This specification contains the key requirements of a quality open source software security assurance program that establishes trust between organizations exchanging software solutions comprised of open source software.
BSI recommends this version of standard for organisations operating in or with the UK. The ISO edition is available here if required.