KFTC Obtains International Certification for Open Source Standards

International Certification for High Reliability and Excellent Management Systems in Open Source Utilization

The Korea Financial Telecommunications and Clearings Institute (KFTC) announced on the 21st that it has obtained the international standard certification 'ISO/IEC 5230:2020' for the 'OpenChain Project.'

The 'OpenChain Project' was initiated under the leadership of the Linux Foundation, a nonprofit organization in the United States, and it provides international certification by comprehensively evaluating companies' open source management systems and compliance capabilities.

The 'ISO/IEC 5230:2020 standard' assesses whether companies meet criteria regarding ▲the appropriateness of establishing open source policies and processes ▲the establishment of compliance systems ▲the expertise of responsible organizations and personnel ▲and the execution of training for members.

To meet these requirements, KFTC formed an open source organization last year and established an open source management system that defines policies and methods for utilizing open source.

Additionally, KFTC built an internal open source management platform that automatically identifies open source software and licenses used by employees during the software development process and provides guidance on necessary actions.

Through this international standard certification, KFTC has internationally demonstrated that it secures high reliability and excellent management systems in terms of open source utilization.

Based on these open source utilization capabilities, KFTC plans to collaborate with domestic financial and public sector institutions to create a healthy open source ecosystem.

Songwon Lee, CIO of KFTC's IT Headquarters, stated, "In the rapidly changing IT technology environment such as AI, big data, and cloud, the use of open source is inevitable," adding, "We will continue to contribute to the development of the open source ecosystem based on globally recognized open source utilization capabilities."