Skip to main content

Educational Output Best Practice

training-manager This is a completed example of the three outputs generated by the agent. Use it to check missing items by comparing it with your output/training/ file.

Go to reference: Education System Chapter Guide

Open source education curriculum​

Document: curriculum.md

  • Company Name: Tech Unicorn
  • Version: 1.0
  • Written date: 2026-03-23
  • Basic policy: output/policy/oss-policy.md
  • Education type: Mixed (online self-paced + offline group)
  • Proof Level: For certification submission (OpenChain self-certification)
Related Standards
- 5230 §3.1.2·§3.1.3
- 18974 §4.1.2·§4.1.3

Status of training targets​

OccupationPersonnelEducation priorities
Developer1,000 peopleEssential (Advanced)
Operations100 peopleRequired (default)
Administrator10 peopleRequired (Policy/Risk)
Total1,110 people—

Curriculum by occupation​

A. Developer course (1,000 people)​

Related Standards
- 5230 §3.1.2.1
- 18974 §4.1.2.1

Goal: License identification, SBOM generation, and vulnerability response autonomously performed in practice

moduleSubjectsformtimeRequired/Optional
M1Open source licensing basics (MIT·Apache·GPL·LGPL·AGPL)Online Autonomy2hRequired
M2Understanding Tech Unicorn open source policyOnline Autonomy1hRequired
M3SBOM creation practice (Syft, CycloneDX)offline set3hRequired
M4vulnerability scanning and CVE response practiceoffline set2hRequired
M5License obligations by distribution channel (SaaS, App Store, Embedded)Online Autonomy1.5hRequired
M6Open source contribution processOnline Autonomy1hSelect
Total——10.5h (required 9.5h)—

Completion criteria: Completion of all required modules + 70 points or higher in online evaluation Offline meeting: Once a quarter, 50 people per team

B. Administrator course (10 people)​

Related Standards
- 5230 §3.1.2.1
- 18974 §4.1.2.1

Goal: Securing policy approval, risk judgment, and compliance reporting capabilities

moduleSubjectsformtimeRequired/Optional
M1Open source compliance overview and risksOnline Autonomy1.5hRequired
M2Tech Unicorn open source policy and KPIOnline Autonomy1hRequired
M3ISO/IEC 5230·18974 Self-certification procedureoffline set2hRequired
M4Risk management and incident response systemoffline set1.5hRequired
M5External delivery/supply chain security managementOnline Autonomy1hRequired
Total——7h—

Completion criteria: Completion of all modules + Attendance of offline workshop Offline Meeting: Once a year, for all administrators

C. Operation/Other Courses (100 people)​

Related Standards
- 5230 §3.1.3.1
- 18974 §4.1.3.1

Goal: Raise awareness of open source use, understand basic rules

moduleSubjectsformtimeRequired/Optional
M1What is open source (awareness training)Online Autonomy30minRequired
M2Summary of the company's open source policyOnline Autonomy20minRequired
M3Violations and reporting proceduresOnline Autonomy10minRequired
Total——1h—

Completion Criteria: Completion of all modules (no assessment)

Planning your training schedule​

branchtargetCourseRemarks
2026-Q2Operation 100 peopleC course (online)Bulk opening in May
2026-Q210 managersCourse B (online + offline)June group training
2026-Q2~Q31,000 developersCourse A M1·M2·M5·M6 (online)250 people per quarter
2026-Q3250 developers (1st round)Course A M3·M4 (offline)50 people × 5 times
2026-Q4250 developers (2nd round)Course A M3·M4 (offline)50 people × 5 times
2027-Q1500 developers (3rd and 4th rounds)Course A M3·M4 (offline)50 people × 10 times

Training completion management​

  • Completion record: output/training/completion-tracker.md
  • Storage of evidence: Certificate of completion/attendance book → Stored by the person in charge (in preparation for submission of OpenChain certification)
  • Those who have not completed the course: Complete the supplementary course within 1 month after the end of the quarter
  • Renewal cycle: Retake once a year (frequently when policy changes)

Training Completion Tracking Sheet​

Document: completion-tracker.md

  • Company Name: Tech Unicorn
  • Version: 1.0
  • Written date: 2026-03-23
  • Proof Level: For certification submission (OpenChain self-certification)
  • Management person in charge: DevOps team open source person in charge
Related Standards
- 5230 §3.1.2·§3.1.3
- 18974 §4.1.2·§4.1.3

How to use​

  • Completion date: Based on course completion date (YYYY-MM-DD)
  • Status: completed / In Progress / Not Completed
  • Proof: Enter certificate file name or attendance list number
  • OpenChain When submitting certification, submit this sheet + supporting file in batches

A. Developer course (target: 1,000 people)​

Below is a sample record. Please add a row for actual completion.

