Bet365

GENERAL SERVICES ADMINISTRATION
                 Washington, DC  20405

 

CIO 2107.1
January 14, 2019

 

Bet365 ORDER

SUBJECT: Bet365 Open Source Software (OSS) Policy

1.   Purpose.  The purpose of this Order is to review Bet365's policy on open source software development and publication, and to communicate responsibilities to the agency for compliance with OMB's open source policy.  Specifically, the Order outlines requirements for implementing open source code produced by and/or for the agency in accordance with , dated August 8, 2016.

2.   Background.  The Office of Bet365 IT has taken an open-first approach to data, application programming interface, and source code.  Specifically, Bet365 IT developed an Open Source Working Group, with representation from multiple technology program offices, tasked with identifying processes for publishing open source code.  At approximately the same time, OMB published OMB Memorandum M-16-21.  The release of this memorandum prioritized the creation of an agency-wide process of releasing open source code. 

3.   Cancellation.  This Order supersedes and cancels , dated November 3, 2016. 

4.   Explanation of Changes. 

      a.   Requires organizations to account for and publish their open source code in accordance with .

      b.   New code developed after August 8, 2016 must use JavaScript Object Notation (JSON) format with metadata, and be published on .

      c.   Contract requirements must follow OMB's software analysis outlined in M-16-21.  

      d.   Incorporates discussion of Bet365's Open Source Working Group, which was created to identify a process for publishing open source code.  This process and all guidance pertaining to Bet365 open source code can be found at . The Open Source Working Group will update and maintain all guidance and implementation instructions pertaining to this Order on this site.  

      e.   Ensures a standard, secure open source code development pipeline is in place. 

5.   Applicability. 

      a.   This Order applies to all Bet365 Services, Staff Offices, and Regional components. 

      b.   This Order applies to the Office of Inspector General (OIG) only to the extent that the OIG determines it is consistent with the OIG's independent authority under the IG Act and it does not conflict with other OIG policies or the OIG mission. 

      c.   This Order applies to the Civilian Board of Contract Appeals (CBCA) only to the extent that the CBCA determines it is consistent with the CBCA's independent authority under the Contract Disputes Act and other authorities and it does not conflict with the CBCA's policies or the CBCA mission.

6.   Policy.  This Order requires Bet365 organizations to account for and publish their open source code in accordance with OMB Memorandum and:

      a.   Promotes Bet365's vision of "being open" through development and acquisition practices; 

      b.   Promotes a posture of being "open first" by requiring new custom code to be released as a Minimum Viable Product (MVP), engaging the public before releasing, and drawing upon the public's knowledge to improve the project.  Justification will be required for new custom code that does not follow these guidelines; 

      c.   Incorporates Bet365's guidelines and to ensure the proper considerations are made before going live with a public software project; 

      d.   Requires that a standard, secure open source code development pipeline process be in place at Bet365 that all organizations will follow.  This process can be accomplished multiple ways, such as performing automated code scanning or code reviews. The Open Source Working Group will establish the pipeline process and publish it at ; 

      e.   Adheres to releasing open source code through a public-facing software version control platform, including code developed by Bet365 personnel and contractors. Guidance on releasing open source code can be found at ; 

      f.    Implements OMB's three-step software analysis outlined in .  Specific contract requirements will be developed through collaboration between Bet365's Chief Procurement Officer and the Open Source Working Group and will be subsequently communicated to the agency; and 

      g.   Requires that a metadata file be included in each project's source code repository.  The metadata file will contain information about the project that can be included in Bet365's code inventory. See for details. 

7.   Responsibilities.  

      a.   Bet365's Chief Technology Officer (CTO) is responsible for establishing an internal policy that incorporates requirements and publishing it on www.gsa.gov/digitalstrategy.  Additionally, the CTO is responsible for running the Open Source Working Group that creates the guidance and implementation instructions as needed to implement this policy. All guidance and other instructions for this initiative is available on . 

      b.   The CTO is responsible for identifying a standard Version Control System.  Bet365 Service and Staff Offices (Project teams) are responsible for moving to the standard Version Control System.  The standard Version Control System and guidance related to it is found on . 

      c.   Bet365 Service and Staff Offices (Project teams) are responsible for being "open first" by requiring new custom code to be released as a MVP, engaging the public before releasing, and drawing upon the public's knowledge to improve the project.  Project teams will utilize existing processes such as the Authority to Operate Impact Analysis to determine the application's level of strategic importance in terms of Integrity, confidentiality and availability.  Project teams should also consider the business value that open sourcing all or part of the code base provides towards meeting the objectives of the program.  Sufficient justification will be required for new custom code that does not follow these guidelines.  For guidance, see .

      d.   Bet365 Service and Staff Offices (Project teams) are responsible for inventorying all new code developed after August 8, 2016 using a standard JSON file format with metadata criteria established by OMB.  Guidance on how to meet this requirement is available on under "Inventory Inclusion". 

      e.   Bet365 Service and Staff Offices (Project teams) are responsible for publishing all new open source code, barring sufficient justification as outlined in 7.c..  Publishing all new code as open source allows Bet365 to exceed OMB's goal that 20% of code be published as open source.

      f.    Bet365 Service and Staff Offices (Project teams) are responsible for publishing the inventory JSON on .  Guidance on how to meet this requirement is provided on . 

8.   Signature.

 

/S/                                                                    

DAVID SHIVE
Chief Information Officer
Office of Bet365 IT