OWASP Board Meeting — December 9, 2015

New Agenda Items - Recommendations as posted on Board Wiki page

Vote:
Andrew: Yes, Matt: Yes, Josh: Yes, Michael: Yes, Fabio: No, Tobias: Yes.

• Discussion around demoting benchmark.
  • Andrew moves, Matt seconds “Set the Benchmark project to incubator status instead of Lab.” Matt: Yes, Andrew: Yes, Josh: No,
    Fabio: Yes, Tobias: Yes, Michael: Yes
• OWASP EU Members:
  • Acknowledge and confirm the selection of 4 new Board members for OWASP-EU VZW: Tobias Gondrum, Adrian Winckles, Gary Robinson, Maarten Mestdagh
• Josh Proposal:
  • "At large members will be allocated one of three strategic focus areas, that being governance, projects, and chapters"
  • Matt: No, Josh: Yes, Andrew: Yes, Fabio: No, Tobias: Yes, Michael: Yes
• Andrew Proposal to Establish Audit Committee:
  Per: https://docs.google.com/document/d/1YxMu_IrjqfdH3hwDYQCcPJKAyxFImFmIh4WWcovJRsg/edit Andrew moves, Josh seconds.

Vote:
Matt: Yes, Andrew: Yes, Josh: Yes, Fabio: Yes, Tobias: Yes, Michael: Yes (Michael leaves)

• Motion from Tobias to close the meeting. Matt seconds. No objections. Meeting closed.

New RULES

Andrew: Yes, Matt: Yes, Josh: Yes, Michael: Yes, Fabio: No, Tobias: Yes.

    Discussion around Projects: 
            Simon questions support for projects.
                    How to do fundraising / handle funding.

Paying project leaders … need people to spend full time.
Johanna: Look for ways to make it possible
Andrew: Shared resource such as tech writer helpful? Johanna, yes. Josh: Notes that there is money and maybe we can help people use it. Dinis: Get people together to work and see amazing progress. Bring brilliant minds for 5 days under the same roof. Great commitment of OWASP to its projects. Andrew: Work to improve projects, Tobias also interested.

(Benchmark continued)

Johanna:

Andrew: Covers more testing domains from testing guide as it goes from Incubator to Lab.

                    Andrew:  Push to a vote.
                    Tobias:  Agrees with Johanna.  Think of the spirit of the meaning.
                    Josh:  Don’t feel comfortable voting on new criteria to one project.  Wants 

to vote rather to apply the rules to all projects. Wickers wishes Contrast never put out the marketing message. Real issue we have is the brand usage. Tobias: Two things:
Maybe project review team can be empowered. Marketing raised awareness that caused a bigger issue. Andrew: Propose changing the project proposal to be empowering the project co-ordinator. Johanna: Thinks it is unrealistic to review all of the projects. Dinis: Project went over the top, so it’s appropriate for the response to be over the top. Matt: Supports demoting the project based on further review. Talked with and believes Dave means the best but sees the community and believes that taking no action because of specific rules would be the wrong decision.

Tobias: “It comes to the attention of the board that the project does not fulfill the criteria from the project leader handbook. In light of the new information, we request a new review.”

Vote: “Set the Benchmark project to incubator status instead of Lab.” Matt: Yes, Andrew: Yes, Josh: No, Fabio: Yes, Tobias: Yes, Michael: Yes

EU Entity:
Sitting board members made. Acknowledge and confirm the selection of 4 new Board members for OWASP-EU VZW: Tobias Gondrom, Adrian Winckles, Gary Robinson, Maarten Mestdagh

Proposal to Eliminate “At Large” Board Positions Move “At Large” to “Chapters, Projects and Governance” Michael: “conferences” Tobias: “outreach” could include that and more. Paul: “including developer outreach” Josh: “governance” is important Andrew: “risk committee” Tobias: “assigned versus voted on?” Tom: “Will require updates to documentation - including bylaws.”

Josh: Updated proposal: "At large members will be allocated one of three strategic focus areas, that being governance, projects, and chapters" Andrew seconds. Matt: No, Josh: Yes, Andrew: Yes, Fabio: No, Tobias: Yes, Michael: Yes Passes.

Board Roles: Table for future.

Proposal to establish audit committee: Andrew proposes and moves to vote. https://docs.google.com/document/d/1YxMu_IrjqfdH3hwDYQCcPJKAyxFImFmIh4WWcovJRsg/edit

    Josh:  Seconds.  With revisement that it is the treasurer that sits on the committee.
    
    Vote:  
            Matt:  Yes,  Andrew:  Yes,  Josh:  Yes,  Fabio:  Yes,  Tobias:  Yes,  Michael:  Yes

Strategic Goals Tobias - remove funding proposals with the goals. Andrew - not committing to year on year funding, its ok. Matt - developer goals are still work in progress.
Johanna - goals should have results. Not actions. Andrew - continue to work on this and vote on it in January. Tobias - focus on top level headings Andrew - % basis allocation. Josh - ok with the headings. Fabio - headings are good. Andrew - to add to strategic goals.

Board Meeting Process Andrew - move to January’s meeting.

Discussion on Simon Bennett’s proposal on Board and Foundation Completed earlier.

Review draft budget, Goals statement and metrics Paul: Overall income may go down because we are being conservative. Andrew: Careful with cash reserve due to large investment of cash reserves. Josh: Line of credit? Paul: Application is still open. (Not completed) Andrew: Again, set aside overall budget and live within it. Andrew: Reviewing spreadsheets. What kind of staff recognition do we do? Paul: Not a great answer. Training. Andrew: Discrepancy in hosting budget and expenses. Want to get Matt back with costing of everything.

Review Automation of Project Review Paul:
Some great work by Kate and Claudia to capture project review and health reviews. Claudia: Since 11/12 have 7-8 volunteers. Should be done by the end of the week.

      Johanna:  hope to get results, including QA of testing.

Question Around the Chapter versus Central Planning Paul indicates progress with preplanning AppSec in 2017 and that there are candidates actively working on it in both US and EU.

Letter to the Community Around the Benchmark Matt asks for action item related to letter to the community. Timeline draft Wednesday get it out Friday. (Paul is on vacation this week)

Motion to close the meeting. Meeting is closed.

Next Board Meeting

• TBD.

December 9, 2015 Board Meeting was adjourned at about 17:10 Pacific by unanimous consent.