Website
Content migration by Chapters and Projects is ongoing with 91 of 284 Chapters (32%) and 90 of 154 (58%) Projects yet to migrate. Chapter page migration, along with new chapter activity can be monitored at https://owasp.org/chapters/status/
Meeting Details
- Date: Tuesday, June 23, 2020
- Time: 1:00 PM EDT – 2:30 PM
- Location: Remote
Call to Order
Board Members
Directors will be recorded when the meeting is called to order.
Guests
No guests listed.
Conflict of Interest and Anti-Trust Statement
As the Board consists of individuals from many competing organizations, OWASP and its Board shall abide by all applicable anti-trust and competition laws. To avoid any perceived or actual conflict of interest, or anti-trust concerns under US federal, state, or regulations, only the published agenda shall be discussed or voted upon, or amended as below. If there are any conflicts of interest, Board members are expected to disclose the conflict of interest and must recuse themselves from discussion and voting.
Changes to the Agenda
Changes to the agenda — unless otherwise prohibited by anti-trust or competition laws — including adding, altering, or tabling of motions is permitted by following Roberts Rules of Order (RONR 12th Ed) 41:63, which requires an affirmative two-thirds vote.
Approval of Minutes
None listed.
Pre-reading Material
None listed.
Reports
Leaders List
After several complaints of Code of Conduct violations, staff set the Leaders List (leaders@owasp.org) to Moderated mode. All new posts to that list are reviewed by staff and if there are no obvious violations, those posts are approved. Since FRI, June 19th ~50 posts have been approved, 1 post was declined for "intentionally injuring or impugning the professional reputation or practice of colleagues, clients, or employers." It has yet to be decided when the list will return to non-moderated.
Notable Projects
Elections: Staff is working on the 2020 Board Election milestone and timeline. Currently the plan is to open Call for Nominations on 15-August, the election starting on 1-October and ending on 15-October. The plan will be to recommend firm dates for major milestones as opposed to a varying schedule each year. “Membership Day” will be 30-September which will be the date to review the membership roster for eligible voters while also looking back to 30-September of the previous year to certify eligibility of Director candidates.
Trademark. As previously shared, the USPTO has granted the Registration of OWASP and OPEN WEB APPLICATION SECURITY PROJECT to the OWASP Foundation. Inc. Over the coming months, we will be developing an implementation plan for this change.
Corporate Credit: CapitalOne, without seemingly any notice has cancelled the MasterCard product that the Foundation uses for ongoing and travel expenses. A new solution has been secured for the Foundation through American Express.
Events Tool. A variety of enhancements were added to our Events tool including a real-time Google Sheet of registrations, more advanced handling of complementary discounts, and refund behaviors.
Owasp.org email management automation. We have been doing the feature requirements work for an automation that will suspend owasp.org email accounts. The two conditions for suspension are (1) membership expiration, and (2) resignation of a Leader who is not a member. There is currently no ongoing process to hygiene our email accounts exposing the Foundation to undue risk.
GDPR
This project is ongoing and we had hoped to launch this effort at the beginning of the month. As you may know, our primary email address has nearly 50,000 names on it. While this is impressive, unfortunately there is no record of subscriber opt-in to the list. This is a very big risk for the Foundation. We intend to have run a two-week campaign to that list requesting the opt-in for future emails from the Foundation.
Miscellaneous
- As always, most major staff projects are all listed with milestones at https://owasp.org/www-staff/
New Business
No items.
Slack