OWASP Board Meeting — November 4, 2015

. ED Updates

Community Manager Update Project Update Director Update Events Manager AppSecUSA Report: https://www.owasp.org/images/e/e8/AppSecUSA2015-Report.pdf AppSecEU 2016: June Rome AppSecUSA 2016: September DC + Northern Virginia Membership update Board elections completed.

Next Board Meeting November 18, 2015, 14:00-15:30 PST December 9, 2015, 15:00-17:00 PST

November 4, 2014 Board Meeting was adjourned at 20:15 CET by unanimous consent.

Paul notified that recording started. Meeting was called to order and Tobias Gondrom read a roll call of board members in attendance. Tobias notified everyone that recording started. Paul noted that have quorum with 4 board members at start of meeting. Community and staff attendance is noted above. Welcome to Tom Brennan, a newly elected board member whose tenure will begin January 1, 2016. Minutes from October 14, 2015 Board meeting were approved. Tobias asks for any objections. Josh moves to approve as written. Matt seconds. No objections. Action: Discuss benchmark at the next ED meeting. Action: Paul to coordinate strategic goals proposals. Action: Paul to continue to update budget with incoming proposals. Action: Paul, Matt, Tom and Jim to draft RFQ related to the website work. Fund Website Initiative: Matt, Jim, Josh, Michael, Fabio, Andrew, Tobias all yes. Tom yes. Motion from Tobias to close the meeting. Matt seconded. No objections. Meeting closed.

Benchmark Project Discussion Matt and Josh completed their actions of talking with Dave and Jeff. Josh takes action to have a separate meeting with everyone for the benchmark project. (Maybe next week) Paul notes that we would include staff for discussion around branding. Tobias suggests meeting next week at operations call.

Josh Sokol proposal to eliminate “At Large” Board Positions Josh - instead focus on Governance, Projects and Chapters Andrew - supportive. Would change the bylaws. Matt - wondering if it puts too much focus on the board. Josh - suggests it can change back to that. Paul - board leader is the evangelist for a strategic goal - focus within specific goals. Josh - support with enthusiasm, not force. Tobias - prefers approach of board deciding which three areas to focus on instead of writing rules to specify. Josh - for 2016, allocate a board member to focus on but not based on bylaws. Jim - these goals should be on every board members plate. Can’t really have board member in charge of operational staff related work. Josh - idea is not to take over management or reporting. Recruiting projects! Representing leadership Josh - OK to put aside and continue conversation. Paul - will check with staff and weigh in on the thread. 2016 Strategic Goals 2015: Projects, Chapters, Training Program Tobias asks Paul if we have updates. Paul points to staff updates in areas of Membership, Goals & Metrics from Noreen & Claudia, plus financial forecast into 2016. Andrew suggests adopting fewer goals and making sure that we are accountable. Example: Developer Outreach and Training Rope in the right people Tobias believes that we have succeed in certain ways. Josh - Suggests that we have succeeded with training and projects. Matt - Sees success and room for improvement and suggests to keep 3 goals but to implement them as Projects and track progress. Tobias - Wonders if we have different goals. Josh - talks about community engagement. Jim - losing volunteers because industry is expanding. Building a scalable platform is a full time job. Basically, pay a contractor. Andrew - Can we plan to bring 2-3 strategic goals? Josh - 1 strategic goal. Matt - brainstorm then choose top. Paul -> Take an action to brainstorm strategic goals. Andrew - Security Architecture Andrew - OWASP India meeting 2016 Budget Discussion Budget forecast - Background | Strawman Jim - supports technical architect hire and generally hiring to support goals. Matt - requests better information around how much we should be spending cash on hand. Tobias - sufficient cash reserves for 3 bad years. Paul to continue to update the budget with the proposals coming in. Bylaws Updates Andrew - no current updates but eager to update before the next election cycle. Paul - notes that election seemed to go smoothly with if any of the questions and concerns from last year. WIKI Jim - hire permanent full time person. Put the wiki behind. Potentially turn off the wiki. Fork the wiki. Andrew against moving to a static page or new wiki, just asserts that we’ll get more of the same. Jim wants to hire a leader and have them be dedicated. Jim also wants to have editorial controls enabled. Tobias - make this part of the plan. Website Initiative Matt - describes website initiative. Paul - get quotes from people based on creation of RFP and recommended companies from other in leadership role. Tom - feasibility study - 3rd party consultant, identification of workstreams, make it usable. Commission 3rd party workflow, help us. Josh - agrees with Tom. Jim - who is going to maintain it over time. Tom - allocation for 25K to get proposals. Then allocate additional budget and fix it. Tobias - can Tom, Matt and Jim work on an RFQ. Tom - yes.