Open Source in Finance Forum Toronto 2026

In regulated industries, delivering software quickly and securely is a constant balancing act between enterprise policies and developer experience. Compliance requirements introduce friction, making automation and security more complex. In this presentation, we will introduce the Open SDLC Controls Framework working group and provide a progress update as well as share future plans.
Last year we established a working group to create a standardized framework for software delivery governance that could transform how financial institutions define their SDLCs.
Building on the success of the Common Cloud Controls and the AI Governance Framework, this initiative aims to develop a shared, composable, and technology-agnostic vocabulary for SDLC controls—a common language that the entire industry can adopt and build upon.