3rd Party Software & License Compliance

Managing 3rd party software risks, delivering software bill of materials through lifecycle management and software composition analysis.

About this product

Almost no software is written from scratch any more. A typical application today is a thin layer of original code sitting on top of hundreds, sometimes thousands, of components written by other people. That is a remarkable achievement of the software industry: it lets small teams build in weeks what used to take years. It also means that every organisation shipping software is, whether it realises it or not, managing a supply chain. Each component arrives with a license that grants rights and imposes duties. Each component can carry defects and vulnerabilities. Each component has a maintainer, a release cadence and, eventually, an end of life. This book is a practical introduction to managing that supply chain. It is written for software engineers, engineering managers, product owners, security officers, procurement and legal staff, and anyone else who needs to understand why third-party software must be governed and how to do it without slowing development to a crawl.

What's included

• 3rd Party Software License Compliance - Michael B. Karl.pdf

  PDF · 889 KB

About the seller

Michael B. Karl

(Ir.)

Michael B. Karl is a senior software architect and compliance competence lead with more than 15 years of experience in complex software development. His work brings together two disciplines that are ...

Michael B. Karl is a senior software architect and compliance competence lead with more than 15 ...