Appendix: Works Consulted

This list uses a modified form of MLA citation guidelines. We include only referenced blogs, journal articles, and reports in works cited -- things from which we pulled direct insights. As this toolkit is mainly meant for the Web, we use hyperlinks instead of in-text citations.

• Aniszczyk, Chris, et al. Creating an Open Source Program, Linux Foundation Open Source Guides, Linux Foundation. www.linuxfoundation.org/resources/open-source-guides/creating-an-open-source-program. Accessed 15 Sept. 2021.

• Arora, Arpit, et al. The State Of Free & Open Source Software In India, CivicDataLab, state-of-foss.in/the-state-of-foss-report.pdf. PDF file. Accessed 15 Sept. 2021.

• Belinsky, Mark, and James Green, interview by James Vasile and Karl Fogel, Interview with Mark Belinsky and James Green, github.com/unicef/publicgoods-toolkit/blob/\ 867886be05bb5093054012161e2d59c1912c7c51/interviews/mark-belinsky.md. Accessed 30 Sept 2021.

• Bollier, David. Public Assets, Private Profits Reclaiming the American Commons in an Age of Market Enclosure, New America Foundation, 2001, learcenter.org/pdf/PA_Report%5B1%5D.pdf. Accessed 15 Sept. 2021.

• Cargnelutti, Federico. "A Modular Approach to Web Development," Federico Cargnelutti blog, 28 June 2008, blog.fedecarg.com/2008/06/28/a-modular-approach-to-web-development. Accessed 1 Sept. 2021.

• The Case for Her. "Meet Oky: Period tracking for girls, by girls," Medium.com blog post, 14 July 2020, thecaseforher.medium.com/meet-oky-14207f86892. Accessed 1 Sept. 2021.

• Center for Innovation and Impact. Software global goods valuation framework: User's guide, Washington, DC, USA: United States Agency for International Development, 2019. usaid.gov/sites/default/files/documents/1864/\ Software_Global_Goods_Valuation_Framework_VFinal.pdf. PDF file. Accessed 15 Sept. 2021.

• Cervantes, Mario and Soon Jeong Hong. OECD Science, Technology and Innovation Outlook 2018. Adapting to Technological and Societal Disruption, Chapter 4, OECD, 2018, www.oecd-ilibrary.org/sites/sti_in_outlook-2018-9-en/index.html?itemId=/content/component/\ sti_in_outlook-2018-9-en. Accessed 1 Sept. 2021.

• Chrzanowski, Pierre, et al. Open Data Readiness Assessment: Sierra Leone, World Bank, 22 June 2011, opendatatoolkit.worldbank.org/docs/odra/odra_sierra_leone.pdf. PDF file. Accessed 15 Sept. 2021.

• Contracting Guidance to Support Modular Development, Obama Whitehouse Archives, 14 June 2012, obamawhitehouse.archives.gov/sites/default/files/omb/procurement/guidance/modular-approaches-for-information-technology.pdf. PDF file. Accessed 1 Sept. 2021.

• The Deloitte Center for Regulatory Strategy. Global Cybersecurity Compliance Integrity, Deloitte, 2017, www2.deloitte.com/content/dam/Deloitte/us/Documents/risk/us-risk-global-cybersecurity-compliance-integrity.pdf. PDF file. Accessed 1 Sept. 2021.

• Digital Impact Alliance. Procurement of Digital Technology: A buyer's category management guide and resources for the Procurement of Digital Technologies in furthering the Sustainable Development Goals, procurement-digitalimpactalliance.org. Accessed 15 Sept. 2021.

• Digital Public Goods Alliance. Digital Public Goods Standard, Digital Public Goods Alliance digitalpublicgoods.net/standard. Accessed 1 Sept. 2021.

• Digital Public Goods Alliance. Financial Inclusion DPGs Digital Public Infrastructures Final Report, Digital Public Goods Alliance, June 2021, digitalpublicgoods.net/DPGA_Financial-Inclusion-DPG-Technical-Assessment.pdf. PDF file. Accessed 15 Sept. 2021.

