OWASP Board Meeting — April 29, 2015

Chairman’s report –

• We have asked Paul Ritchie to become our full time ED and will effectively start on May 1. A formal job offer was made and Paul accepted via written confirmation. Vice Chair report – No update Treasurer report - No update other than Financial statement for March 2015 and summary in Executive Director report Secretary report - No update BoD Members at Large report - No update Andrew:
  Jim: Michael:

All passed to focus on the business from the meeting.

Executive Director Report.

• ED Updates
  • Project Coordinator - Scheduling interviews with 5 candidates screened by 6 person review team including 4 from Community & 2 from Operations Staff.
  • Changing employees to be insperity / owasp instead of virtual goes into effect 5/1.
    • Key benefit here is some cost savings, removal of Virtual mgmt between OWASP & Insperity, and the ‘repatriation’ of OWASP employees from their status as ‘Virtual Mgmt Inc. employees’ under the previous HR hosting and payroll services agreement.
  • Per Audit & Best Practice procedure, Board level Anti-harassment training will be available to Board members in May: Insperity will provide training which we need to complete in May and June.
  • AppSecEU 2016 - AppSecEU in Rome, with Matteo on point to organize. Laura to work with Matteo on detail logistics to confirm University venue & major Vatican event in 2016.
  • https://drive.google.com/a/owasp.org/file/d/0BxjNZI6rYJRKZWd3dXh5WGtxNGs/view?usp=sharing)
  • Financially health. Good cash balances available at Chapter, Project & Foundation level.
  • Project available growing
  • No very large expenses. Expect them at the end of the appsec event.
• Director update
  • https://docs.google.com/a/owasp.org/document/d/1QTn51vyQIz2p7rPrm3Xroc5n4wCuBUM5eCJS8gkgKbg/edit?usp=sharing
  • Automated chapter setup.
  • Automate events and projects in Salesforce.
  • EStore - replace merchandise request form, etc. Community can place orders online which will automatically go to distribution.
  • Working on annual report.
  • Registrations smooth this time around.
• Membership update
  • https://www.owasp.org/index.php/March_2015_Membership_Report
• Community Manager Update
• IT Update - https://docs.google.com/a/owasp.org/document/d/1VTXiz7F8a7iDgxghzpyfCm1dF8y8-X6EIIGrB99qesU/edit?usp=sharing
• Update from LATAM
  • Maybe 900 people. Chapter leaders traveling, and good collaboration.

New Agenda Items

• Compliance Officer - Board Duty to Appoint an Officer
  • What is the plan for 2015?
  • Josh nominated Martin.
  • Jim put out that a committee approach might be best.
  • Perhaps let Martin be the main point of contact and then have a committee to help execute.
  • Josh consider having governance committee with the compliance officer at the front.
  • Motion: Josh moves to select Martin as compliance officer for 2015. Second by Jim. Jim, Josh, Matt, Michael, Tobias, Fabio all say yes.
  • Note to select compliance officer in Q4.
• Summer of Code
  • Fabio presents the idea as a good thing.
  • Josh asks about timing. Doesn’t want to support the proposal as is but wants to move forward in the longer term.
  • Fabio indicates that the summer of code is for students who are free during the summer.
  • Jim indicates the proposal isn’t ready.
  • Matt indicates that he would support given funds available and little staff impact.
  • Tobias suggests compromise where 50% from projects with funds that have them.
  • Josh has strong reservations regarding the precedent this sets regarding how the Foundation treats "ring fenced" funds.
  • Motion: Fabio moves to vote. Matt seconds. Motion is ‘should Board approve the updated proposal on process and funding for a Summer of Cord program?’ Discussion voiced.
    • Jim - no.
    • Josh - no.
    • Fabio - yes.
    • Matt - yes.
    • Michael - (no longer present)
    • Tobias - yes.

3 yes, 2 no proposal passes.

• Community Update on Google Hangout Tomorrow

Next Board Meeting – May 22, 2015. Friday evening in Amsterdam after the conclusion of the AppSecEU conference.

• Replaces the Saturday morning meeting in order to allow teleconference attendance by the 3 BoD not attending in Amsterdam. Old Start-time 8:00 AM Pacific / 17:00 CEST (@AppSecEU), Saturday, May 23.

April 29 Board Meeting was adjourned at 13:00 Pacific by unanimous consent.