OWASP Board Meeting — April 8, 2013

Board Meeting Minutes - April 8, 2013

Meeting Recorded

Attendance

Board Members:

• Seba Deleersnyder
• Eoin Keary
• Tom Brennan
• Jim Manico
• Michael Coates

Staff:

• Kate Hartmann
• Sarah Baso
• Kelly Santalucia

Others: *

Meeting Notes:

• Notice to all attendees - board meetings are recorded and publicly available as of March 2013

• Financials

  • 2012 Wrap Up - https://docs.google.com/a/owasp.org/spreadsheet/ccc?key=0ApZ9zE0hx0LNdDlBamJfTWM3bmYzVVAzWi0xeEZ6Qmc#gid=0
  • Q1 2013 - https://docs.google.com/a/owasp.org/spreadsheet/ccc?key=0ApZ9zE0hx0LNdFV3X1FOaV9rWFhBYmpteDZEM3lyUUE#gid=0
  • Action - Dave to announce/publish financials for 2012 and Q1 2013 to Leaders List
  • Requested going forward:
    • List of vendors we payout
    • Quarterly Board and Staff Expenditure

• Director Report - Sarah

  • In person Board Meetings - Germany (AppSec Europe), New York (AppSec USA)
  • Need one person to go to AppSec Latam in Lima Peru - Oct 1-4. Bord members interested to email Sarah

• Director Report - Kate

  • Amex Travel module set up
  • Foundation insurance updated and renewed

• PM Report - Samantha

  • Review and follow up with Samantha on any questions .

• Membership report - Kelly

  • Review and follow up with Kelly on any questions

• [Old Business] OWASP Secretary Role Board of Directors

  • http://garberconsulting.com/Job_Description_Secretary.htm
  • If dissolving position - need to update bylaws

• [New Business] Creation of Executive Director Role

  • Job description drafted and reviewed by Board -https://docs.google.com/a/owasp.org/document/d/1z4Pl7C-jbgtuV2nR-MaW2Rs-6u3RnC4RKNGCmUcX-zo/edit
  • Tom - motion to create job
  • Vote:
    • Yes - Tom, Eoin, Jim, Seba, Michael
    • Not on call - Dave --> Action - Eoin to follow up with Dave on vote for the record and update on votes page
    • Action item - Michael to post blog update on change

• [New Business] - OWASP Projects & Acknowledgement of company leadership/contributions and company logo placement

  • Comment (Jim) - Sans is for profit, others are non-profit
  • (sarah) Requests received from community to get printed materials without company logos so it can be promoted as OWASP project not Company X project
    • (Jim) suggestion to include list of contributors with names and (optional) company
  • Action -
    • This is a special project to be lead by the Board
    • Jim to follow up with Samantha on findings and draft/proposed policy and send to Board List
  • (Seba) Need to recognize and reward volunteers that contribute to projects
  • (Eoin) - Good to organizations to “point in” to OWASP, but OWASP shouldn’t “point out”
  • (Michael) Need to look at the different variable/cases - such as when someone want to donate a project but not “lose” the project and contributions to OWASP
  • (Jim) Example Apache Hadoop - how Apache handles project donation from companies: https://hadoop.apache.org/who.html
  • Question - How does the licensing of projects fit into this discussion? https://www.owasp.org/index.php/OWASP_Licenses
    • Answer - separate issue of brand management
    • Need to review OWASP codes of conduct documents for work tangentially related to this discussion: https://www.owasp.org/index.php/OWASP_Codes_of_Conduct

• [New Business] Status of Board Member orientation materials

  • Sarah has ordered copies for Eoin, Jim, Seba, and Dave (Michael and Tom already have copies). Should be receiving them by end of week.

• [New Business] AppSecUSA 2013 Status actions requested of the board members

  • Please review what we have going on and help us promote!

Meeting ended 12:10 PM EST