• Digital Public Goods Alliance. "The Transformative Role of Academia & Digital Public Goods", Digital Public Goods Alliance blog post, 19 Aug. 2021, digitalpublicgoods.net/blog/the-transformative-role-of-academia-digital-public-goods. Accessed 1 Sept. 2021.

• European Commission. GDPR Data Controllers and Data Processors, www.gdpreu.org/the-regulation/key-concepts/data-controllers-and-processors. Accessed 1 Sept. 2021.

• Finland Ministry of Education and Culture. Percent-for-Art Scheme, UNESCO, 2016, en.unesco.org/creativity/policy-monitoring-platform/percent-art-scheme. Accessed 1 Sept. 2021.

• FinTech Open Source Foundation. Open Source Readiness Assessment, FinTech Open Source Foundation, www.finos.org/hubfs/FINOS/website/pages/community/\ Open%20Source%20Readiness%20Roadmap%20-%203.10.2018.png. Accessed 1 Sept. 2021.

• Fogel, Karl. "Dissecting The Myth That Open Source Software Is Not Commercial", IEEE Software blog, 10 April 2016, blog.ieeesoftware.org/2016/04/dissecting-myth-that-open-source.html. Accessed 1 Sept. 2021.

• Fogel, Karl and James Vasile. Guidelines for Funding Open Source Software Development, Arches Project, 16 Nov 2017, www.archesproject.org/wp-content/uploads/2018/01/\ guidelines_funding_OSS.pdf. PDF file. Accessed 1 Sept. 2021.

• Fogel, Karl, and James Vasile. Open Source Archetypes: A Framework For Purposeful Open Source, 28 October 2019, Open Tech Strategies, opentechstrategies.com/archetypes. Accessed 1 Sept. 2021.

• Fogel, Karl. Producing Open Source Software: How to Run a Successful Free Software Project, 14 Aug. 2020, producingoss.com. Accessed 1 Sept. 2021.

• Foxman, Stephen M. Sample Contract Clauses. https://www.eckertseamans.com/app/uploads/Steve-Foxman_Eckert-Seamans_DATA-PROTECTION-CLAUSES-101016-M1566466xA35AF.pdf).
  Eckert Seamans. PDF file. Accessed 1 Sept. 2021.

• Fredriksson, Torbjörn, et al. The Study on Data Protection Regulations and International Data Flows: Implications for Trade and Development, UNCTAD Division on Technology and Logistics, 19 Apr 2016, unctad.org/system/files/official-document/dtlstict2016d1_en.pdf. PDF file. Accessed 1 Sept. 2021.

• From Open Software to Open Society - Digital Public Goods for Inclusive Digital & Social Transformation. Recording uploaded by the United Nations Development Programme and United Nations Children's Development Fund, 29 Sep. 2021, media.un.org/en/asset/k17/k17a9bg6o8. Accessed 30 Sept. 2021.

• Gelaga-King, George, interview by James Vasile, Interview With George Gelaga-King, github.com/unicef/publicgoods-toolkit/blob/867886be05bb5093054012161e2d59c1912c7c51/ interviews/george-gelaga-king.md. Accessed 30 Sept. 2021.

• Gerber, Ben. OECD Privacy Principles. oecdprivacy.org. Accessed 1 Sept. 2021.

• Gerhard, Laura and Mark Headd. Modular Contracting and Agile Development, United States 18F, 19 July 2018, github.com/18F/Modular-Contracting-And-Agile-Development/ blob/7e6468332bf1c87d56dc682ac4aa043b09686143/_strategies/modular-procurement.md. Accessed 1 Sept. 2021.

• Global Facility for Disaster Reduction and Recovery. Open Data for Resilience Initiative & GeoNode: A Case Study on Institutional Investments in Open Source, World Bank International Bank for Reconstruction and Development, 2017, opendri.org/wp-content/uploads/2017/03/OpenDRI-and-GeoNode-a-Case-Study-on-Institutional-Investments-in-Open-Source.pdf. PDF file. Accessed 1 Sept. 2021.

• Goggin, Gerard. "COVID-19 apps in Singapore and Australia: reimagining healthy nations with digital technology," Media International Australia, vol. 177,1 (2020): 61–75. doi:10.1177/1329878X20949770. Accessed 1 Sept. 2021.

