Open Source in Finance Forum London 2025

Financial institutions increasingly rely on open source software - but vulnerabilities and risk clusters such as Log4j, the XZ Utils backdoor, and the recent 500% YoY spike in malicious Open Source packages reveal that OSS dependencies import dramatic risk to enterprises. New regulations like NIS2 and the Cyber Resilience Act mandate a clear understanding and inventory of Open Source components and their risks, making up to 98% of overall system code. Despite millions invested in cybersecurity tools, financial institutions struggle to understand, measure and mitigate their open source risk exposure, leaving them vulnerable and uncertain about ROI to invest in Open Source. OSPOs, often are just small teams, and grapple manually with vast, complex OSS landscapes - creating blind spots in audits, compliance, and regulatory readiness. Using AI for Open Source Security Economics changes this. Open Source as a Balance Sheet empowers OSPOs, cybersecurity, and financial leaders to turn open source from an unknown liability into quantifiable, strategic financial assets.