Do any of you have suggestions for managing SBOM and license compliance with OSS solutions? I've looked into DejaCode and ScanCode[.]io. DejaCode makes a good first impression but has some serious limitations when it comes to SBOM processing (supported format versions, handling of hierarchies). I would like to use something that allows a review process and handling of more complex licensing (e.g. dual licensing, SPDX expressions) before generating the final SBOM. Basically what DejaCode does but with better SBOM handling. #sbom#cra#compliance#license#foss
Leveraging my #privacy and #ai friends. A super talented and capable undergraduate student graduating at the end of the quarter reached out to me asking for career routes forward, prior to (or perhaps instead of) law school, that would allow for the exploration of #dataprivacy, #compliance, and AI #policy.
I know about IAPP and their training and certification programs, but didn't immediately have any additional resources off the top of my head. Thoughts? Tips? Thanks!
an opening for a Regulatory Compliance Specialist in Columbia's Office of Research Compliance and Training. This is a great opportunity for anyone with an interest research compliance, with special focus on conflict of interest in research, export controls and research security. Apply here: https://opportunities.columbia.edu/jobs/bfccf4a7-09f3-4e7b-b7dc-b8efea658ae2