NameDepartmentOccupationM1 Online (2h)M2 Online (1h)M3 Offline (3h)M4 Offline (2h)M5 Online (1.5h)All Soo-il LeestatusProof
Hong Gil-dongPlatform Development TeamDeveloper✓✓✓✓✓2026-09-15DoneCERT-DEV-001
Cheolsu KimCloud Development TeamDeveloper✓✓——✓—In progress—
(name)(Department)DeveloperMiisu—

Summary of completion status

Itemfigures
total target1,000 people
Done0 people
In progress0 people
Miisu1,000 people
completion rate0%

B. Administrator course (target: 10 people)​

namePositionM1 Online (1.5h)M2 Online (1h)M3 Offline (2h)M4 Offline (1.5h)M5 Online (1h)All Soo-il LeestatusProof
Younghee LeeDevOps Team Leader✓✓✓✓✓2026-06-30DoneCERT-MGR-001
(name)(position)Miisu—

Summary of completion status

Itemfigures
total target10 people
Done0 people
In progress0 people
Miisu10 people
completion rate0%

C. Operation/Other Courses (Target: 100 people)​

nameDepartmentOccupationM1 Awareness Training (30min)M2 Policy Summary (20min)M3 reporting procedure (10min)Soo-il LeestatusProof
Jisu ParkIT Operations TeamOperations✓✓✓2026-05-20DoneCERT-OPS-001
(name)(Department)OperationsMiisu—

Summary of completion status

Itemfigures
total target100 people
Done0 people
In progress0 people
Miisu100 people
completion rate0%

Total completion status (integrated)​

OccupationtargetDonecompletion rateGoal
Developer1,000 people0 people0%100%
Administrator10 people0 people0%100%
Operations100 people0 people0%100%
Total1,110 people0 people0%100%

Policy KPI: Open source-related occupations Completed at least once a year (output/policy/oss-policy.md §3)

Change history​

versionDateChangesPosted by
1.02026-03-23 ​​Originally writtenDevOps Team Open Source Manager

List of free educational resources​

Document: resources.md

  • Company Name: Tech Unicorn
  • Version: 1.0
  • Written date: 2026-03-23
Related Standards
- 5230 §3.1.2·§3.1.3
- 18974 §4.1.2·§4.1.3
  • Use the free resources below in conjunction with online self-study modules (A·B·C courses)
  • The certificate issuance process can be submitted directly as proof of OpenChain certification.

1. OpenChain Official Training Materials​

ResourcestargetformCertificateLink
OpenChain e-LearningAll occupationsOnline AutonomyNonehttps://www.openchainproject.org/resources
OpenChain CurriculumDeveloper/AdministratorSlides/DocumentsNonehttps://github.com/OpenChain-Project/curriculum
OpenChain Reference MaterialsAdministratordocumentNonehttps://www.openchainproject.org/resources

Curriculum connection: Developer M1·M2, Administrator M1·M2 supplementary materials

2. Linux Foundation Course​

Course nameCourse CodetargettimeCertificateLink
Open Source Compliance in the EnterpriseLFC193Developer/Administrator~3hAvailable (free)https://training.linuxfoundation.org/training/open-source-compliance-in-the-enterprise/
Open Source Licensing Basics for Software DevelopersLFD106xDeveloper~3hAvailable (free)https://training.linuxfoundation.org/training/open-source-licensing-basics-for-software-developers/
Secure Software Development FundamentalsLFD121Developer~12hAvailable (free)https://training.linuxfoundation.org/training/developing-secure-software-lfd121/
Kubernetes and Cloud Native Security Associate—Operations—Paid—

Curriculum Linkage:

  • LFC193 → Developer M2, Administrator M1·M2 key data
  • LFD106x → Developer M1 core data
  • LFD121 → Developer M4 supplementary material

Use of certificate: LFC193·LFD106x certificate can be used as proof of submission of OpenChain self-certification

3. SPDX Education​

ResourcestargetformLink
SPDX Specification official documentDeveloperdocumenthttps://spdx.github.io/spdx-spec/
SPDX Introductory GuideDeveloperdocumenthttps://spdx.dev/learn/
SPDX How to use ToolsDeveloperDocuments/Toolshttps://tools.spdx.org/

Curriculum Link: Developer M3 (SBOM Creation Practice) Reference Materials

ResourcestargetLink
NVD (National vulnerability Database)Developer/Administratorhttps://nvd.nist.gov/
OSV (Open Source Vulnerabilities)Developerhttps://osv.dev/
CISA Known Exploited VulnerabilitiesAdministratorhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog

Curriculum connection: Developer M4, Administrator M4

5. Tools and Practice Materials​

Tools/MaterialsUseLink
Syft (Anchor)SBOM creation practicehttps://github.com/anchore/syft
Grype (Anchor)vulnerability scanning practicehttps://github.com/anchore/grype
CycloneDX Official SiteSBOM Understanding Standardshttps://cyclonedx.org/
FOSSA BlogLicense Compliance Casehttps://fossa.com/blog/
REUSE SpecificationsSource code license notationhttps://reuse.software/

Curriculum connection: Developer M3·M4 practice tools

6. ISO/IEC 5230 · 18974 References​

ResourcesDescriptionLink
OpenChain ISO/IEC 5230 SpecificationLicense Compliance Standardshttps://www.openchainproject.org/license-compliance
OpenChain ISO/IEC 18974 SpecificationSecurity Assurance Standardshttps://www.openchainproject.org/security-assurance
OpenChain Self-certification checklistCertification Preparationhttps://www.openchainproject.org/conformance

Curriculum Linkage: Administrator M3 Core Resources

Resource Selection Guide​

OccupationPriority ResourcesUse of certificate
DeveloperLFD106x → LFC193 → Syft PracticeSubmit LFD106x + LFC193 certificate
AdministratorLFC193 → OpenChain Curriculum → ISO 5230/18974 SpecificationSubmit LFC193 certificate
OperationsOpenChain e-LearningReplaced with completion record