• Harris, Richard. "The Gates Foundation chats about Mojaloop," App Developer Magazine, 1 Nov. 2017, appdevelopermagazine.com/the-gates-foundation-chats-about-mojaloop. Accessed 15 Sept. 2021.

• India Ministry of Communication & Information Technology Department of Electronics & Information Technology. "Policy on Adoption of Open Source Software for Government of India," F. No. 1(3)/2014 – EG II, www.meity.gov.in/writereaddata/files/policy_on_adoption_of_oss.pdf. PDF file. Accessed 1 Sept. 2021.

• IT Governance. "GDPR Data Mapping: What is it and how to comply," IT Governance, www.itgovernance.co.uk/gdpr-data-mapping. Accessed 1 Sept. 2021.

• ITU. Guide to Developing a National Cybersecurity Strategy - Strategic engagement in cybersecurity, ITU, 2018, handle.itu.int/11.1002/pub/811cf62d-en. Accessed 1 Sept. 2021.

• Jansen, Slinger. "Measuring the Health of Open Source Software Ecosystems: Beyond the Scope of Project Health," Information and Software Technology, Vol. 56, Nov. 1, 2014, www.researchgate.net/publication/261715766Measuring_the_Health_of_Open_Source_Software\ Ecosystems_Beyond_the_Scope_of_Project_Health. Accessed 1 Sept. 2021.

• Joswiak, Naomi. Open Government Case Study: Costing Sierra Leone's Open Data Program, Results for Development, August 2017, www.r4d.org/wp-content/uploads/R4D_OG-SierraLeone-CS_web.pdf. PDF file. Accessed Sept. 1, 2021.

• Linksvayer, Mike. A Maturity Model for Embracing Open Source, GitHub, github.com/github/maturity-model. Accessed 1 Sept. 2021.

• McAffer, Jeff. "Open Source Engagement in Organizations," Jeff McAffer personal blog, 7 Feb. 2019, mcaffer.com/2019/02/Open-source-engagement. Accessed 1 Sept. 2021.

• MEASURE Evaluation. Implementation of the Uganda EMR: Results of a Security Assessment, Chapel Hill, NC, USA: MEASURE Evaluation, University of North Carolina, March 2020, measureevaluation.org/resources/publications/tr-20-413.html. Accessed 15 Sept. 2021.

• Moe, Kari, interview by James Vasile, Interview with Kari Moe - NORAD, github.com/unicef/publicgoods-toolkit/blob/867886be05bb5093054012161e2d59c1912c7c51/interviews/kari-moe.md. Accessed 30 Sept. 2021.

• Muciojad. "Documenting Technology Impact: Mifos ROI Model and Case Studies," Mifos blog, 8 July 2011, mifos.org/blog/documenting-technology-impact-mifos-roi-model-case-studies. Accessed 1 Sept. 2021.

• NEF Consulting. A Valuing Impact Toolkit for ICT Investment (prototype), Digital Impact Alliance, October 2020, digitalimpactalliance.org/wp-content/uploads/2020/10/ICT4D-toolkit.pdf. Accessed 15 Sept. 2021.

• OECD. Recommendation of the Council Concerning Guidelines Governing the Protection of Privacy and Transborder Flows of Personal Data, OECD, 2013, www.oecd.org/sti/ieconomy/2013-oecd-privacy-guidelines.pdf. PDF file. Accessed 1 Sept. 2021.

• OECD. "Understanding the digital security of products: An in-depth analysis," OECD Digital Economy Papers, No. 305, OECD, 2021, www.oecd-ilibrary.org/docserver/abea0b69-en.pdf?expires=1634616440&id=id&accname=guest\ &checksum=952B457A4563BDB21EB39D0DB3D5E961. Accessed 15 Sept. 2021.

• OMM Overview. Qualipso International, qualipso.icmc.usp.br/OMM. Accessed 1 Sept. 2021.

• "OpenSource Maturity Model." Wikipedia, Wikimedia Foundation, 2 March 2021, en.wikipedia.org/wiki/OpenSource_Maturity_Model. Accessed 1 Sept. 2021.

