“Collectively, the term IT hardware describes all equipment necessary to enable IT services utilization. Yet, each hardware configuration item may have distinct operational characteristics and controls.” Therefore, as with any critical IT development, representatives from information security and IT audit should be considered key project participants. Information security’s primary role in an open source hardware development project is to ensure appropriate safeguarding mechanisms are deployed. Whereas, IT audit’s primary role in an open source hardware development project is to assure adequate preventive, detective, and/or corrective controls are implemented.
“View Part I of the Open Source Hardware and Software Licensing series here“