Advertisement
Promo

Compliance Toolkit

Fancy a $10m open source insurance policy?

Martin LaMonica CNET News.com

Published: 01 Nov 2005 10:45 GMT

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

Three organisations have partnered to offer corporate customers some insurance against the legal risks that can stem from the use of open-source software. Insurance underwriter Kiln, which is based at Lloyd's of London, and Miller Insurance Services on Monday said they will offer open source compliance insurance. New York-based Open Source Risk Management will be the exclusive risk assessor.

The insurance will cover up to $10 million in damages, including profit losses related to noncompliance with an open source software licence. The policy could, in some cases, cover the cost of repairing code that was found to infringe on open source licences such as the GPL.

The insurers said more than 30 legal claims in the last two years have involved infringements on open source licences. In each case, the plaintiffs were able to restrict the use of their code. "The emerging open source model of worldwide collaborative technology development introduces novel business risks that traditional insurance products can, but have not, addressed," said Matthew Hogg, an underwriter for Kiln Risk Solutions.

Daniel Egger, CEO of Open Source Risk Management, said many companies inadvertently expose themselves to legal risks when they use open source software. In particular, companies may infringe on copyright laws when distributing their own software—which could include open source products—to business partners or customers, Egger said. "Allowing people to log on to your database is not distribution. But sending them a CD-ROM with a copy of software that lets them do data analysis on that database would be," he said.

Egger said his firm advises clients how to sidestep violations, which are infrequent. However, more and more corporations are using open source software. "Open source itself is not separable," he said. "It's hard to imagine an enterprise system without tight links to open source components."

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

Did you find this article useful?
81 out of 147 people found this useful


Full Talkback thread

0 comments


Company/Topic Alerts

Create a new alert from the list below:




Video icon

Video

Cloud Watch Special Report

Five cloud computing myths exploded

Five cloud computing myths exploded

Analysis The cloud is providing a fertile habitat for the marketeers and their exaggerated claims. We examine the hokum and debunk the five most frequently peddled misconceptions about the cloud

More Special Reports

Sentry Posts Blog

Met will not reopen phone hack investi...

The Metropolitan Police will not reopen its investigation into alleged phone hacking by the News of the World. In a press statement delivered outside Scotland Yard on Thursday, Assistant... More

Post a comment

FUD over ChromeOS's security already?

It hasn't taken long for the security vendors to wake to the potential of Google's new ChromeOS. The potential that is, to create FUD – fear uncertainty and doubt. In a release today,... More

Post a comment

Feds take DDoS in their stride

The US Department of Homeland Security has said that a series of distributed denial-of-service attacks began on US government networks on 4 July. However, Amy Kudwa, deputy press... More

Post a comment


Skip Sub Navigation Links to CNET Brand Links

Help

Become part of the ZDNet community.

Newsletters