• Perry, Jonathan. Trust in Public Institutions: Trends and Implications for Economic Security, United Nations Department of Economic and Social Affairs Policy Brief #108, 20 July 2021, www.un.org/development/desa/dspd/wp-content/uploads/sites/22/2021/08/PB_108.pdf. PDF file. Accessed 15 Sept. 2021.

• Personal Data Protection Commission Singapore. ASEAN Data Management Framework and Model Contractual Clauses on Cross Border Data Flows, www.pdpc.gov.sg/help-and-resources/2021/01/asean-data-management-framework-and-model-contractual-clauses-on-cross-border-data-flows. Accessed 1 Sept. 2021.

• "Principles of Engagement: Modular Open Source Identity Platform," MOSIP docs, April 2019, www.mosip.io/uploads/resources/\ 5cc84b0a08284Country%20Engagement%20Principles_v2.pdf. PDF file. Accessed 1 Sept. 2021.

• "Privacy and Security by Design," MOSIP docs, www.mosip.io/uploads/resources/\ 5c97366200053Architectural%20Principle%20-%20Privacy%20and%20Security.pdf. PDF file. Accessed 1 Sept. 2021.

• Ramsden, Peter, et al. Social Impact Bonds: State of Play and Lessons Learnt, OECD, 2016, www.oecd.org/cfe/leed/SIBs-State-Play-Lessons-Final.pdf. PDF file. Accessed 1 Sept. 2021.

• Rengaiah, Param. "On Modular Architectures: What they are and why you should care," Medium.com blog post, 24 Feb. 2014, medium.com/on-software-architecture/on-modular-architectures-53ec61f88ff4. Accessed 1 Sept. 2021.

• Rodríguez, Rodrigo Gramajo. "DHIS2 to PowerBI connector is ready!" DHIS2 community posting, Sept. 2019, community.dhis2.org/t/dhis2-to-powerbi-connector-is-ready-check-out-the-video-test-it-use-it-and-give-us-feedback/37043. Accessed 1 Sept. 2021.

• RTI International. Uzbekistan Education Reform Program, Quarterly Report, Year 1 Quarters 1 + 2, United States Agency for International Development, 29 April 2020, pdf.usaid.gov/pdf_docs/PA00WRTP.pdf. PDF file. Accessed 1 Sept. 2021.

• Scovetta, Michael, in collaboration with the Open Source Security Coalition. Threats, Risks, and Mitigations in the Open Source Ecosystem, Open Source Security Foundation, 28 July, 2020, github.com/ossf/wg-identifying-security-threats/\ blob/efade108a2afa806daa500fe60fdb831cc7d9f38/publications/\ threats-risks-mitigations/v1.1/\ Threats,%20Risks,%20and%20Mitigations%20in%20the%20Open%20Source%20Ecosystem%20-%20v1.1.pdf. PDF file. Accessed 1 Sept. 2021.

• Shevchenko, Nataliya, et al, Threat Modeling: A Summary of Available Methods, Carnegie Mellon University Software Engineering Institute, July 2018, resources.sei.cmu.edu/asset_files/\ WhitePaper/2018_019_001_524597.pdf. PDF file. Accessed 15 Sept. 2021.

• Silenou Bernard C, et al, "Use of Surveillance Outbreak Response Management and Analysis System for Human Monkeypox Outbreak, Nigeria, 2017–2019," Emerging Infectious Disease, 2020;26(2):345-349. doi:10.3201/eid2602.191139.

• Smith, Dawn. "Open Source Health Information Business Ecosystems in Resource-Poor Environments", OpenMRS blog, 3 Dec 2010, openmrs.org/2010/12/03/open-source-health-information-business-ecosystems-in-resource-poor-environments. Accessed 1 Sept. 2021.

• Souppaya, M., and K. Scarfone. "Technical guide to information security testing and assessment: Recommendations of the National Institute of Standards and Technology," NIST Special Publication 800-115, Gaithersburg, MD, USA: National Institute of Standards and Technology, 2008, www.nist.gov/publications/technical-guide-information-security-testing-and-assessment. Accessed 1 Sept. 2021.

