OWASP Board Meeting — July 22, 2015

Chairman’s report –. No items. Vice Chair report – No items. Treasurer report - No items. Secretary report - No items. BoD Members at Large report - Andrew: N/A. Jim: No items. Michael: Updates at large: AppSecUSA - media tour took place this week.

Executive Director Report.

• ED Updates
  • Claudia Casanovas and Summer of Code
    • 8 students working with mentors. Weekly update from mentors. Mid term evaluation and final evaluation at the end of August.
    • Claudia engaged and quickly helping with the SoC.
    • Tobias suggests an update based on summer of code.
  • AppSec in Europe
    • Some delay but steady work with Seba, Mateo and Laura and others to get to a decision on Rome, Marriott. Finishing up budget.
    • One page executive summary of status is available.
    • Michael asks how the planning process worked.
    • Paul indicated that it started through the normal process, but when we didn’t get proposals some specific leaders stepped forward and in a hybrid way advanced the process.
    • Paul indicated that AppSecUSA 2016 Planning team might also require a hybrid resource model since Chapter volunteers have asked for more help from Staff and other Experienced leaders.
    • Jim asks Paul if we need additional staff. Paul indicated that the question is under review and consideration. Paul said that we might be able to get a better bang for the buck with a more permanent staff that would gain expertise and ongoing capability, as compared to the contractor hired to backfill during Event Mgr leave.
  • Strategic Goals and Metrics
    • Gathering metrics is a very manual effort but we now have a baseline.
  • Annual Report
    • Updated copy just came in this morning. Numerous typos. Virtual checking financials. Expect to share this with the board by Friday.
  • Financials:
    • https://drive.google.com/file/d/0BxjNZI6rYJRKbndBeVgyaDRvdUE/view?usp=sharing
    • Overall continue to be on track.
    • Approximately a million in the bank.
    • No expenses > 50K this quarter. Several around $35CK in expenses from AppSecEU and deposits for AppSecUSA 2015.
• Director update
  • Operations update
    • EStore automation nearing completion. DHL service implemented to cut International shipping by 30-50%.
    • Workflow for Events and Events Management
    • Overall seeing some efficiencies.
  • Annual Report - due.
• Membership update
  • Waspy awards in progress.
  • Board election underway. Is Kelly satisfied with the number of candidates.
    • Action: 3 board members not up for election this year will reach out to Kelly to help.
• Community Manager Update

• Scheduling of September board meeting. September 25, 18:00-20:00 in SF.
  • Action: Michael and Laura to confirm that there will be a meeting room available.
• Review Bylaws Section 3.02
  • Fabio - Notes that bylaws don’t indicate that the board candidates need to be members. Odd that we are pointing to a document from 2012 in a document from 2014.
  • Jim - provides link to that.
  • Paul notes that it should be included.
  • Action: Jim and Fabio to update bylaws.
  • Fabio: Item related to term limits. Proposing maximum of 3 consecutive terms.
    • Fabio’s general argument is that 8 years is too long. Giving the opportunity to see new people on the board.
    • Michael asks if there is a problem we are trying to fix. If it isn’t broken, don’t fix it. Sees the candidates being elected as a natural selection process that will work.
    • Josh agrees with Michael.
    • Jim agrees with Michael.
    • Tobias notes that we have good regeneration rate and some cycling. Also notes that he supports term limits but doesn’t see a problem.
    • Paul would like to work with the most recent editable version of the bylaws.
  • Push to next meeting so that Andrew can participate.

New Agenda Items

• Big Project Summit for next year.
  • Paul looking for guidance on how to handle the project summit. 100K - no plan.
  • Jim - can’t fund summit in current form.
  • Matt - suggests we might see a proposal being accepted but it just needs detail.
  • Jim - suggests having more smaller summits.
  • Paul and Tobias agree that smaller summits have been successful.
  • Josh - suggests instead of dismissing, propose form a committee.
  • Action: Communicate that it would be helpful to work through spending for 2016.
• Several examples of branding and presentation materials may not follow branding policy.
  • Paul and staff action: polite professional reminding that we have a policy.
  • Paul: Is there a need to escalate to compliance officer?
    • Generally agreed “No.” Neutral operations source will handle enforcing and communicating around it.

Next Board Meeting – August 12, 2015. Wednesday Time TBD.

July 22 Board Meeting was adjourned at 20:15 CET by unanimous consent.