About

• 1: OSPO
• 2: OSRB
• 3: Contact

1 - OSPO

What is OSPO?

OSPO (Open Source Program Office) is the organization responsible for managing open source within a company. Technology, legal, and infrastructure teams collaborate to establish and execute open source policies, and to manage community relationships.

SK Telecom’s OSPO bridges developers and the legal team. It supports developers in maximizing the benefits of open source, while managing the legal risks that open source usage brings around licensing and security. The goal is for open source adoption to be a strategic, responsible decision rather than just a technical choice.

Key Roles of SK Telecom’s OSPO

1. Strategic Planning

OSPO establishes and regularly refines the company’s open source policies, analyzes development teams’ usage patterns, and sets a mid-to-long-term roadmap so the organization can leverage open source systematically.

2. Education and Guidance

OSPO delivers regular open source training for developers and establishes clear policies and guidance on usage, contribution, and release. Compliance checklists and templates simplify the review process.

3. Community Management

OSPO encourages and supports developers’ contributions to external projects, while releasing SK Telecom’s internally developed technology as open source, managing those projects, and engaging external contributors.

4. Policy Execution

OSPO reviews license compliance when development teams use open source, and evaluates security vulnerabilities and IP issues. It also develops and operates automation tools such as ONOT to streamline recurring compliance work.

SK Telecom’s Open Source Decision-Making Structure

SK Telecom’s open source governance is a two-stage structure: OSPO (operations) and OSRB (decision-making). OSPO receives adoption, contribution, and release requests from development teams, conducts an initial review, and presents them to OSRB (Open Source Review Board). OSRB, made up of leaders from technology, legal, infrastructure, and security, conducts the final deliberation on license, security, and IP grounds and decides on approval.

Learn more about OSRB →

Guidance and Support Provided by OSPO

Using Open Source

Adopting external open source follows this process:

1. License identification and policy-fit review
2. Compatibility check against licenses already in use
3. Security vulnerability check
4. Approval and documentation (for future audits or disputes)

View Open Source Usage Guide →

Contributing to Open Source

Contributing to an external project is supported through this process:

1. Reviewing the target project’s license, community activity, and legal risk
2. CLA/DCO review and signing
3. Contributing code that complies with the project’s license and policy
4. Documenting the contributed code’s license and confirming IP protection

View Open Source Contribution Guide →

Releasing Open Source

Releasing internally developed technology follows this process:

1. Pre-approval review for core IP and security concerns
2. License selection (SK Telecom typically uses Apache 2.0)
3. Removing internal information and writing documentation
4. Public release on GitHub and community management

View Open Source Release Guide →

Contact and Communication

Email Contact

All inquiries regarding SK Telecom OSPO and open source management can be sent to opensource@sktelecom.com.

Online Channels

SK Telecom’s open source projects can be found on GitHub at https://github.com/sktelecom. Feedback such as bug reports and feature requests can be filed through each project’s Issues section.

View detailed contact information →

2 - OSRB

What is OSRB?

OSRB (Open Source Review Board) is a decision-making body made up of leaders from technology, legal, infrastructure, security, and IP to manage open source across the enterprise.

While OSPO (Open Source Program Office) handles open source operations and guidance, OSRB is the governance body responsible for major policy decisions and risk management. It systematically reviews license, security, and IP risks before deciding whether to approve new open source adoption or releases.

Core Roles of OSRB

1. Policy Establishment and Process Definition

OSRB establishes basic policies for usage, contribution, and release, defines license policy and compatibility guidelines, and sets security and IP policy. It also defines the open source review/approval process and the security vulnerability response process.

OSRB further defines the roles of OSPO, development teams, legal, and security teams through R&R (Roles & Responsibilities), so open source management stays consistent across the organization.

2. Risk Review and Approval

OSRB reviews risk across three areas and grants final approval.

• License review: Evaluating license type, compatibility, and risk level for new open source
• Security review: Pre-examining vulnerabilities, defining response measures, checking against security standards
• IP review: Deliberating patent, trademark, and copyright issues, and reviewing IP protection measures

3. Issue Management and Response

OSRB analyzes issues that arise during open source management and defines a rapid response. Legal disputes are handled together with the legal team, with external experts consulted as needed. Critical issues are reported to executives to finalize an enterprise-wide response.

SK Telecom’s OSRB Composition

Organizational Structure and Roles

SK Telecom’s OSRB is chaired by the IPR Team, with the DevOps, Security, and HR teams participating.

