Risk responsibility about open-source-logiciel-libre

[gcharest]

Update: we are going to work with @ptd-tbs & her team from cyber to make sure this is covered.

[keithdouglas]

Be sure that the "build it processes" include a software/application security expert and involve them early!!

[gcharest]

Thanks for this! Indeed, we need to better understand the need for finger pointing. I'll bring this for discussion at the Rules working group. Let's keep the discussion going here as well!

[loochy]

Good to hear! It's a complex issue that needs proper expertise to work toward something better.

[gcharest]

Yes, security should be a constant and your security experts should be part of the team throughout the journey, not a checkbox at some point in your process!