OWASP Board Meeting — March 25, 2015

Chairman’s report – Released strategic goals last week. Vice Chair report –

Treasurer report -

Secretary report -

BoD Members at Large report - Andrew:

Jim:

Michael: AppSecUSA Green signal from here. Good momentum.

. ED Updates Project coordinator hiring process is progressing. Goal is to hire by 4/15. 240 resumes. 4 people involved in reviewing. Working on Top 20 resumes , hoping to interview 4-5. Review Group - Joanna, Azzeddine, Jason, Fredrick, Paul & Kate LATAM 10 countries involved in tour Event manager is working really well. Anti-harassment training for board. Either through Insperity or a third party vendor. Third party vendor supplied. Completed before AppSec Amsterdam. Updated Bylaws - Andrew and Kelly working on this, but slightly lower priority and stalled. EU Entity - fallen off. Nothing has changed, Seba is still named. Tobias is the second. Third was Eoin but he has stepped down. Tom Brennan eager to get a copy in writing that removes his name. Action: Paul to get document from Seba. Finance Financial update https://drive.google.com/a/owasp.org/file/d/0BxjNZI6rYJRKMWp2ZGl1TkpUdW8/view Balance sheet looking proper. Financial transparency: Large transactions this month related to Virtual Management. Dashboard in SalesForce has membership and other gauges.

Director update: https://docs.google.com/a/owasp.org/document/d/17IMoMjoxUi8UJznIcsY8JCD-DTsvSq30GRYorqkbdvI/edit Membership update: https://www.owasp.org/index.php/February_2015_Membership_Report Community Manager Update: https://docs.google.com/a/owasp.org/document/d/1-4fIJfiLa8l02Hf1XBMqRYEiY2z6g4qwln-_ZLQ6GIs/edit IT Update - none.

Meeting was called to order and Tobias read roll call of board members in attendance. Notified that recording started. Paul noted that have quorum of 5 board members. Andrew arrived to meeting about 10 minutes late making quorum of 6 Board member Community and staff attendance is noted above. Minutes from February 11, 2015 Board meeting approved unanimously. Josh moves to approve minutes from last meeting. Michael seconds. No objections. Minutes approved. Item from ED: “Should OWASP enter into an agreement directly with Insperity to provide payroll and HR services to OWASP employees?” Josh moves to approve as written. Seconded by Jim. Yes from all but Fabio who was absent. Item from ED: How do we handle payroll. Josh moves to not pay Virtual but instead handle payroll internally. Michael seconds. Yes from all but Fabio who is absent. Item from ED: There is an existing policy that when corporate members provide support, they can allocate fees to certain chapters or projects but the commitment is for 3 years. Paul asking that we put it as 1 year. Josh moves to approve as Paul stated. Jim seconds. Accepted without objections. (All but Fabio in favor) Tobias moves to close the meeting, Andrew seconds.

OWASP Bugcrowd Bug Week Follow Up Whistleblower Policy Next steps: replace one on the wiki. TODO: Josh - Martin and community. TODO: Paul - note to staff that whistleblower policy has changed. Code of Ethics Discussion TODO: Michael to follow up with Martin (already partly done) 2015 Budget (Paul) Skipping due to time, but encouraged all to review here: https://drive.google.com/a/owasp.org/file/d/0BxjNZI6rYJRKZk1ycVNlbGhuYzA/view

Blackhat Fundraising Event (Josh Sokol) Tuesday August 4th have an OWASP dinner. Fixed price per plate from venue. ($50-75) Expenditure up to X. Josh to run with it. Budget - below normal authority for Paul. Established general board support for doing this. AppSec (Michael Coates) Investigate switching from model of driven by community suggestions to one driven by the foundation and leverages locations where there have been conferences. Involves more commitment. Staff. May require further staff. Proposed alternating NY, SF Proposal for Contract with Insperity (Paul Ritchie) Enter into a contract directly with Insperity making staff direct employees of OWASP. Josh moves to approve as written. Seconded by Jim. Yes from all but Fabio who was absent. How do we handle payroll. Option: Insperity or Paul / Allison 75% for removing the 250/person. 250/person - assisted with recruiting up to 2 per year. Josh moves to not pay Virtual but instead handle payroll internally. Michael seconds. Yes from all but Fabio who is absent. Existing Policy that when Corporate Members Join they can allocate fees to certain chapters or projects. Commitment is for 3 years. Paul asking that we put it as 1 year. Josh moves to approve as Paul stated. Jim will second. Accepted without objections.

(Jim leaves at 2:00 PM MST) Proposal from Virtual to provide financial services Deal with it offline. Tobias forwarded to board. Action: Required response by 6 days.

Next Board Meeting – Wednesday, April 29, 2015. Start-time 12:00 Pacific / 16:00 Eastern / 21:00 CET

March 25 Board Meeting was adjourned at 13:00 Pacific by unanimous consent.

The following were listed as old business but did not get discussed:

Open Action Items from Prior meetings Oct. 8 - Review ‘Interim’ status of Executive Director & discuss conversion to full time ED. Michael leading this discussion. Still Open per Dec. 10 meeting. Oct. 8 - Board to review how website in China is being used and the financial arrangement to ensure it is in line with OWASP Foundation policy. Still Open. To be discussed following AsiaPac Tour. Sept. 16 - 2015 Strategic Planning. Board to address with new Board members. Sept. 16 - 2014 Goals & accomplishments to be presented by owners of goals. Still Open. Would be good content for 2014 Annual Report.