• IPR Team (chair): Reviews open source licenses, protects IP, checks legal compliance
• DevOps Team: Evaluates infrastructure/environment-related open source, reviews deployment and operations risk
• Security Team: Reviews security vulnerabilities, confirms compliance with security and information security policy
• HR Team: Runs open source training and capability development, supports open source culture, checks policy consistency

Regular Meetings and Decision-Making

OSRB holds monthly meetings to review the month’s open source activity, discuss major issues and risks, and refine policy and process. Long-term strategy, community contribution, and enterprise-wide compliance status are also reviewed. Emergency meetings are convened as needed for security issues, legal disputes, or policy violations.

Contact and Communication

All inquiries regarding SK Telecom’s OSRB and open source management can be directed to opensource@sktelecom.com. We respond within 2-3 business days.

For more detailed information, please refer to the following links:

• OSPO (Open Source Program Office) - Responsible for open source operations and guidance
• Contact - Additional contact information
• Compliance - Open source license notices and compliance information

3 - Contact

SK Telecom OSPO Contact

All open source-related inquiries and requests regarding SK Telecom’s products and services can be directed to OSPO (Open Source Program Office). OSPO is the dedicated organization responsible for enterprise open source management, responding to inquiries on various topics including license review, security assessment, policy consultation, and technical support.

Email Contact

SK Telecom OSPO Email Address: opensource@sktelecom.com

You can inquire about various topics via email:

• Open Source Adoption: You can request license review, security assessment, and compliance verification when planning to adopt external open source in your products.
• Open Source Contribution: You can request CLA/DCO review, legal risk assessment, and contribution approval when contributing to external open source projects.
• Open Source Release: You can consult on project evaluation, license selection, and release preparation when planning to publicly release technology developed at SK Telecom as open source.
• Policy and Guidance: You can consult on open source policies, usage/contribution/release guidance, license understanding, and compliance processes.
• Technical Support: You can consult on technical issues such as open source management tool usage, automation methods, and security vulnerability response.

Response Time: We respond within 2-3 business days.

Online Channels

GitHub

All of SK Telecom’s open source projects are managed through our GitHub Organization.

GitHub Organization: https://github.com/sktelecom

You can engage in the following activities in each project’s repository:

• Issues: Report bugs, request features, ask questions, and make suggestions. SK Telecom’s development team regularly monitors and responds.
• Discussions: Engage in general discussions, share ideas, and participate in community conversations.
• Pull Requests: Contribute code, fix bugs, and suggest improvements to directly participate in projects.

Security Issue Reporting

If you discover a security vulnerability in an open source project, we recommend not reporting it as a public issue. Instead, please email the security contact specified in the project’s README or SECURITY.md file directly. This prevents vulnerabilities from being exploited before patches are distributed to other users.

When reporting security issues, please include:

• Detailed description of the vulnerability
• Reproduction method (PoC, Proof of Concept)
• Impact assessment
• Proposed solution (if available)

Before You Inquire

FAQ and Guidance Documents

Reviewing the following documents first can help you find answers to most common questions:

• Open Source Usage Guide: Procedures and precautions when adopting external open source in your products
• Open Source Contribution Guide: Process and precautions when contributing to external open source projects
• Open Source Release Guide: Procedures for publicly releasing SK Telecom technology as open source
• OSPO Page: OSPO roles, provided tools, and publicly released projects
• OSRB Page: Open source decision-making structure and review criteria

Common Questions

Q: Can we use a specific open source?

• A: Please refer to the Open Source Usage Guide or contact opensource@sktelecom.com.

Q: We want to publicly release code our team developed as open source.

• A: Please read the Open Source Release Guide first, then apply for OSPO consultation.

Q: We want to contribute code to an external open source project.

• A: Review the Open Source Contribution Guide, then obtain OSPO’s review.

Q: What is a license?

• A: Refer to the license explanation on the OSPO page or decision criteria on the OSRB page.

Q: What open source projects has SK Telecom released?

• A: You can check on our Projects page.

Related Organizations

Internal Governance Organizations

SK Telecom’s open source governance is operated through collaboration between OSPO and OSRB:

• OSPO (Open Source Program Office): Executes open source policies, provides guidance, and supports developers
• OSRB (Open Source Review Board): Establishes open source policies, makes decisions, and manages risks

For more detailed governance information, please refer to the About page.