Sean Aurti’s Budget Requests
Andrew responses to the budget requests:
Owasp learning gateway $100k full time staff. - Hire full time staff member to build out the learning gateway. [1] - Anything in reference to grant writing or gateway, should be on hold until an Executive Director is hired. The Executive Director can come up with a strategy plan.
Owasp grant initiative $100k full time staff - Hire full time grant writer to work on grants for OWASP. [2] - Anything in reference to grant writing or gateway, should be on hold until an Executive Director is hired. The Executive Director can come up with a strategy plan.
OWASP BLT development and marketing $5k, (12 monthly prizes of $100, $1200 + development) [3] This needs to be taken on has a generic process for more projects and at this time a little more work then we can do right now.
Owasp project kickstart. $10k - $100 to 100 projects to use Coderbounty on 2-5 of their Github tasks to get coding done. [4] My concern is that Code of Bounty is owned by Sean, so we need to be more transparent. It is quite a good idea, however it’s execution needs to be flushed and we could get it across the line.
Owasp innovation lab $250k [5] - This is 10% of the OWASP budget, so no.
Grant engine / Spurri $50k - development [6] - Again this is something that the Executive Director can set up a strategy plan for.
OWASP Hackathon sponsor $5k sponsor a hackathon with prizes and food for 2017 focused on OWASP [7] Like to see a Hackathon that can be a repeatable event. But since we have put so money into Project Summits this year the funding is not available. I believe that we should start planning to do something in 2018 and have a proper proposal submitted.
Fundraiser events / membership drive $300 per month $3,600 - Have a monthly membership drive / fundraiser, $300 for food and drinks.[8] This should be done Globally and work with Kelly, not focus on a single Chapter.
Volunteer portal project $50k - development of website.[9]
$30k for APAC tour $10k stipend for leaders Send 3 people with $10k stipend each. [10] - I am fine with this request idea, but does need more work. I feel it should be done like the Latam approach and would be a lot easier on the staff to support if it is within two weeks. Again the proposal needs more work. Tobias states that you need a strong volunteer team.
OWASP Mentor Initiative with HQ NY $6,000 [11] - I believe this is a good idea, but we need to set this up Globally and submit a formal budget.
OWASP Organizational Development Initiative with HQ Brooklyn $50,000 [12]
Matt Konda - my goal today, is there any of these that we should take action on today. Obviously, we can not approve all of the above, Andrew would there be one that we should pick that we should discuss in more detail.
Andrew van der Stock - I believe the Hackathon because we are already doing something like this. I think this could be delegated to Claudia to take on board.
Project Kickstart - my concern is Sean owns the Code of Bounty. If we could drive volunteers in our projects particularly Labs and Incubators would be fantastic. If we could figure out a way forward and get passed that issue of how do we actually reward people. How much money do we actually put up.
Matt Tesauro - in reference to the Project Kickstart, I already spoke with Sean Auriti and told him I am happy doing a RFP like we did for the Bug Bounty system, like we are using for Projects.
If it is an open RFP, I don’t see a problem, this way we give a vendor an option to say they I do or don’t want to play in that space.
Tobias Gondrom - I believe we need to discuss the Project Kickstart more if there is a conflict of interest. I do have an issue if someone is proposing something that actually puts money in their pocket.
Matt Konda - Sean if we could hear from you and let us know what you think we should advance with.
Sean Auriti - I believe that the Project Kickstart and the Mentor Program, because I believe that aligns with the goals of OWASP.
In reference to the conflict of interest, I am the incorporated for Code of Bounty but I do not take a salary it is a separate legal entity. Code of Bounty takes a 10% commission for the bounties and that goes to Code of Bounties not me.
Mentor Initiative - we already linked this to the Learning Gateway, we have code in place and mentors that are learning from each other and this is already in motion with Bev and global members. So this would be great to have funding to move this forward.
Tom Brennan - I like to point out that if the OWASP Foundation is unable at this time to approve certain proposals that these proposals can be proposed to Chapters and Projects for funding. I do believe these proposals line up with our strategic goal of training.
