Open-Source-Software and National Sovereignty

The shift from proprietary to OSS solutions is accelerating, particularly in Europe, where digital sovereignty and data residency requirements are becoming increasingly important. Organizations are adopting OSS not only for cost savings but also to avoid vendor lock-in and gain greater control over their technology stacks. This trend is further reinforced by new regulatory standards, such as the EU Cyber Resilience Act (CRA), which holds companies legally accountable for the security of open-source components in their products. As a result, businesses must prioritize the security of OSS to ensure compliance, protect their innovations, and maintain public trust.

The integration of AI into OSS ecosystems introduces both opportunities and risks. While AI can enhance the development and security of OSS, it can also be exploited by malicious actors to identify and exploit vulnerabilities at scale. Therefore, securing OSS is not just about protecting existing systems but also about enabling future innovation in a safe and sustainable manner.

OSS Security and National Sovereignty

National sovereignty in the digital age is increasingly defined by a country’s ability to control its critical digital infrastructure. Open source software plays a pivotal role in this context, as it offers governments and organizations the ability to inspect, modify, and adapt software to their specific needs without relying on foreign proprietary vendors. This independence is crucial for protecting sensitive data, ensuring the resilience of public services, and safeguarding national security.

In conclusion, the security in OSS is not just a technical issue—it is a strategic imperative for both digital innovation and national sovereignty. As OSS continues to underpin critical infrastructure and drive technological progress, ensuring its security is essential for fostering innovation, protecting national interests, and maintaining public trust.

Part 1: kl. 9:00 – 10:15: What are the stakes? Three key-note speakers:

Diomidis Spinnelis, Athens University of Economics and Business ; Håkon Wium Lie; Demosthenes Ikonomou, ENISA; Cecilia Bonefeld-Dahl, Director General of DIGITALEUROPE.

Short discussion.

Part 2: How to address the challenges and the opportunities with the OSS

kl. 10:30-11:10 The stakes for policy-makers, academia and industry – panel discussion

Moderator: Professor Basel Katt, – Head of Department of Information Security and Communication Technology (NTNU)

Panel: Demosthenes Ikonomou (ENISA), Harald Næss (Director, NSM), Cecilia Bonefeld-Dahl, Digital Europe, Director from the Research Council of Norway, Diomidis Spinnelis (Professor), Magnus Jorem (Counsellor, Mission of Norway to the EU) (tbc), Siri Bromander (Mnemonic)

kl. 11:10- 11:45 Working in groups with specific question for the Government, businesses and developer community.