OWASP Board Meeting — March 11, 2013

Board Meeting Minutes - March 11, 2013

Meeting Recorded

Attendance

Board Members:

• Seba Deleersnyder (had to drop after first 30 min)
• Michael Coates
• Tom Brennan
• Jim Manico
• Dave Wichers
• Eoin Keary (joined 1 hr into meeting)

Staff:

• Kate Hartmann
• Sarah Baso
• Kelly Santalucia
• Samantha Groves

Others:

• Tobias Gondrom
• Helen Gao
• Martin Knobloch

Meeting Notes:

• Notice to all attendees - board meetings are recorded and publicly available as of March 2013

• Global Industry Advisory Board (GIAB): proposal to take over some tasks of the closed GIC (Presented by Tobias Gondrom): https://docs.google.com/a/owasp.org/document/d/1whuiymmub4USgeWx2QYJOEYEBpbqUpAMXJ3b6iXDId8/edit

  • Discussion about goals and structure of GIAB - how is this different from GIC and how are the expectations and goals/different.
  • Tom (suggestion) - publicly elected GIAB positions during our annual elections for board members
  • Tom (comment) - original intent of the GIC was to engage individuals from various areas of industry: http://en.wikipedia.org/wiki/Critical_infrastructure. Is the new group going to focus on having individuals in the different industry (areas) as well as in different geographic regions around the globe?
  • Requested - quarterly status reports on what has the group accomplished, who have they been in communication with.
  • Proposed by Jim - Global Initiative for 3 months to flesh out the idea of an Industry Board and value for organization
  • Tom - will submit an initiative for critical infrastructure advisory board

• Financial Report -

  • Alison is still working on balance sheet with separate finances for the European Account.
  • Tom - requested - can we include a statement of the current balance in each of our existing accounts for each month’s budget.
  • Action item - Kate to update Board members on current

• Director’s Report - Sarah Baso

  • https://docs.google.com/a/owasp.org/document/d/1qA8s0-G7-IVZY6ZXK2C1C7oy5oLzNle1P0wtjUhBhLM/edit
  • Debt Collection - AppSec Latam 2011 & Wiki contractor
    • Proposed by Tom - have a public facing “Wall of Shame” to assist with debt collection efforts
  • Action item: Sarah to draft policy for engaging 3rd party contractors
  • Thursday’s webinar will be a presentation by the Marketing company that OWASP has contracted with, please tune in with comments/questions

• Director’s Report - Kate Hartmann

  • https://docs.google.com/document/d/1o8GauC50NDIZNnWZqZ4r-0Ovol4Vq-Cf2kYoBYqIVug/edit
  • Global Initiatives - we have already gotten almost 300 volunteer signups since we started this outreach effort
  • If you have anything to add to the OWASP Connector that goes out to OWASP-All & posted to blog every 2 weeks, send to Kate by Friday (every other week) and will be distributed the following Tuesday. If you have questions about when the next connector is going out, email Kate.

• Project Manager Report -

  • Please review Samatha’s report: https://www.owasp.org/index.php/OWASP_Project_Manager_Activity_Reports/March_11_2013
  • Thank you for the feedback on our adjustment to the Projects Review Process.
  • Samantha will be taking point with the Marketing contractor starting with Phase 3 next month

• Request from Tom - what is our organizational plan for communicating new chapters, projects, and other updates through social media.

  • Action item: Sarah will discuss with Staff and report back. We currently have the Connector to OWASP all every two weeks and are looking at social media dashboard.

• Old Business -

  • Eoin votes “yes” on term limits for board members

• Old Business - Secretary Role

  • Eoin is not sure he wants to continue in this role, he will review the Secretary job definition in bylaws and report back.

• Eoin - funding for chapters

  • How does a chapter request funds for a local or regional event?
    • Answer: OCMS https://ocms.owasp.org/
    • Action item: Sarah to include info about OCMS and link to webinar on event submission to next Connector

• Tom - Chapter Handbook sign-off workflow and review in progress. The goal of this is to build awareness of the Chapter rules and resources and have periodic check in to remove old chapters/leaders

• RSA Involvement -

  • Jim and Eoin - 1/2 day developer outreach, attended by 400+ people
  • Michael - 1 hr talk on OWASP, attended by approx 125 people
  • Action item: Sarah to follow up on survey results with RSA

Meeting ended 1:45 pm EST