPA
Anypoint Code Builder , Google Pub sub connector and MuleSoft RPA
 
Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...
Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...
Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...
 
Salesforce Miami User Group Event - 1st Quarter 2024
Salesforce Miami User Group Event - 1st Quarter 2024Salesforce Miami User Group Event - 1st Quarter 2024
Salesforce Miami User Group Event - 1st Quarter 2024
 
PicPay - GenAI Finance Assistant - ChatGPT for Customer Service
PicPay - GenAI Finance Assistant - ChatGPT for Customer ServicePicPay - GenAI Finance Assistant - ChatGPT for Customer Service
PicPay - GenAI Finance Assistant - ChatGPT for Customer Service
 
Videogame localization & technology_ how to enhance the power of translation.pdf
Videogame localization & technology_ how to enhance the power of translation.pdfVideogame localization & technology_ how to enhance the power of translation.pdf
Videogame localization & technology_ how to enhance the power of translation.pdf
 
KubeConEU24-Monitoring Kubernetes and Cloud Spend with OpenCost
KubeConEU24-Monitoring Kubernetes and Cloud Spend with OpenCostKubeConEU24-Monitoring Kubernetes and Cloud Spend with OpenCost
KubeConEU24-Monitoring Kubernetes and Cloud Spend with OpenCost
 
OpenShift Commons Paris - Choose Your Own Observability Adventure
OpenShift Commons Paris - Choose Your Own Observability AdventureOpenShift Commons Paris - Choose Your Own Observability Adventure
OpenShift Commons Paris - Choose Your Own Observability Adventure
 
Things you didn't know you can use in your Salesforce
Things you didn't know you can use in your SalesforceThings you didn't know you can use in your Salesforce
Things you didn't know you can use in your Salesforce
 
COMPUTER 10 Lesson 8 - Building a Website
COMPUTER 10 Lesson 8 - Building a WebsiteCOMPUTER 10 Lesson 8 - Building a Website
COMPUTER 10 Lesson 8 - Building a Website
 
Cloud Revolution: Exploring the New Wave of Serverless Spatial Data
Cloud Revolution: Exploring the New Wave of Serverless Spatial DataCloud Revolution: Exploring the New Wave of Serverless Spatial Data
Cloud Revolution: Exploring the New Wave of Serverless Spatial Data
 
UiPath Platform: The Backend Engine Powering Your Automation - Session 1
UiPath Platform: The Backend Engine Powering Your Automation - Session 1UiPath Platform: The Backend Engine Powering Your Automation - Session 1
UiPath Platform: The Backend Engine Powering Your Automation - Session 1
 
9 Steps For Building Winning Founding Team
9 Steps For Building Winning Founding Team9 Steps For Building Winning Founding Team
9 Steps For Building Winning Founding Team
 
Nanopower In Semiconductor Industry.pdf
Nanopower  In Semiconductor Industry.pdfNanopower  In Semiconductor Industry.pdf
Nanopower In Semiconductor Industry.pdf
 
Crea il tuo assistente AI con lo Stregatto (open source python framework)
Crea il tuo assistente AI con lo Stregatto (open source python framework)Crea il tuo assistente AI con lo Stregatto (open source python framework)
Crea il tuo assistente AI con lo Stregatto (open source python framework)
 
Spring24-Release Overview - Wellingtion User Group-1.pdf
Spring24-Release Overview - Wellingtion User Group-1.pdfSpring24-Release Overview - Wellingtion User Group-1.pdf
Spring24-Release Overview - Wellingtion User Group-1.pdf
 
Basic Building Blocks of Internet of Things.
Basic Building Blocks of Internet of Things.Basic Building Blocks of Internet of Things.
Basic Building Blocks of Internet of Things.
 

RISCOSS presented at OW2con'13 "Managing risks in OSS adoption: the RISCOSS approach"