Major Banks Launch OSERA to Standardize Open Source Software Remediation
The Fintech Open Source Foundation (FINOS) announced the operational launch of the Open Source Enterprise Resiliency Alliance (OSERA), backed by six major banks including Deutsche Bank, Goldman Sachs, Morgan Stanley, NatWest, and Royal Bank of Canada. OSERA aims to address redundancies in open source software remediation across financial institutions by providing a shared framework for identifying, fixing, and verifying vulnerabilities. Within 100 days, the alliance has already established an open standard for AI-scale remediation and delivered patches for over 50 widely used Java projects. This collaborative effort reduces duplicated work among banks while strengthening critical software infrastructure in finance. OSERA's approach is designed to align with emerging regulations like DORA, NIS2, and the EU Cyber Resilience Act. The initiative introduces a severity-based SLA system for addressing newly disclosed vulnerabilities on managed lines of open source projects. By standardizing patching processes across institutions, OSERA aims to improve trust in software fixes at scale.
Topics: collaboration cybersecurity financial services open source