LF Energy Summit Europe 2026

In the world of open-source governance, we are currently facing ‘waves the size of Nazaré’ in the form of regulatory changes, while the intensity of attacks on organizations’ digital services and supply chains continues to increase. It remains a mystery why many organizations respond by hiding behind ever-higher ‘walls of paperwork’ and creating cumbersome bureaucratic processes. We suggest a different path: to surf these waves and treat them as opportunities for progress.

This session presents a lean, developer-centric approach to governance. Instead of relying on isolated GRC tools (or spreadsheets), we treat compliance as if it were a collaboration between developers. We collect applicable and auditable requirements from open standards and transform them into human-readable data records using OSCAL (Open Security Controls Assessment Language) ... and store them in GIT. We combine classic automation with AI agents to get compliance tasks done. In this session, we will show you real-world cases along the journey through a continuous improvement iteration (PDCA cycle) and demonstrate what can be achieved with such a workbench.