Migration Targets and Compliance Frameworks
The Open Source Summit Europe recently shifted focus toward the operational mechanics of open source sovereignty, with attendees discussing specific migration targets, security rules, and management metrics. The event highlighted how digital sovereignty is becoming a global priority, extending from Canada to Sierra Leone, according to Nithya Ruff of the Linux Foundation and Johan Linaker of the Research Institutes of Sweden.
During their presentation titled "Geopolitics, Sovereignty, and the Fight to Stay Open," Ruff and Linaker emphasized that sovereignty concerns are not limited to specific regions but are relevant worldwide. Their remarks underscored the growing international interest in maintaining control over digital infrastructure through open source software (OSS) adoption.
Compliance with regulatory frameworks emerged as a central theme, particularly regarding the European Union's Cyber Resilience Act (CRA). Speakers from Dell and Microsoft detailed efforts within the Open Source Security Foundation (OpenSSF) to develop component catalogs designed to help organizations meet CRA requirements. These initiatives specifically reference CRABFOSC, a framework aimed at standardizing compliance processes for software vendors.
The urgency of these compliance measures is driven by recent regulatory deadlines. The EU's Cyber Resilience Act began enforcing reporting obligations for actively exploited vulnerabilities last month. The main requirements of the act are scheduled to apply fully from December 2027, prompting companies to accelerate their preparation strategies.
Global Adoption Models and Legislative Approaches
International perspectives on open source implementation were presented through various national models. Éléonore Daxhelet presented the 2026 report from the EU's Open Source Observatory (OSOR), which highlighted significant global engagement with OSS policies.
The report noted interest from diverse jurisdictions, including Diaa from Ukraine’s Ministry of Digital Transformation and legislative developments within Swiss EMBAG. These examples illustrate how different governments are approaching the integration of open source into their public sector operations.
Kazuki Imamura from Japan’s Innovation Platform Agency (IPA) introduced the "Japan-Type OSS Model." This approach was developed after analyzing hundreds of companies across seven countries and over 30,000 GitHub repositories. The analysis revealed a discrepancy between rhetoric and practice: few organizations are actually implementing open source solutions despite publicly discussing them.
Imamura explained that Japan’s strategy involves the public sector cultivating efforts by local commercial vendors. A key component of this model is an emphasis on machine-readable legislation, which aims to streamline the legal and technical integration of open source tools within government systems.
Measuring Value and Strategic Migration
Beyond policy and compliance, the summit addressed how organizations can quantify the benefits of open source initiatives. Dr. Dawn Foster of Fast Wonder presented a "Strategic Approach To Demonstrating the Value of OSS Efforts." Her presentation utilized Linux Foundation reports on measuring OSPO (Open Source Program Office) value and guidance from the CHAOSS Project, which focuses on Community Health Analytics in Open Source Software.
Foster provided pragmatic advice for introducing FOSS (Free and Open Source Software) programs within organizations. She advised professionals to engage directly with users and develop methods for explaining the strategic value of open source to executives, ensuring that technical benefits are translated into business language.
Regional Sovereignty Initiatives
Specific regional governments are already acting on sovereignty concerns, moving away from reliance on US cloud services. Multiple talks at the summit referenced Schleswig-Holstein’s moves in this direction, highlighting a broader trend among European states to diversify their infrastructure providers.
Berlin has taken more concrete steps through its Strategy for Digital Sovereignty. The city government is working with PwC to manage its migration process, marking a sign that large consultancies see significant business opportunities in FOSS adoption.
As part of this strategy, Berlin aims to make 70 percent of the software stack on administrative workstations open source. This target illustrates the scale of change required for municipal governments seeking greater control over their digital environments.