Open Source Software Usage and Compliance Policy

• Table of Contents

  • EDC Inc Open Source Software Usage and Compliance Policy
  • 1. Purpose
  • 2. Scope
  • 3. Policy
  • 3.1 OSS Identification and Approval
  • 3.2 OSS Acquisition
  • 3.3 OSS Use
  • 3.4 OSS Retirement
  • 3.5 OSS Compliance
  • 4. Responsibilities
  • 5. Enforcement
  • 6. Review and Update
  • 7. Exceptions
  • Summary

EDC Inc Open Source Software Usage and Compliance Policy

This policy outlines the guidelines and procedures for the use and compliance of open source software (OSS) within EDC Inc. It is designed to ensure that all employees understand and adhere to the principles of OSS usage and compliance, and to mitigate the risks associated with the use of OSS.

1. Purpose

The purpose of this policy is to establish a framework for the use and compliance of OSS within EDC Inc. This includes the identification, approval, acquisition, use, and retirement of OSS. This policy also aims to ensure that EDC Inc complies with all legal and contractual obligations related to OSS.

2. Scope

This policy applies to all employees, contractors, and third parties who use or manage OSS on behalf of EDC Inc. This includes all software that is used in the operation of EDC Inc, including software that is used in the Active Directory, CMDB, and CAB.

3. Policy

3.1 OSS Identification and Approval

All OSS used within EDC Inc must be identified and approved by the IT Server Operations department. The IT Server Operations department is responsible for maintaining an inventory of all OSS in the CMDB.

3.2 OSS Acquisition

OSS must be acquired through approved channels. The IT Server Build Operations department is responsible for acquiring OSS and ensuring that all OSS is properly licensed.

3.3 OSS Use

All OSS must be used in accordance with its license. The IT-SOC department is responsible for monitoring the use of OSS and ensuring that it is used in compliance with its license.

3.4 OSS Retirement

When OSS is no longer needed, it must be retired in accordance with the IT Security Operations department’s procedures. The IT Security Operations department is responsible for ensuring that all retired OSS is properly disposed of.

3.5 OSS Compliance

The IT Audit and Compliance department is responsible for ensuring that EDC Inc is in compliance with all legal and contractual obligations related to OSS. This includes conducting regular audits of OSS usage and compliance.

4. Responsibilities

• The IT Director is responsible for overseeing the implementation of this policy.
• The IT Managers are responsible for ensuring that their departments comply with this policy.
• All employees, contractors, and third parties are responsible for complying with this policy.

5. Enforcement

Any employee found to have violated this policy may be subject to disciplinary action, up to and including termination of employment. Any contractor or third party found to have violated this policy may have their contract with EDC Inc terminated.

6. Review and Update

This policy will be reviewed and updated annually by the IT Audit and Compliance department to ensure that it remains relevant and effective.

7. Exceptions

Any exceptions to this policy must be approved by the IT Security department. All requests for exceptions must be submitted in writing and include a justification for the exception.

Summary

This policy provides a comprehensive framework for the use and compliance of OSS within EDC Inc. It outlines the responsibilities of various departments and individuals, and provides clear guidelines for the identification, approval, acquisition, use, and retirement of OSS. By adhering to this policy, EDC Inc can ensure that it uses OSS in a responsible and compliant manner.