Internationally, open solutions that enable transparency, reusability and cooperation are gaining ground. Open source increasingly serves as a strategic lever for reducing dependence on individual vendors, ensuring interoperability and harnessing the innovative power of ecosystems. The National Cyber Security Centre (NCSC) is implementing 'open source by default' under EMOTA.
The NCSC implements open source under EMOTA as a working principle, with clear rules and responsibilities. The objectives are digital sovereignty, quality and speed at affordable cost. Security and legal compliance are paramount. Publications are made responsibly and in stages where necessary.
The open source strategy binds all NCSC areas and projects. It applies to all software solutions the NCSC develops, commissions or operates – both new developments and existing applications. The strategy underpins project decisions, architectural specifications and procurement processes.
Implementation rests on an open source governance policy, clear responsibilities (OSPO, legal service, specialist units) and a set of guidelines with checklists, roles and templates. This creates consistency from planning and procurement through to operation and community engagement. Procurement and contracts build in open source and security requirements from the start.
Feedback-Form
We would like to know your opinion on the content of the Open Source Strategy, so that we can better adapt such products to your needs in the future. Therefore, we would be grateful if you could reply to the following questions (about 2 minutes). You can then send us the form by clicking on the "Submit" button.
Last modification 24.11.2025