• Thomas, Edward, et al. Evaluation of Innovation in UNICEF Work Case Study: Primero, UNICEF Evaluation Office, November 2019, www.unicef.org/evaluation/media/946/file/Primero.pdf. PDF file. Accessed 1 Sept. 2021.

• TODO Group. "Moving to Strategic Use of Open Source", OSPO 101, Module 2, Section: Introducing Open Source Business Models, TODO Group, github.com/todogroup/ospo101/blob/main/ module2/README.md#climbing-the-open-source-ladder. Accessed 1 Sept. 2021.

• US Government Accountability Office. "Effective Practices and Federal Challenges in Applying Agile Methods", Report to the Subcommittee on Federal Financial Management, Government Information, Federal Services, and International Security, Committee on Homeland Security and Governmental Affairs United States Senate, United States Government Accountability Office, July 2012, www.gao.gov/assets/600/593091.pdf.
  PDF file. Accessed 1 Sept. 2021.

• UK Information Commissioner's Office. Guide to the General Data Protection Regulation (GDPR), 2 Aug. 2018, ico.org.uk/media/for-organisations/guide-to-the-general-data-protection-regulation-gdpr-1-0.pdf. PDF file. Accessed 1 Sept. 2021.

• UK Information Commissioner's Office. A Guide to ICO Audits, June 2021, ico.org.uk/media/for-organisations/documents/2787/guide-to-data-protection-audits.pdf. DF file. Accessed 1 Sept. 2021.

• UK Information Commissioner's Office, Data Protection Impact Assessments. ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/accountability-and-governance/data-protection-impact-assessments/. Accessed Sept. 1, 2021.

• UK National Cybersecurity Centre. Mitigating malware and ransomware attacks, UK National Cybersecurity Centre, 13 Feb. 2020, www.ncsc.gov.uk/pdfs/guidance/mitigating-malware-and-ransomware-attacks.pdf. PDF file. Accessed 1 Sept., 2021.

• UNCTAD. Summary of Adoption of E-Commerce Legislation Worldwide, unctad.org/topic/ecommerce-and-digital-economy/ecommerce-law-reform/summary-adoption-e-commerce-legislation-worldwide. Accessed 1 Sept. 2021.

• UNDP. Managing Risks Across UNDP Programming and Operations: Guidance Note, UNDP, Sept. 2019, info.undp.org/sites/ERM/Shared%20Documents/UNDP%20ERM%20Guide_Sept2019.pdf. PDF file. Accessed 1 Sept. 2021.

• United Nations. Report of the Secretary-General: Roadmap for Digital Cooperation, June 2020, www.un.org/en/content/digital-cooperation-roadmap/assets/pdf/\ Roadmap_for_Digital_Cooperation_EN.pdf. PDF file. Accessed 1 Sept. 2021.

• Vasile, James and Karl Fogel. "Ecosystem Mapping," Open Tech Strategies blog, 24 June 2019, blog.opentechstrategies.com/2019/06/ecosystem-mapping. Accessed Sept. 1, 2021.

• Vassil, Kristjan. "Estonian e-Government Ecosystem: Foundation, Applications, Outcomes," Background Paper, World Development Report 2016: Digital Dividends, International Bank for Reconstruction and Development, The World Bank, June 2015, thedocs.worldbank.org/en/doc/165711456838073531-0050022016/original/\ WDR16BPEstonianeGovecosystemVassil.pdf. PDF file. Accessed 1 Sept. 2021.

• Walli, Stephen R. "What Does an Adult Look Like in an Open Source Community?" Opensource.com, 20 April 2015, opensource.com/life/15/4/what-does-an-adult-look-like-in-an-open-source-community. Accessed 1 Sept. 2021.

• World Bank. Open Source for Global Public Goods. Identification for Development, World Bank, 2019, openknowledge.worldbank.org/handle/10986/33401. Accessed 1 Sept. 2021.

• World Bank. *Privacy By Design: Current Practices in Estonia, India, and Austria(), World Bank, 1 June 2020, id4africakhub.org/post/privacy-by-design-current-practices-in-estonia-india-and-austria. Accessed 15 Sept 2021.