Webinar Software Supply Chain: Carlo Piana & Alberto Pianon

Carlo Piana & Alberto Pianon

Thursday, May 4, 2023. 13.00 - 14.30 CEST

Carlo Piana & Alberto Pianon will give a talk about the importance of a full, detailed and reliable SBOM in general and with the goal of permitting reproducibility specifically. They'll also discuss SBOM in light of the upcoming Cyber Resilience Act and product liability legislation in Europe. The talk will be about 45 minutes followed by a Q&A. This talk is part of the webinar series The Ins and Outs of Open Software Supply Chain Management hosted on Thursdays in April and May.

This webinar took place on May 4, you can watch the recording here https://bbb.protagio.nl/playback/presentation/2.3/e156bbe10c5967b48f606f4ec5b14e818ba4877e-1683197109758

About Carlo Piana & Alberto Pianon

Carlo Piana is a lawyer and digital freedom advocate. A qualified attorney in Italy, Piana has been practicing IT law since 1995, focusing his practice on software, technology, standardization, data protection and digital liberties in general. He represented Free Software Foundation Europe and the Samba Team in the largest antitrust litigation in Europe, arguing before the Court of Justice and the European Commission in a ten years long confrontation. This led to the confirmation of the decision against Microsoft and to the opening of a phase of more openness of its protocols and more competition in the browser field. He has assisted several projects and companies in devising their open source strategy from licensing to governance, from trademark registration to internal policies, dedicating countless pro bono hours to the cause. He is also a board member of the Open Source Initiative.

Alberto Pianon A long standing activist and user of Free and Open Source Software, Alberto is a qualified lawyer in private practice in Vicenza, Italy. His practice covers intellectual property, cyberlaw and copyright law, with a particular focus on open source licensing and compliance, especially in the embedded/IoT field. He is member of the Legal Network of the FSFE and partner of OpenChain in Europe together with Carlo Piana (Array).

Webinar series: The Ins and Outs of Open Software Supply Chain Management

Carlo Piana & Alberto Pianon's talk is the third in a series of webinars about open source supply chain management. The series will explore topics such as the software bill of materials, legal consequences, tooling, and the Cyber Resilience Act.

Other talks in this series:

• April 6: Armijn Hemel. [ watch recording ]
  Topic: Open Source in (Consumer) Electronics Supply Chains.
• April 13: Philippe Ombredanne. [ watch recording ]
  Topic: Tooling.
• May 4: Carlo Piana & Alberto Pianon. [ watch recording ]
  Topic: The importance of a Software Bill of Materials in light of the upcoming Cyber Resilience Act and product liability legislation in Europe.
• May 11: Shane Martin Coughlan. [ watch recording ]
  Topic: ISO standards and certification.

All episodes start at 13.00 at CEST (Amsterdam, Berlin, Rome).

Software Bill of Materials

The Software Bill of Materials (SBoM) is a critical component of open source software development. It is a list of all the components that make up a software product and provides important information about the licenses and dependencies of each component. In our webinars, we'll discuss how to create an SBOM and why it's important for your organization.

Tooling

We will also discuss tooling in the open source software supply chain. From automated testing to vulnerability scanning, we'll show you the tools that can help you streamline your development process and ensure that your software is secure.

Cyber Resilience Act

We'll also explore the Cyber Resilience Act, which aims to improve the security and resilience of software and services within the European Union. This Act could be of particular importance for organizations that use open source software in their products.

How to join

The online webinar series will take place on Thursdays on April 6, April 13, May 4 and May 11, 2023 at 13.00 - 14.30 CEST (Amsterdam, Berlin, Rome). Each talk will take about 45 minutes followed by a Q&A. If you don't have time for the Q&A feel free to leave earlier. Join us for these informative webinars to learn from experts in the field and connect with like-minded individuals. Join the webinar on the BigBlueButton platform with the following link https://bbb.protagio.nl/b/ron-qed-tog-gey. The link is valid for all episodes.

We'd appreciate it if you'd register for the webinar by sending an e-mail to webinars@nlnet.nl but it's not necessary.

The series will be in English and will be hosted on BigBlueButton, an open source webconferencing framework which is actively supported by NGI Zero to add end-to-end encrypted chat.

---