-- Is there a chance your code will be used by partners, suppliers or customers outside your company?

-- Create a remediation process for software that incorrectly includes open-source.

-- Do you have a process to handle exceptions?

-- Perform code audits.

-- Do you have the expertise to identify open-source in your code?