Berlin's workstation target shows open source sovereignty gets down to boring business of making it work

Security and compliance plans

Sessions included “Open Source Security as the Foundation of European Sovereignty” and a discussion of ORBIT Launchpad, a due-diligence effort connecting manufacturers and open source. Speakers from Dell and Microsoft described OpenSSF work on catalogs of open source components intended to help companies meet Cyber Resilience Act requirements.

Sovereignty beyond the EU

Éléonore Daxhelet presented the 2026 report from the EU’s Open Source Observatory, known as OSOR. She stressed that the issue extends beyond the EU, highlighting Diaa from Ukraine’s Ministry of Digital Transformation and Switzerland’s EMBAG legislation.

Talks also referred to Schleswig-Holstein’s moves away from the US cloud. A speaker named Brok pointed attendees to SUSE’s online Cloud Sovereignty Framework Self Assessment, which can give organizations an indication of their position in ten minutes.

Measuring open source value

Dr Dawn Foster of Fast Wonder presented a talk on demonstrating the value of open source work. She began with the Linux Foundation report on measuring the value of open source program offices, then shared resources from the CHAOSS Project, short for Community Health Analytics in Open Source Software.

Her presentation linked to CHAOSS Practitioner Guides covering viability metrics, organizational value, and research into software impact. The material offered organizations several ways to assess and explain the results of their open source efforts.

Berlin sets migration targets

Two people involved in Berlin’s Strategy for Digital Sovereignty discussed the city government’s migration work with PwC. Berlin is both a city and a German state, and has more residents than Schleswig-Holstein.

The plan aims for 70 percent of the software stack on administrative workstations to be open source by 2032. The presentation also covered governance, dependencies, and measures, alongside a bureaucratic planning process and the summit’s only mention of key performance indicators.