OSPS Baseline to ISO/IEC 18974 Mapping Mapping Document

openssf/osps-baseline-to-iso-18974

Cross-walk from the Open Source Project Security (OSPS) Baseline controls to ISO/IEC 18974. Each mapping asserts a "relates-to" relationship; strength, confidence-level, and rationale are left unset and should be added as the mappings are individually reviewed.

maps to 2 frameworks

Published by OSPS Baseline Authors

License No license declared

Pull latest (v0.0.0-dev-671f23f)

$grcli unpack --repository openssf/osps-baseline-to-iso-18974 --version v0.0.0-dev-671f23f

Releases

1 live

Version	Manifest digest	Published	License	Status
v0.0.0-dev-671f23f	70cd15cb9fde29…	1mo ago	No license declared	Live unsigned	Details →

Mapping references

external standards this artifact maps to (v0.0.0-dev-671f23f)

Open Source Project Security Baseline @draft osps-baseline

The Open Source Project Security (OSPS) Baseline is a set of security criteria that projects should meet to demonstrate a strong security posture.
ISO/IEC 18974 @1.0 - 2023-12 ISO-18974

ISO/IEC 18974 helps organizations check open source for known security vulnerability issues like CVEs, GitHub dependency alerts or package manager alerts. ISO/IEC 18974 identifies: The key places to have security processes, How to assign roles and responsibilities, And how to ensure sustainability of the processes. ISO/IEC 18974 is lightweight, easy to read and is supported by our global community with free reference material and conformance resources.

Builds upon

artifacts this one extends, imports, or shares a lexicon with

No upstream references yet

This artifact doesn't extend, import, or share a lexicon with anything else in the registry.

Extended or imported by

other artifacts that build upon this one

No dependents yet

Published artifacts that extend or import this one will appear here.