IT Promotion Agency Japan Open source initiative in Japan 2025-04-25 Kenji Hiramoto Digital infrastructure Center IT Promotion Agency, Japan 

Japan Develop the foundation for a digital society on a global level by 2030. 2 IPA Digital Infrastructure Center Digital Infrastructure Center Digital Infrastructure Digital Transformation Software Engineering Innovation Anyone can anytime use infrastructure and resources Anyone can transform their business to the cutting edge one Anyone can realize their ideas Rule Tool Methodology Data Use Cases Courseware Security Human Resource Dev. AI Data Spaces Open Source 

Japan  IPA was a core hub for OSS, promoting OSS together with the Ministry of Economy, Trade and Industry.  Due to a change of political situation, the budget for OSS was eliminated, and the center and all initiatives were abolished.  In 2023, OSS initiatives were reactivated. 3 History of OSS in Japan 

Japan There has to be an understanding that "without open source, everyday life is not possible". 4 Everyone use OSS, But no one know it. Synopsys [2023]OSS security and risk analytics report https://www.synopsys.com/content/dam/synopsys/japan/software-integrity/reports/rep- ossra-2023-jp.pdf Percentage of code base that includes open source Percentage of open source code in the entire code base Percentage of code base that contains one or more vulnerabilities Percentage of code base that contains high-risk vulnerabilities 

Japan  Many companies have established security policies and data management policies, and many companies have also established policies for using external services.  In addition, many companies are creating AI policies.  On the other hand, few companies have policies regarding the use of OSS. 5 OSS policy 0% 20% 40% 60% 80% 100% System development Open source External service Security Policy doc(Refer standards) Policydoc.(Origimnal) No policy doc. Don’t know other 

Japan 6 OSPO(Open Source Program Office) We have OSPO We are studying OSPO No action I don’t know Other All User(except financial sector) User(financial sector) IT service provider Municipalities (water div.) 

Japan 7 Participation to the OSS community All User(except financial sector) User(financial sector) IT service provider Municipalities (water div.) Participating in the international community as a company Participating in the domestic community as a company No action as a company I don’t know Others 

Japan 8 Barrier to use OSS User(except financial sector)(n=302) User(financial sector)(n=203) IT service provider(n=117) Municipalities (water div.)(n=176) All(n=798) There are no policy in my company. No way to get information about OSS (Products, Specification, License, Security) No official OSS site from public authorities Anxious about maintenance and operation Refuse from users No commercial support I don’t know Other No problem 

Japan 9 Configuration management User(except financial sector)(n=302) User(financial sector)(n=203) IT service provider(n=117) Municipalities (water div.)(n=176) All(n=798) Use configuration tools Use SBOM There is a person responsible for configuration management. There is a documents for configuration management. I don’t know Other No action 

Japan 10 Boost OSS challenges 

 GDC is important strategy for achieving the SDGs by 2030. 11 UN Global Digital Compact（GDC） Digital Public Infrastructure（DPI） Industry Administration Personal Infrastructure for Trust Digital Public Goods（DPG） （Open source、Open data、open AI、Open standard） PF service DS DS DS DS PF service Digital skill Competency Data governance Interoperability（Technology、Rule、Standard） Security, Intellectual property and privacy Digital transformation / Innovation Future society Trustworthy data International International International Company Municipality 個人 Human right International cooporation Connectivity（Internet） AI ②Digital economy ④Data Governance ⑤AI governance ①Digital Devide ③Digital Space 

Japan We should - help the governments and companies understand OSS - provide sufficient information related to OSS Riding the wave of Digital Public Goods (DPG) and Digital Public Infrastructure (DPI) IPA reboot the OSS initiatives in the Digital Public Infrastructure one. • Gather the data about OSS • OSS Promotion(Information Hub) • OSS community 12 Challenges 

13