Open Source Program Office at CMS

An open source program office (OSPO) serves as the center of competency for an organization's open source operations and structure. It is responsible for defining and implementing strategies and policies to guide these efforts. The function of the CMS OSPO is: 

“Establish and maintain guidance, policies, practices, and talent pipelines that advance equity, build trust, and amplify impact across CMS, HHS, and Federal Open Source Ecosystems by working and sharing openly.” 

CMS Open Source insights and resources

The OSPO also provides guidance and produces reports on current events.

• Open Source Program Office: XZ Vulnerability Report 
  • An overview of the XZ Open Source Supply Chain attack and recommendations for our Open Source community at CMS.

CMS OSPO in the news

• Strengthening government engagement with the OSS community @ Code for America Summit 2024
• Biden-⁠Harris Administration Releases End of Year Report on Open-Source Software Security Initiative
• Office of the National Cyber Director Requests Public Comment on Open-Source Software Security and Memory Safe Programming Languages
• Repository Cohorts talk @ Open Source Summit North America 2024
• Poster Session @ PyCon May 2024
• Establishing a Repository Baseline Talk @ Open Source Summit North America 2024
• US Digital Response Case Study: How One Federal Agency Worked to Release Open Source Software Responsibly
• Managing Federal CHAOSS at CMS.gov - CHAOSScast
• Inside CMS’ Groundbreaking Open Source Program Office
• Innersource Summit 2023: Innersource to Open Source Journey in Government
• OSPOs in Highly Regulated Environments Panel Discussion @ Open Source Summit EU 2023
• TODOGroup OSPOlogy March 2023 Meeting
• OSPOs for Good Summit 2023 @ United Nations Headquarters NYC
• Open Source and the Digital Service at CMS.gov @ All Things Open 2022
• Repodiving into Open Source at CMS.gov

Acknowledgements

Our work has been preceded by and developed in collaboration with many members of the Federal Open Source community, including but not limited to: 

• The United States Digital Service (USDS.gov) 
• The Department of Health and Human Services (HHS.gov) 
• The Digital Service at the Centers for Medicare & Medicaid Services (CMS.gov) 
• The United States Cybersecurity and Infrastructure Security Agency (CISA.gov) 
• 18F at The United States General Services Administration (18f.gsa.gov)
• The United States DigitalCorps (digitalcorps.gsa.gov) 
• The CodingItForward Fellowship Program (codingitforward.com) 
• The USDigitalResponse.org Volunteer Community

Thank you all for your support and contributions.

CMS Open Source Policy and Repositories

We adhere to the CMS Open Source Policy. You can find our OSPO repositories at https://github.com/DSACMS. If you have any questions, please send us an email.