OWASP Board Meeting — June 24, 2015

Chairmain's Report - Tobias Gondrom

Vice Chairmain's Report - Josh Sokol

Treasurer Report - Fabio Cerullo

Secretary Report - Matt Konda

Updates from Members at Large - Michael Coates, Andrew van der Stock & Jim Manico

• Andrew van der Stock - Education strategic goal update.
• Michael - Motion to move primary responsibility of planning and execution of the AppSecUSA 2016 conference to the OWASP Foundation. Selection of core conference themes and speaker/proposal would be driven by the OWASP community.

• Executive Director/Operations Update - Summary Report P.Ritchie
  • Financial Update - YTD P&L to Budget, Jan-May 2015 with Balance sheet
  • Director Update - Kate Hartmann - [link:addme Kate Hartmann Update]
  • Community Manager Update - Noreen Community Manager Report
  • Project Manager Update - [link:addme Project Manager Report]
  • Membership Update - Membership Report
  • Events Manager Update - June 2015 Conference Manager Report
  • IT Update - [link:addme Matt Tesauro Report]

Community Initiative Reports

All active board proposals are listed here

• Bylaws (pre-reading material: By Laws v7)

Discuss revised by laws, approve, reword or reject changes to bring our by laws into good standing before the election.

• Fund ring fencing

Discuss how we ensure that all of our strategic goals are properly funded, and ensure that the Foundation doesn't need to borrow when we have funds on hand. Chapters have 71% of OWASP's funds ring fenced. Let's discuss how we deliver all of OWASP's strategic goals, and improve our admin cost overhead ratio.

• On Demand Training (pre-reading material link above)

At OWASP we are frequently receiving requests from companies looking for training related to application security. This is an area of expertise that plenty of individuals in our Community could fulfil. This growing demand for training is aligned with OWASP Strategic Goals and will become a much needed revenue stream for the Foundation that is not conference driven. Discuss revised proposal for OWASP to deliver/organise trainings.

• Review & Approve Minutes from May 22 Board meeting.

• Note in Meeting Minutes that Proposed OWASP.org email policy and terms of usage was approved via email vote as of June 23.

• Notice to all attendees - board meetings are recorded and publicly available as of March, 2013
• Joining the call acknowledges your awareness of recording and consent to be recorded and public dissemination of the recording.
• Recording of June 24, 2015 OWASP Board Meeting

14:00-15:00 PDT

Teleconference Information:

https://www3.gotomeeting.com/join/861328838

International Toll Free Calling Information

Board Meeting Attendance Tracker

Minutes of June 24, 2015 OWASP Board Meeting

Call to Order /OWASP Mission

• Administrative (List of attendees and Agenda bashing (only if last-minute changes to the agenda are needed) (5 min)

Reports

Chairmain's Report - Tobias Gondrom

Vice Chairmain's Report - Josh Sokol

Treasurer Report - Fabio Cerullo

Secretary Report - Matt Konda

Updates from Members at Large - Michael Coates, Andrew van der Stock & Jim Manico

• Andrew van der Stock - Education strategic goal update.
• Michael - Motion to move primary responsibility of planning and execution of the AppSecUSA 2016 conference to the OWASP Foundation. Selection of core conference themes and speaker/proposal would be driven by the OWASP community.

Reports

• Executive Director/Operations Update - Summary Report P.Ritchie
  • Financial Update - YTD P&L to Budget, Jan-May 2015 with Balance sheet
  • Director Update - Kate Hartmann - [link:addme Kate Hartmann Update]
  • Community Manager Update - Noreen Community Manager Report
  • Project Manager Update - [link:addme Project Manager Report]
  • Membership Update - Membership Report
  • Events Manager Update - June 2015 Conference Manager Report
  • IT Update - [link:addme Matt Tesauro Report]

Community Initiative Reports

Old Business

All active board proposals are listed here

• Bylaws (pre-reading material: By Laws v7)

Discuss revised by laws, approve, reword or reject changes to bring our by laws into good standing before the election.

• Fund ring fencing

Discuss how we ensure that all of our strategic goals are properly funded, and ensure that the Foundation doesn't need to borrow when we have funds on hand. Chapters have 71% of OWASP's funds ring fenced. Let's discuss how we deliver all of OWASP's strategic goals, and improve our admin cost overhead ratio.

• On Demand Training (pre-reading material link above)

At OWASP we are frequently receiving requests from companies looking for training related to application security. This is an area of expertise that plenty of individuals in our Community could fulfil. This growing demand for training is aligned with OWASP Strategic Goals and will become a much needed revenue stream for the Foundation that is not conference driven. Discuss revised proposal for OWASP to deliver/organise trainings.

• Review & Approve Minutes from May 22 Board meeting.

• Note in Meeting Minutes that Proposed OWASP.org email policy and terms of usage was approved via email vote as of June 23.

New Business

All active board proposals are listed here

• [Tobias] - reopen communication with RSA to explore potential opportunities for OWASP outreach.
  • [discussion topic]
• [Matt] - hire a technical editor for a few months.
  • [discussion topic]
• [Jim] - Making public statements on crypto
  • "Even though 501c3 organizations *can* do some lobbying (as long as expenditures are not substantial), the IAB is careful not to talk about legislation or urge anyone to contact representatives about legislation." - Jeff Willams
• [Josh] - Funding request for Project Summit at AppSecUSA 2015
  • http://lists.owasp.org/pipermail/owasp-leaders/2015-June/014359.html
  • $10,000 requested
• [Jim] - Different Board voting models
  • We have both email and in-person voting models which are very different. For email, all members can vote. For in person, only present members may vote. Should me merge this into one model only?

Action Items

Announcements

Adjournment

• Next meeting date/time:

Motion to close meeting

• Andrew van der Stock - Education strategic goal update.
• Michael - Motion to move primary responsibility of planning and execution of the AppSecUSA 2016 conference to the OWASP Foundation. Selection of core conference themes and speaker/proposal would be driven by the OWASP community.

All active board proposals are listed here

• [Tobias] - reopen communication with RSA to explore potential opportunities for OWASP outreach.
  • [discussion topic]
• [Matt] - hire a technical editor for a few months.
  • [discussion topic]
• [Jim] - Making public statements on crypto
  • "Even though 501c3 organizations *can* do some lobbying (as long as expenditures are not substantial), the IAB is careful not to talk about legislation or urge anyone to contact representatives about legislation." - Jeff Willams
• [Josh] - Funding request for Project Summit at AppSecUSA 2015
  • http://lists.owasp.org/pipermail/owasp-leaders/2015-June/014359.html
  • $10,000 requested
• [Jim] - Different Board voting models
  • We have both email and in-person voting models which are very different. For email, all members can vote. For in person, only present members may vote. Should me merge this into one model only?