Open Source Software Compliance within the Government

Open Source Software OSS has become increasingly popular for software development, and subsequently, government usage has increased. This report outlines a process to manage the risks and complexity of OSS usage within the government. The first step in managing OSS licenses is to understand the requirements regarding compliance, distribution, sharing, attribution, compatibility, termination, copyright, and intellectual property. In order to maintain license compliance, a policy must be created and administered. This policy includes a process of OSS discovery, cataloging, evaluation, review, and approval. Specific guidance is also provided to aid with government acquisitions and contracts as well as information assurance and security compliance requirements. With proper understanding, process implementation, and policy maintenance, the government can effectively use OSS without compliance concerns.