Bev Corwin - I am in favor of the Mentor Program. We currently have 75 active participants and still waiting for approval of the committee, for over a year.
The Mentor Program is where the Learning Gateway Project came from, it was membership driven. The Learning Gateway Project has helped build membership and helps get OWASP information out into the community.
We have submitted proposals, but they were not accepted. We did however have them with the WIA. In reference to WIA (Women in AppSec), it shows that women do better if they have a mentor program.
Josh Sokol - how will the money be used?
Sean - funding will be used for development, marketing and trips to events.
Development - is the timeline to see how the individuals are progressing.
Motion - I would propose that we approve the Mentor Initiative. The proposal need more detail in where the money will be spent. Tom Brennan seconds.
Josh Sokol - where is the metric, how do we measure the success of the program.
Bev Corwin - I think a measurement should be set up for all of the OWASP budgets. I would like help with that measurement.
Sean Auriti - there will be a goal tracking system
Bev Corwin - Noreen Whysel is the process of researching the development of the Learning Gateway.
Pathways - track the personal progression of the mentees.
Mentors - can define timelines.
Josh Sokol - without metrics it is hard to know what the specific objectives are. I am not seeing where the money is going.
Bev Corwin - the committee would have to design a budget and approve it and then submit it to the Board for approval before spending any monies.
Tom Brennan - I feel this aligns with our training strategic goal.
Bev Corwin - the Learning Gateway is also set up to generate revenue for the OWASP Foundation within a few years.
We are about a third into the big picture. For instance, Kelly and I were able to work with a few organizations to promote the training. Example: O’Reilly. Any OWASP Chapter is able to participate as well as investors.
The goal is to help successful pathways and sponsorship programs, partnerships with human resources departments of companies.
Matt Konda - I believe the proposal needs to be cleaned up and it moves forward as states in the goal, we would have Matt Tesauro get involved.
Motion - grant $6,000 to the OWASP Mentor Initiative run by Bev Corwin and Sean Auriti.
Josh Sokol - just to do the Mentor Initiative not the Learning Gateway Project.
Bev Corwin - the Learning Gateway is building around the Mentor Initiative.
Tom Brennan - I always state that we should start things locally and then move globally. This now should be an OWASP Project not a chapter allocation.
Josh Sokol - Tiffany, why has the Mentor Committee not been established.
Tiffany Long - I officially need the request to have a committee and the scope of the committee.
Bev Corwin - she will follow up with Tiffany, the original scope changed because we started the Gateway Learning Project. I will revise the scope and submit it to Tiffany asap.
Josh Sokol - request for amendment - that the $6,000 should be allocated to the pending Mentor Committee not the NYC Chapter.
Motion - to approve $6,000 to the Mentor Initiative via the Mentor Committee. Matt Konda motions, Tom Brennan seconds
Vote
Andrew van der Stock - yes
Tom Brennan - abstain (is a member of the Mentor Committee)
Josh Sokol - yes
Martin Knobloch - yes (shadow vote)
Michael Coates - yes
Tobias Gondrom - yes
Matt Konda - yes
Strategic Goal Training
Matt Tesauro - in reference to the strategic goal of training, I wanted to give the Board the right of refusal or suggestion regarding the issue of refunds for registrations. If we do a mass refund process the bank will flag as a high risk account.
I listed other alternatives, gift cards, etc.
The Board decided that this is an operational task and is comfortable with the staff handling it.
Crest International
Tom Brennan - just an FYI that I am currently on the Board for Crest International.
Kate Hartmann
Matt Konda - I wanted to publicly state that as many of you are aware that Kate Hartmann has resigned. I wanted to publicly thank her and let her know she will be missed.
Matt Tesauro is handling the transition plan.
Matt Konda - I will be sending an email out to the community.
Motion to adjourn meeting, Matt Konda motions, Josh Sokol seconds.
Slack