Advertisement
Promo

Compliance Toolkit

Fancy a $10m open source insurance policy?

Martin LaMonica CNET News

Published: 01 Nov 2005 10:45 GMT

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

Three organisations have partnered to offer corporate customers some insurance against the legal risks that can stem from the use of open-source software. Insurance underwriter Kiln, which is based at Lloyd's of London, and Miller Insurance Services on Monday said they will offer open source compliance insurance. New York-based Open Source Risk Management will be the exclusive risk assessor.

The insurance will cover up to $10 million in damages, including profit losses related to noncompliance with an open source software licence. The policy could, in some cases, cover the cost of repairing code that was found to infringe on open source licences such as the GPL.

The insurers said more than 30 legal claims in the last two years have involved infringements on open source licences. In each case, the plaintiffs were able to restrict the use of their code. "The emerging open source model of worldwide collaborative technology development introduces novel business risks that traditional insurance products can, but have not, addressed," said Matthew Hogg, an underwriter for Kiln Risk Solutions.

Daniel Egger, CEO of Open Source Risk Management, said many companies inadvertently expose themselves to legal risks when they use open source software. In particular, companies may infringe on copyright laws when distributing their own software—which could include open source products—to business partners or customers, Egger said. "Allowing people to log on to your database is not distribution. But sending them a CD-ROM with a copy of software that lets them do data analysis on that database would be," he said.

Egger said his firm advises clients how to sidestep violations, which are infrequent. However, more and more corporations are using open source software. "Open source itself is not separable," he said. "It's hard to imagine an enterprise system without tight links to open source components."

  • Email
  • Trackback
  • Clip Link
  • Print friendlyPrint with EPSON

Did you find this article useful?
81 out of 147 people found this useful


Full Talkback thread

0 comments


Company/Topic Alerts

Create a new alert from the list below:




Video icon

Video

Cloud Watch Special Report

Five cloud computing myths exploded

Five cloud computing myths exploded

Analysis The cloud is providing a fertile habitat for the marketeers and their exaggerated claims. We examine the hokum and debunk the five most frequently peddled misconceptions about the cloud

More Special Reports

Sentry Posts Blog

Official Organizations Losing Data

How does this article from earlier today make you feel? How many more government, health service, or military officials are going to lose pen drives, DVDs, USB hard disks and even entire... More

1 comment

Twitter hack was DNS redirect

Twitter has said an attack on Thursday which took the site offline for many users was the result of a DNS redirect. A group calling itself the Iranian Cyber Army redirected users... More

1 comment

McKinnon lawyers seek judicial review

Lawyers seeking a judicial review for Nasa hacker Gary McKinnon lodged fresh evidence of his psychiatric state at the High Court on Thursday. Karen Todner, McKinnon's solicitor,... More

1 comment


Skip Sub Navigation Links to CNET Brand Links

Help

Become part of the ZDNet community.

Newsletters